Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          RKcUNpab4bfxk9EEDFshd9ImMg7akpinO+JFrQoi3DY=
Subject key identifier:   9A:66:8A:5A:F8:3B:6C:3E:A1:65:B6:D5:8C:14:FF:98:0E:FF:C2:E8
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       77161498800F10D5876168337CC7DA37CF11C9BF
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 31 Jul 2023 00:02:38 +0000
ROA not before:           Sun 30 Jul 2023 23:57:38 +0000
ROA not after:            Mon 29 Jul 2024 00:02:38 +0000
asID:                     133811
IP address blocks:        103.52.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:16:14:98:80:0f:10:d5:87:61:68:33:7c:c7:da:37:cf:11:c9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul 30 23:57:38 2023 GMT
            Not After : Jul 29 00:02:38 2024 GMT
        Subject: CN=9A668A5AF83B6C3EA165B6D58C14FF980EFFC2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:e7:60:f7:89:b5:30:8a:08:c9:9f:67:f6:
                    78:cf:16:c4:28:1d:0d:64:7e:68:26:12:ff:7b:46:
                    4a:2c:9b:ab:37:c3:4d:aa:4e:1c:32:13:cc:0f:a8:
                    48:2c:38:60:c3:1b:d4:3b:d6:36:73:2f:95:03:14:
                    9c:38:3f:b9:b4:b7:c8:ad:11:c8:e0:bf:f0:73:5a:
                    50:a8:b7:49:bb:b8:26:66:ff:5f:4e:1d:25:cb:0c:
                    79:8a:14:4a:00:f8:59:a5:9a:44:82:3a:e2:af:c9:
                    4e:50:f6:ee:a8:c8:e8:f0:71:25:5b:62:3a:ef:8b:
                    d0:e9:b8:51:7d:60:4d:a4:28:56:8c:b3:0c:50:d1:
                    d6:25:cc:b3:4b:47:6c:55:d9:ec:37:26:0b:e2:9c:
                    5a:3b:27:a2:5e:cb:0b:e0:15:18:4a:db:b8:23:1c:
                    a1:56:31:61:2f:24:b9:05:e1:37:65:b7:d6:14:64:
                    9b:41:44:24:76:c0:b7:ff:35:92:2d:9b:26:0b:5f:
                    bc:3c:2d:23:80:a8:26:1b:6e:0c:a5:eb:04:e4:e3:
                    0e:7a:ec:f1:ab:5c:bc:90:54:e6:b1:15:76:4b:04:
                    7d:4f:b3:28:f4:f0:fa:b4:6c:b2:17:6a:c6:8c:db:
                    e3:71:11:05:a1:3c:62:07:e1:a2:25:39:d4:12:20:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:66:8A:5A:F8:3B:6C:3E:A1:65:B6:D5:8C:14:FF:98:0E:FF:C2:E8
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:53:ce:ea:a4:54:7f:53:69:90:13:71:bc:06:cf:a4:34:
         22:ec:7a:ae:6a:19:5f:96:ae:54:89:c6:d3:2d:4e:b2:a2:3d:
         2e:6e:63:32:48:e2:4e:30:4e:eb:ea:e7:eb:f2:d8:e1:64:7f:
         d4:3d:1c:36:9f:3c:33:f2:5f:98:e7:b4:ec:0e:b1:f8:ba:3c:
         4d:91:2f:97:5a:8c:9a:fa:8c:74:09:b4:6d:72:0c:f7:1a:34:
         97:fa:a5:93:14:88:e8:1b:fd:10:a2:c1:91:67:9b:b6:a3:44:
         f6:c3:a1:d5:ab:e0:60:59:14:1e:7a:2e:52:c4:1d:d7:a4:bf:
         66:73:db:da:69:15:16:5c:75:29:33:74:07:09:d1:98:30:b7:
         7f:0e:c8:b3:4d:a4:2c:a0:f6:49:f4:45:76:98:cc:55:c0:ee:
         67:00:e9:f4:20:fb:2c:03:15:64:cc:fe:90:5b:60:db:ca:52:
         c4:8d:1f:50:1e:ed:86:65:10:d8:01:b5:15:89:c8:9a:1f:b8:
         05:a7:ef:5f:c9:ee:c5:2e:b7:19:2f:dc:95:fb:bf:4a:08:38:
         62:3b:eb:b3:78:65:16:9f:16:9c:b8:c1:10:ed:47:0d:c5:14:
         d3:97:1b:92:ab:79:5f:84:2e:b8:f8:68:e8:b6:aa:6a:4d:72:
         69:88:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:27 2024 by rpki-client on console-ams.rpki-client.org