Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          jRvjNPw/ZxzPkFc3sQeaNLKo3ENvTo+cZERt4gNCdq0=
Subject key identifier:   56:4A:D1:6B:C5:A7:EE:80:A6:C1:F7:70:7E:B1:D8:24:7D:4F:97:C6
Certificate issuer:       /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial:       462987914650ABCA928311D85C94229BAC18922E
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 21 Jun 2024 07:01:16 +0000
ROA not before:           Fri 21 Jun 2024 06:56:16 +0000
ROA not after:            Fri 20 Jun 2025 07:01:16 +0000
asID:                     9341
IP address blocks:        103.190.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
                          rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:29:87:91:46:50:ab:ca:92:83:11:d8:5c:94:22:9b:ac:18:92:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
        Validity
            Not Before: Jun 21 06:56:16 2024 GMT
            Not After : Jun 20 07:01:16 2025 GMT
        Subject: CN=564AD16BC5A7EE80A6C1F7707EB1D8247D4F97C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c3:fc:cb:8c:d1:c6:f9:7c:2b:67:46:65:9d:
                    65:9d:b9:0f:fa:b2:ec:82:2c:74:45:22:af:24:40:
                    ed:f4:1c:27:eb:40:df:39:7e:f1:02:4d:04:e8:d2:
                    3f:e2:4f:f4:d4:63:a3:72:8d:d5:87:29:b6:a7:ee:
                    be:69:1f:e9:bf:42:c3:cb:91:a4:76:7b:22:89:5a:
                    8f:e9:02:59:2b:af:52:97:1b:a4:c4:00:ef:6d:b0:
                    6e:11:ff:b4:80:99:32:d4:a7:aa:37:03:d7:49:65:
                    ba:bf:0c:34:fa:0b:79:25:64:05:12:7c:4d:a5:be:
                    67:a8:6e:31:a8:d1:d4:b2:ed:3d:13:3d:28:df:08:
                    90:02:dc:f0:84:6f:10:ad:cc:48:f8:4f:4c:68:6d:
                    0f:9f:58:46:f6:2b:ff:f2:33:6e:49:7d:7c:28:76:
                    3d:90:1a:8e:7a:8a:7d:a2:ff:8f:29:89:f3:c9:2d:
                    26:d9:44:2c:4d:1d:5f:80:4d:1e:aa:aa:ea:37:ca:
                    d3:c0:e5:ef:ec:0d:c0:ef:1c:16:c0:d9:ed:7c:af:
                    04:bd:77:bd:ad:21:f5:a4:9f:72:ff:28:09:03:c2:
                    93:a5:83:ff:17:62:61:4f:19:9a:ae:dd:bd:80:57:
                    7c:74:24:86:06:8f:e4:cb:22:5c:6a:fa:36:49:af:
                    0b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4A:D1:6B:C5:A7:EE:80:A6:C1:F7:70:7E:B1:D8:24:7D:4F:97:C6
            X509v3 Authority Key Identifier:
                keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:94:04:01:d3:b2:c0:b7:d9:7f:9b:90:5a:7d:b7:27:7d:26:
         63:ca:c3:fd:35:0d:12:29:80:d8:3a:98:38:cc:d9:9b:b7:95:
         2a:47:34:25:4d:61:c9:a0:61:6f:7e:45:d6:eb:ef:b0:00:46:
         fd:1e:76:01:6b:ae:c9:03:e0:bd:68:7e:93:3e:36:f5:da:f5:
         e3:8b:39:1f:5b:13:f3:b2:83:f7:68:e9:77:70:a5:04:ac:f9:
         02:1c:4c:d5:9a:fe:b7:ac:1a:5d:d3:69:9d:8b:39:bf:2c:af:
         c9:e9:79:bd:ef:d8:2e:24:8e:72:d5:cb:df:5c:4b:68:b1:58:
         82:f5:4d:8c:e8:83:a9:d6:f9:1e:a1:b7:b1:ca:0e:08:60:f0:
         20:6d:2b:7f:24:fc:c6:f2:b3:f1:29:d0:df:6a:7f:15:24:05:
         b9:a6:cc:2f:cc:9c:ba:6f:a5:03:b6:ba:c7:a9:f4:92:d3:ba:
         54:b2:4d:2b:55:ed:8d:21:cc:2c:18:bc:17:16:ce:ea:0e:c6:
         39:01:6e:7e:21:8c:dd:07:44:74:3b:e2:fa:df:fb:df:36:8c:
         bd:c9:45:2d:45:f3:cb:3d:cc:39:19:28:09:3d:9c:60:49:41:
         a6:f1:d7:60:c8:c9:c5:8f:a1:cf:12:9c:03:dc:e6:da:c3:4a:
         ed:a2:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org