Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          tfcjz81XEh/XIqkAJanW5aQ1R0jSMcwvf4FBPIv5K3g=
Subject key identifier:   06:CE:EC:A2:8B:30:13:37:80:05:DB:56:7D:46:5D:83:D7:5B:78:5F
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       54763EF28D0522E1FF799F613041C6772C2234AB
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 31 Jul 2023 00:02:38 +0000
ROA not before:           Sun 30 Jul 2023 23:57:38 +0000
ROA not after:            Mon 29 Jul 2024 00:02:38 +0000
asID:                     133811
IP address blocks:        103.52.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:76:3e:f2:8d:05:22:e1:ff:79:9f:61:30:41:c6:77:2c:22:34:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul 30 23:57:38 2023 GMT
            Not After : Jul 29 00:02:38 2024 GMT
        Subject: CN=06CEECA28B3013378005DB567D465D83D75B785F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:15:a2:d0:e0:05:8a:f1:fa:4b:f6:71:cd:
                    4a:1c:8b:eb:8e:9d:d3:db:2f:da:2b:a5:d5:9f:de:
                    8d:99:e1:a7:e5:7c:9b:4d:a1:4f:7e:c4:b5:33:82:
                    7b:70:a3:24:c5:ef:ce:3d:79:a9:a4:3f:21:d6:59:
                    60:4a:36:73:42:c8:a2:37:8f:c7:11:46:3c:03:74:
                    d5:30:c9:44:02:0f:23:e3:ad:95:0c:5f:f3:3a:93:
                    24:ab:6f:84:f7:a4:61:40:5c:d8:af:21:30:b2:df:
                    a7:ea:5b:d2:a7:6d:21:f1:80:02:83:a1:36:84:32:
                    1f:ce:88:35:72:21:f0:0a:74:17:64:60:10:2b:d4:
                    1a:ac:d7:13:cb:5c:61:93:9a:43:e4:45:a8:4f:6f:
                    7c:59:2d:81:20:07:82:86:ac:cc:14:f6:91:85:ee:
                    0f:07:49:9f:6d:e9:3a:58:c6:3d:46:d1:a7:bb:b2:
                    ac:bd:8a:8a:39:e9:79:cc:5b:10:01:88:f5:b1:f7:
                    d3:34:a5:87:0b:5d:7b:1e:d6:ee:7f:9c:d6:4b:62:
                    e0:24:e5:3b:72:c0:f0:0b:a7:0c:05:b7:ae:70:e0:
                    aa:51:55:f0:76:20:8d:8b:4e:b2:db:6e:f5:77:6c:
                    ac:3b:97:1f:ad:29:62:7a:3e:fc:4d:63:37:d2:10:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:EC:A2:8B:30:13:37:80:05:DB:56:7D:46:5D:83:D7:5B:78:5F
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:2c:07:15:61:95:83:01:da:8a:14:c1:23:6e:74:a7:35:
         ee:4b:71:fe:d3:82:d2:f4:b8:30:2f:ef:05:64:17:1f:a9:06:
         82:41:6d:eb:c2:c5:e7:75:5d:b8:9c:6a:99:1d:a1:2a:d1:39:
         ba:f5:1f:39:a4:db:45:65:d7:15:e0:d3:af:97:c2:f6:dc:79:
         c0:3f:f9:4d:ab:f8:09:04:74:13:89:c5:af:fc:5e:71:ab:d5:
         a4:f9:92:df:c2:d9:81:18:f8:e3:80:71:cf:25:18:ee:d2:b7:
         ed:4c:36:b4:39:99:a9:42:2c:6a:9e:72:c2:02:7c:a4:aa:08:
         90:10:24:d6:07:c1:f7:2a:11:7e:6c:b7:71:d9:c8:06:27:cd:
         e2:46:8e:f7:31:2e:06:5e:55:ac:92:02:51:3f:77:b6:be:79:
         0a:e4:11:30:32:72:51:3d:0d:ec:15:4d:1b:ec:e0:da:d3:05:
         3a:ce:1a:55:5e:94:f8:c0:24:83:1d:41:96:c8:d3:cc:03:3e:
         db:03:7a:17:0c:d6:2e:7c:4c:9b:8b:7f:5b:03:8a:d4:ad:2b:
         da:93:aa:e8:1a:30:ee:89:12:6a:1b:16:89:86:4d:12:18:5d:
         5c:3f:83:2d:c7:86:c5:e3:c6:49:4c:11:89:7d:c1:02:39:d8:
         57:a1:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:27 2024 by rpki-client on console-ams.rpki-client.org