Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          RrKOpTzYJ3IFEMD/6iY5TFfo3HvIs5E+ZE/1N3j2zJs=
Subject key identifier:   C5:E4:BC:31:B9:B5:89:50:5D:C2:B8:4A:5F:25:CD:07:08:94:1D:C9
Certificate issuer:       /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial:       282CB470F7A92863F9286B599F3B08D58E1C9C25
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 21 Jun 2024 07:01:16 +0000
ROA not before:           Fri 21 Jun 2024 06:56:16 +0000
ROA not after:            Fri 20 Jun 2025 07:01:16 +0000
asID:                     9341
IP address blocks:        103.190.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
                          rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2c:b4:70:f7:a9:28:63:f9:28:6b:59:9f:3b:08:d5:8e:1c:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
        Validity
            Not Before: Jun 21 06:56:16 2024 GMT
            Not After : Jun 20 07:01:16 2025 GMT
        Subject: CN=C5E4BC31B9B589505DC2B84A5F25CD0708941DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:9c:92:c5:4b:5d:16:b7:90:4d:71:59:96:
                    1c:c0:4f:bc:fa:a5:6a:64:4e:ba:28:f3:0d:65:fd:
                    0f:9a:4e:d7:80:a2:b2:04:5b:ea:8e:09:31:28:f5:
                    82:74:61:a2:ff:d1:b1:54:29:cc:f2:af:63:db:fb:
                    d4:1a:16:ac:c3:fb:bb:d6:df:02:ec:1f:01:34:8e:
                    ff:17:49:36:5c:9e:d9:3e:e7:8f:ff:25:fa:e4:0a:
                    14:9a:60:93:df:9c:db:3e:46:94:e0:1a:88:1d:61:
                    16:e7:82:07:21:98:64:67:4c:c7:43:51:b8:26:d2:
                    4b:aa:1f:15:b7:03:2b:4d:e9:3f:4d:49:1d:73:a6:
                    ce:21:31:3a:ce:00:90:00:ed:ca:4c:13:a9:ad:9c:
                    94:54:b0:04:6b:bf:07:7d:38:56:bc:df:81:74:d7:
                    19:70:da:e4:f8:ad:7f:c4:f3:1f:15:60:b5:4e:fd:
                    f1:a3:24:17:e3:81:d6:20:ca:14:c5:35:5d:4f:06:
                    59:24:77:51:8b:7c:3e:da:e1:59:33:9f:d6:ed:1c:
                    1f:07:77:04:71:6f:d8:06:8f:52:e0:11:73:57:9c:
                    79:57:37:4e:a1:50:e4:7e:c3:fd:52:c0:f5:8c:77:
                    4c:d2:86:03:f7:3b:81:83:a1:b0:cd:5f:a7:7f:18:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:BC:31:B9:B5:89:50:5D:C2:B8:4A:5F:25:CD:07:08:94:1D:C9
            X509v3 Authority Key Identifier:
                keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:b8:14:39:df:7f:6a:1d:e7:74:aa:99:54:87:d9:5d:a6:
         16:31:e4:4a:9e:28:dc:30:85:26:ab:b6:d4:49:d0:84:a7:3c:
         74:22:53:c2:d4:6b:4a:0e:bd:53:ba:ff:36:8d:f0:d6:6d:a0:
         3a:03:bb:77:bb:fe:9e:a4:fb:e0:d9:92:a6:0f:5c:0c:6e:bc:
         f7:34:8f:bc:33:9e:6b:33:05:9f:cf:0a:58:fe:0c:d8:89:fa:
         82:a7:7c:c5:01:c4:79:1e:86:05:e1:e0:0f:d3:64:55:9a:80:
         07:a9:04:00:e8:fa:d3:9a:b1:b2:bd:59:fd:5b:31:7b:46:5f:
         56:d3:4c:0b:3e:39:58:13:14:47:18:55:42:46:3a:71:f4:13:
         d6:71:8c:04:75:39:5a:a7:37:da:95:2c:65:a9:82:cb:74:60:
         26:b3:9c:b6:80:57:79:6b:7c:79:21:5e:03:2e:91:cc:0b:17:
         d3:6c:74:53:89:1b:41:98:e1:8a:1d:16:f4:48:bf:8e:fd:4d:
         d7:93:11:c7:59:36:29:4d:c2:83:32:f9:4f:9a:0a:5e:ea:08:
         b2:1d:83:80:3b:d6:f8:66:d5:6b:8b:5f:76:30:f3:11:56:f9:
         33:0c:6a:2e:a7:83:50:53:d8:52:5c:3d:e7:6c:35:cc:84:bd:
         43:ad:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org