Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa
File:                     3130312e35302e32302e302f32342d3234203d3e20313336313038.roa (raw, json)
Hash identifier:          Z/vhqzRK2E34P6LIN8S8nqYVKvvu1P8GgSzY5FNndB4=
Subject key identifier:   86:6F:87:FE:E5:70:66:4B:48:DC:04:11:FD:21:CC:0E:A3:90:37:E9
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       22DDD617E9DE6178AF4BAC71C1F20C43FDB40B4F
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa
Signing time:             Tue 30 Jul 2024 02:59:46 +0000
ROA not before:           Tue 30 Jul 2024 02:54:46 +0000
ROA not after:            Tue 29 Jul 2025 02:59:46 +0000
asID:                     136108
IP address blocks:        101.50.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dd:d6:17:e9:de:61:78:af:4b:ac:71:c1:f2:0c:43:fd:b4:0b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 02:54:46 2024 GMT
            Not After : Jul 29 02:59:46 2025 GMT
        Subject: CN=866F87FEE570664B48DC0411FD21CC0EA39037E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:6e:bb:a9:68:02:7e:71:62:82:64:89:df:
                    04:fc:15:8b:26:31:8f:8d:4a:eb:2b:af:0b:e5:1c:
                    5b:32:cb:d5:68:7e:a9:48:a6:62:e6:d2:1b:4f:5e:
                    75:3c:9a:84:a2:ca:37:c7:26:59:d0:09:12:70:d5:
                    48:e7:24:c4:82:93:8f:59:e5:c4:04:2f:21:25:6f:
                    48:4e:5a:d7:e4:d1:b2:cd:a0:54:b9:97:69:f8:6a:
                    49:4f:f5:b6:79:74:bc:ce:8b:f4:6e:a2:80:38:f2:
                    24:23:80:6a:7f:42:04:7b:be:5b:23:03:73:17:3f:
                    aa:2a:86:33:e0:5a:50:b2:e7:c2:7d:f5:e2:2a:e8:
                    56:87:70:a7:18:07:e5:df:bb:78:f4:d3:ca:7c:f9:
                    c9:a4:9e:18:8b:e5:f9:cc:24:be:7a:a0:6e:90:a5:
                    42:d4:c3:ab:a5:20:32:1c:87:96:6b:cf:fb:53:b9:
                    e6:ab:f9:a2:d2:23:bc:fc:6e:ab:d5:4d:8e:6e:ee:
                    73:88:57:b8:8e:19:10:ea:66:fb:10:cc:84:45:1f:
                    60:da:d2:5f:2b:61:ca:ca:2d:d9:b5:40:cd:02:1a:
                    12:0a:0c:13:68:d4:7f:68:d8:97:47:3f:f5:53:60:
                    10:65:e0:5f:f0:7d:0b:f3:0a:bd:bb:60:85:87:d9:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6F:87:FE:E5:70:66:4B:48:DC:04:11:FD:21:CC:0E:A3:90:37:E9
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32302e302f32342d3234203d3e20313336313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:81:be:57:2e:b4:06:dd:3f:22:bb:28:21:3a:1e:8d:3a:
         81:44:aa:81:c7:72:a4:f6:af:1f:78:81:7f:b8:fd:08:c8:89:
         7a:02:10:c0:06:38:e7:fb:4f:82:b1:b6:e2:fc:00:f5:30:3d:
         f3:7a:cf:83:e2:4f:e0:11:f2:e7:4a:47:d8:df:ce:ae:73:f4:
         92:58:dd:e0:12:a0:36:5f:1e:78:5b:25:55:a0:d1:8c:8a:b8:
         af:91:d1:ec:e9:7c:f1:1b:70:04:5a:f5:eb:5f:03:53:73:b1:
         31:3f:cf:2a:07:29:4d:e8:37:24:91:0f:18:48:7f:7b:21:a1:
         d3:6e:6a:cd:c5:50:99:bf:fd:fc:ad:1c:fa:91:f3:03:dc:b1:
         f7:ba:3a:b6:cf:9b:50:04:f9:d0:fd:d9:4b:4e:3d:7e:82:a1:
         0d:77:42:94:4c:3c:6f:fb:b8:99:25:59:3a:1f:35:18:42:95:
         5c:2a:06:b0:bc:fa:53:86:95:ca:ed:a9:92:08:cc:ff:e2:7f:
         48:91:17:45:c4:2c:2f:07:2d:96:cf:37:af:cd:8a:e3:72:23:
         9b:25:b9:07:46:c4:11:52:16:bb:e7:6c:cb:ac:f0:a4:0c:26:
         ff:5c:e6:a7:ad:7d:b1:d7:78:b1:e8:87:2e:c3:1d:3b:a2:18:
         63:c9:c2:d7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIt3WF+neYXivS6xxwfIMQ/20C08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MzAwMjU0NDZaFw0yNTA3MjkwMjU5NDZaMDMxMTAvBgNV
BAMTKDg2NkY4N0ZFRTU3MDY2NEI0OERDMDQxMUZEMjFDQzBFQTM5MDM3RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5267qWgCfnFigmSJ3wT8FYsm
MY+NSusrrwvlHFsyy9VofqlIpmLm0htPXnU8moSiyjfHJlnQCRJw1UjnJMSCk49Z
5cQELyElb0hOWtfk0bLNoFS5l2n4aklP9bZ5dLzOi/RuooA48iQjgGp/QgR7vlsj
A3MXP6oqhjPgWlCy58J99eIq6FaHcKcYB+Xfu3j008p8+cmknhiL5fnMJL56oG6Q
pULUw6ulIDIch5Zrz/tTuear+aLSI7z8bqvVTY5u7nOIV7iOGRDqZvsQzIRFH2Da
0l8rYcrKLdm1QM0CGhIKDBNo1H9o2JdHP/VTYBBl4F/wfQvzCr27YIWH2QNhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhm+H/uVwZktI3AQR/SHMDqOQN+kwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzIzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGUyFDANBgkqhkiG
9w0BAQsFAAOCAQEAKvmBvlcutAbdPyK7KCE6Ho06gUSqgcdypPavH3iBf7j9CMiJ
egIQwAY45/tPgrG24vwA9TA983rPg+JP4BHy50pH2N/OrnP0kljd4BKgNl8eeFsl
VaDRjIq4r5HR7Ol88RtwBFr1618DU3OxMT/PKgcpTeg3JJEPGEh/eyGh025qzcVQ
mb/9/K0c+pHzA9yx97o6ts+bUAT50P3ZS049foKhDXdClEw8b/u4mSVZOh81GEKV
XCoGsLz6U4aVyu2pkgjM/+J/SJEXRcQsLwctls83r82K43IjmyW5B0bEEVIWu+ds
y6zwpAwm/1zmp619sdd4seiHLsMdO6IYY8nC1w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org