Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          f3X6H7ZhtSVNeOPbHep0Q0vvi8oN0A/OoneNhHKwcx8=
Subject key identifier:   22:12:FD:B0:AF:B4:DF:6E:C0:64:9D:F9:D2:8A:66:59:A4:CC:80:61
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       78EC9EDC2E1F29E88B187D5B230C202ACCD45748
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 31 Jul 2023 00:02:38 +0000
ROA not before:           Sun 30 Jul 2023 23:57:38 +0000
ROA not after:            Mon 29 Jul 2024 00:02:38 +0000
asID:                     133811
IP address blocks:        103.52.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ec:9e:dc:2e:1f:29:e8:8b:18:7d:5b:23:0c:20:2a:cc:d4:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul 30 23:57:38 2023 GMT
            Not After : Jul 29 00:02:38 2024 GMT
        Subject: CN=2212FDB0AFB4DF6EC0649DF9D28A6659A4CC8061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:a1:8a:40:48:7b:a7:e9:82:56:4d:ca:a0:
                    a0:68:39:c3:09:54:a9:14:b4:6e:06:e4:ec:e7:56:
                    be:ab:ba:ef:89:08:2e:ea:5b:5d:67:8e:1d:25:a1:
                    8d:cd:88:df:70:d8:62:e6:f4:0b:0f:47:b4:b7:a5:
                    f2:9e:0d:aa:15:59:b7:01:b8:59:e6:fb:0d:58:0f:
                    00:e1:00:c8:8a:b2:4c:bb:a0:08:ec:cd:6c:66:b6:
                    c2:0b:9f:ba:15:a2:18:3b:fa:a4:49:51:64:9a:45:
                    97:8b:ae:be:fd:df:f6:a3:27:a4:a8:41:66:b6:cf:
                    98:a9:d3:62:e6:4e:01:5f:f8:08:44:c2:ec:bf:91:
                    59:8e:0c:21:f6:a1:2a:2c:c0:0b:75:f2:82:3a:33:
                    fe:8f:d7:fe:dd:21:ba:be:96:0e:3a:88:a5:6a:78:
                    60:a1:5b:d5:be:bf:3b:88:f6:f6:b7:f1:18:2a:51:
                    eb:38:75:99:0d:b5:bf:71:de:d1:ed:20:f8:04:12:
                    a5:36:01:41:ea:f5:c0:ff:18:b0:4f:5b:2c:af:ed:
                    67:b5:d1:f5:f7:22:98:70:43:d0:77:32:b3:0b:ad:
                    d3:b8:98:4c:49:c7:b1:4e:73:50:1a:b5:ba:9b:b8:
                    1d:ab:ba:52:28:8a:4b:8f:78:f9:68:0c:16:2c:fd:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:12:FD:B0:AF:B4:DF:6E:C0:64:9D:F9:D2:8A:66:59:A4:CC:80:61
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:65:3f:a8:41:e5:d7:19:b4:e4:64:af:63:c1:6c:2c:41:ac:
         98:73:d5:2b:24:bd:5d:6b:e4:75:fd:b5:77:54:e5:14:78:07:
         f5:4f:9a:19:84:c9:02:66:55:4c:a1:43:d9:93:ca:17:81:97:
         e8:09:aa:87:16:de:19:e4:c6:ad:3f:e4:e5:d6:5d:d7:eb:b4:
         12:84:80:d9:e6:eb:7e:7d:05:64:a6:69:b5:56:8c:c9:66:cb:
         20:f0:ab:4f:00:15:6f:67:be:15:ba:40:e5:09:7f:d8:b4:fe:
         d9:1a:21:db:81:20:82:25:86:4a:c3:f9:bc:95:5e:1c:65:ed:
         1a:75:33:57:7c:d0:54:4a:5f:1f:49:3a:c8:c9:e0:4d:88:b4:
         08:c8:d2:c8:9e:bd:8b:f5:67:62:19:c2:35:ee:0f:82:c1:5e:
         a8:f3:0e:f3:bb:d6:cc:b2:db:d9:5e:b9:ab:1a:72:e7:ed:a7:
         26:a5:51:79:94:ce:08:ab:81:78:38:1f:d9:90:92:68:f3:a8:
         6f:75:68:60:4c:57:b5:94:4a:29:43:8e:b5:3d:5f:25:0c:c9:
         7d:99:9b:a4:3b:51:00:24:37:f1:f7:2f:d3:e4:be:d4:78:fd:
         ac:c7:b7:2f:62:c4:43:12:78:a9:90:ca:c6:cb:12:b4:01:75:
         84:7a:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:27 2024 by rpki-client on console-ams.rpki-client.org