Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
File:                     3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          2rc5yHScrsGXt49l9WGSkOsRwc5HBfIrfbId/MVBY1Q=
Subject key identifier:   DC:B4:AD:43:CB:4A:43:71:73:05:62:C6:1E:22:FF:B6:BC:F5:91:C1
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       27E89A0FDD5ED8C380839CE622B0FD4B3D97F230
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 31 Jul 2023 00:13:33 +0000
ROA not before:           Mon 31 Jul 2023 00:08:33 +0000
ROA not after:            Mon 29 Jul 2024 00:13:33 +0000
asID:                     63872
IP address blocks:        103.52.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Apr 2024 00:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e8:9a:0f:dd:5e:d8:c3:80:83:9c:e6:22:b0:fd:4b:3d:97:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul 31 00:08:33 2023 GMT
            Not After : Jul 29 00:13:33 2024 GMT
        Subject: CN=DCB4AD43CB4A4371730562C61E22FFB6BCF591C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:61:14:1a:1d:40:63:5e:a9:e3:91:61:4a:
                    af:90:85:f2:a9:90:d9:40:98:6c:da:87:59:e3:88:
                    7e:c7:3c:d8:3d:06:0b:8f:ee:00:5f:5c:a2:82:27:
                    5f:24:14:94:9d:a9:88:10:36:22:2d:83:2a:4e:99:
                    bb:a8:7d:4c:6b:c2:fd:84:51:21:82:df:b5:e6:1a:
                    f7:b6:49:57:66:0d:6c:eb:2d:4c:20:69:e0:bb:c7:
                    00:c4:04:16:7d:bb:16:93:bf:35:d6:ed:94:c6:32:
                    3f:18:57:31:af:fc:2a:c1:b2:5b:6a:6f:f1:ce:7c:
                    a5:36:8b:14:61:d3:96:ce:d2:87:35:40:f3:3d:bd:
                    c4:09:df:62:6d:f8:20:18:e5:6c:26:eb:69:57:98:
                    c5:3d:f4:75:07:c8:0e:6d:d8:9a:6b:80:6b:df:38:
                    7a:d0:17:b5:87:c6:3c:c2:b0:43:e8:50:76:f7:c6:
                    a0:21:25:9d:1b:e8:b2:70:95:56:3e:82:91:9d:c8:
                    10:21:0e:03:09:84:52:5f:69:bb:46:a6:bf:78:b1:
                    db:8d:15:d6:f7:8f:66:0b:8b:bd:97:36:87:f9:70:
                    77:af:2f:9b:7d:c0:bf:e2:ec:dc:2c:48:c0:83:90:
                    7e:c1:25:ca:78:e0:a6:61:62:8d:c0:2f:a4:ee:b0:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:AD:43:CB:4A:43:71:73:05:62:C6:1E:22:FF:B6:BC:F5:91:C1
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:a3:04:dd:ed:5a:12:c5:df:3d:ac:64:c6:d1:d6:e5:3d:
         18:8b:23:1a:af:15:17:56:1a:ac:ba:b7:b4:25:af:fb:b1:de:
         1d:1e:0c:3e:a8:25:a2:7e:21:1a:a0:79:9d:f6:94:7c:34:10:
         1c:23:31:6d:e9:ee:63:bc:fd:c6:35:79:aa:3c:d3:46:b3:3c:
         c8:68:a2:6c:cf:f9:58:7e:e0:82:85:f6:5e:f5:2a:65:47:d0:
         fd:45:9b:34:ee:48:a0:7a:e0:00:79:be:78:37:68:29:ee:17:
         8c:02:c8:9b:2f:b4:c1:c6:a9:8d:c5:41:19:8b:f0:29:32:52:
         e7:6c:7f:23:cf:08:48:25:64:6b:37:4f:58:df:b9:37:d7:88:
         ba:1c:7b:bc:83:57:4b:f3:b5:70:cb:06:a2:a5:32:7c:0d:d6:
         e6:0d:5a:91:6c:69:1b:89:c6:8c:ad:b4:dd:37:97:52:ab:31:
         a0:34:4b:d7:f5:78:33:93:f9:eb:40:fc:d2:7d:49:a3:80:83:
         59:da:9c:a7:40:9e:e1:e8:8a:23:34:f4:be:4b:5f:8a:38:44:
         df:6c:2e:0f:e5:87:d0:57:40:ed:9d:90:1f:05:02:98:0a:01:
         38:1e:61:54:98:c5:ec:16:17:26:01:1e:ff:71:91:e3:d1:a9:
         c5:86:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 15:09:15 2024 by rpki-client on console-fra.rpki-client.org