Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa
File:                     3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          xnJYQdFC1/vH1AegsM4MgkXEa7urffCYTGCNg/x/pj4=
Subject key identifier:   26:20:F5:A0:26:84:70:12:60:E3:C7:2E:92:34:C6:58:02:F6:6A:61
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       7F0F77A8D455E4E8C2B14D493D4290B55B4891AE
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 31 Jul 2023 00:13:33 +0000
ROA not before:           Mon 31 Jul 2023 00:08:33 +0000
ROA not after:            Mon 29 Jul 2024 00:13:33 +0000
asID:                     63872
IP address blocks:        103.52.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 17:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0f:77:a8:d4:55:e4:e8:c2:b1:4d:49:3d:42:90:b5:5b:48:91:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul 31 00:08:33 2023 GMT
            Not After : Jul 29 00:13:33 2024 GMT
        Subject: CN=2620F5A02684701260E3C72E9234C65802F66A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:5f:d0:f7:d2:52:87:5a:13:5a:76:90:a1:
                    ac:b7:62:51:05:39:16:e1:d7:e4:d3:8f:66:ec:3b:
                    f4:b7:6c:b5:6e:db:dd:50:ba:e8:2e:26:60:aa:b6:
                    3f:01:24:66:bc:42:af:3e:5c:99:bb:94:38:87:e1:
                    62:a0:ba:82:5a:ca:4e:c5:c7:05:c0:94:22:c3:1c:
                    41:6a:62:cf:ab:13:0f:98:86:73:cf:12:5a:85:63:
                    0e:d0:83:f0:59:d0:e8:58:bf:d0:96:3f:b9:a6:0b:
                    7d:5e:ad:2d:6e:4d:e0:9f:5c:95:b8:f5:ee:a4:72:
                    06:c3:06:4b:53:73:c0:f9:2b:a8:69:97:d6:2d:7b:
                    2f:a0:5b:b9:db:0c:73:a5:bb:81:7e:78:8b:06:45:
                    03:25:d5:68:a7:ac:07:0b:7b:f0:07:08:38:7c:ea:
                    57:6c:09:a6:a9:f2:3a:2e:5d:1b:b9:4a:76:1e:b7:
                    05:d2:b5:7e:74:c3:a8:d2:2b:03:e6:4f:22:65:be:
                    fc:6c:c7:34:54:d0:bb:a0:96:53:73:20:90:a5:60:
                    80:54:f6:df:5b:25:99:e4:1e:cd:0c:75:96:da:c6:
                    62:ad:43:8f:9e:f5:fa:8a:65:c8:b4:a6:17:39:79:
                    3b:00:5d:2a:e6:6b:f8:89:4d:17:64:17:64:db:06:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:F5:A0:26:84:70:12:60:E3:C7:2E:92:34:C6:58:02:F6:6A:61
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:01:63:07:9c:86:58:da:99:67:4e:f2:8e:29:0e:c3:b8:78:
         bd:4f:82:ef:4d:b1:92:37:d4:8b:ce:8d:f4:d2:55:3c:3d:24:
         e6:48:b4:7c:0f:2b:e2:2b:14:22:20:a4:63:10:31:18:23:bf:
         24:75:08:f0:9d:35:71:dc:ed:a8:5b:53:25:23:12:1f:3f:bb:
         ed:f7:6d:82:53:18:a3:4c:0d:a2:09:40:24:1e:6c:ea:a9:4e:
         98:8c:2a:5c:fc:5b:0e:92:bb:23:2b:42:23:d7:89:c8:46:23:
         d7:18:36:33:e3:b6:40:fc:8e:07:1e:6e:e9:d2:f6:f5:fe:5c:
         26:a9:fd:c6:bf:dd:7a:d2:2b:dc:2c:48:b0:27:00:21:12:d2:
         b3:b1:56:f8:c1:b7:47:64:1f:9a:01:d1:97:b7:14:ad:77:df:
         af:0e:37:43:38:60:e1:81:f6:81:07:e5:63:a6:60:e2:eb:6b:
         b5:0a:ce:1d:fc:61:60:67:f5:2f:42:31:5c:b4:bb:7d:66:fd:
         78:2f:76:04:ad:67:4e:73:c1:bf:e9:75:65:b3:14:1a:0b:05:
         a3:c6:fa:0d:06:53:a1:43:1e:76:7a:5f:e1:f9:fb:ad:79:a0:
         02:c1:91:58:08:f4:78:22:e8:75:fa:fc:37:87:a8:cc:9a:aa:
         a9:1a:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org