Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
File:                     3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa (raw, json)
Hash identifier:          WyGsSb4tnE3/lCzqASKiIRm/XQaxVvHGlMuFY7e96kU=
Subject key identifier:   14:0B:FA:8B:A0:6B:73:E8:A4:3A:A7:C4:53:DC:C5:F6:EB:09:F1:95
Certificate issuer:       /CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
Certificate serial:       1B5D5E37BFC9CA4F7720E5518EDB673C91FADE2C
Authority key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa
Signing time:             Fri 19 Apr 2024 05:02:29 +0000
ROA not before:           Fri 19 Apr 2024 04:57:29 +0000
ROA not after:            Fri 18 Apr 2025 05:02:29 +0000
asID:                     142328
IP address blocks:        103.169.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl
                          rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Mar 2025 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:5e:37:bf:c9:ca:4f:77:20:e5:51:8e:db:67:3c:91:fa:de:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E
        Validity
            Not Before: Apr 19 04:57:29 2024 GMT
            Not After : Apr 18 05:02:29 2025 GMT
        Subject: CN=140BFA8BA06B73E8A43AA7C453DCC5F6EB09F195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:f7:36:4f:3c:09:f6:48:d8:cc:4d:3c:13:
                    0e:27:e9:ec:07:83:ff:5b:97:a9:b6:65:a2:e7:82:
                    02:bc:7a:6b:10:44:59:ca:1e:2f:01:64:68:71:fe:
                    72:59:61:8b:cf:ed:83:a2:f3:fc:59:82:8c:47:ca:
                    89:62:22:98:61:a2:70:a0:26:52:c0:af:76:d5:9c:
                    5b:7b:fc:4e:3c:c3:5d:0c:3c:6f:28:00:f9:85:74:
                    d4:1c:f8:47:33:79:b3:b7:e4:4c:e1:be:81:c2:16:
                    12:bd:6b:21:7b:c2:6b:a1:87:aa:0b:c9:56:ee:0a:
                    12:f6:a7:a1:36:b9:98:30:8b:6a:aa:05:33:80:76:
                    11:a0:e1:d2:1b:db:b5:0a:ea:c8:e7:6c:90:61:16:
                    48:dd:44:8f:c8:f5:c8:f3:4d:7a:00:2b:30:d4:91:
                    a3:c4:9c:96:c2:8f:d8:77:91:31:40:a7:0f:16:18:
                    33:2d:8e:99:df:75:61:89:a6:b1:3c:27:4f:ca:a8:
                    5a:95:f3:7b:bf:c7:92:87:3d:29:df:e5:a2:73:1a:
                    8e:6a:fc:41:dc:98:e2:b9:76:5d:ce:e6:63:1d:53:
                    af:c7:e6:14:3b:f8:ec:86:4e:58:2e:ed:98:9c:9f:
                    f1:0f:99:da:10:f9:f0:17:55:8e:02:cc:50:4d:54:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:FA:8B:A0:6B:73:E8:A4:3A:A7:C4:53:DC:C5:F6:EB:09:F1:95
            X509v3 Authority Key Identifier:
                keyid:50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/3130332e3136392e31332e302f32342d3234203d3e20313432333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:59:db:03:dd:de:27:fc:fd:f6:80:7e:2a:1d:30:72:00:12:
         a5:fb:54:6f:df:3c:1d:43:dc:2d:3b:94:aa:29:9c:09:24:96:
         5c:5c:ba:d4:8b:a0:d5:55:ba:05:2b:8f:62:be:a4:a5:14:08:
         28:ff:ec:6e:8c:34:e8:42:aa:dd:21:2e:8d:8b:b1:23:4b:55:
         0e:85:35:4d:ca:e0:53:b5:d8:d0:e9:8f:34:ac:2b:19:6e:0b:
         51:9b:ea:57:a7:3f:cc:d0:6f:37:50:44:fc:de:c2:b0:78:f4:
         f2:e4:e7:ab:4a:ce:ff:f5:7a:b5:31:b9:5a:07:39:08:b7:0f:
         28:d1:b6:d0:35:02:b4:88:f1:0a:e9:6d:46:79:a9:15:c0:ed:
         23:80:a7:65:8a:be:82:cc:9c:92:46:01:ea:57:f7:6e:7b:73:
         74:a2:4c:c1:3d:d4:ef:93:3d:8c:ba:b7:32:8b:0e:89:64:6d:
         57:07:29:33:ee:e1:3c:a3:8b:f7:cd:89:ef:bb:d9:0a:ce:66:
         8e:48:45:b9:5d:d2:f7:26:a4:99:88:0e:bd:51:5e:27:16:e9:
         c5:21:71:91:d6:6e:09:9e:b7:df:86:8e:04:78:c4:bc:32:d1:
         ca:48:94:7d:e5:6a:81:9e:75:42:1b:9f:a0:17:12:0b:d6:0f:
         4f:90:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:54 2025 by rpki-client