Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
File:                     3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (raw, json)
Hash identifier:          CTiND1FI1OxyfPM3NIYaIitKqgcxwrCI8nYgWyTNBEE=
Subject key identifier:   05:36:AD:D4:28:BB:A9:02:3E:2A:B8:5C:C2:58:D1:C6:E8:AE:B5:A3
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       0708BEF041673BFF7229EE6BC09217140D085BAA
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
Signing time:             Sat 16 Dec 2023 13:00:00 +0000
ROA not before:           Sat 16 Dec 2023 12:55:00 +0000
ROA not after:            Sat 14 Dec 2024 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:be:f0:41:67:3b:ff:72:29:ee:6b:c0:92:17:14:0d:08:5b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Dec 16 12:55:00 2023 GMT
            Not After : Dec 14 13:00:00 2024 GMT
        Subject: CN=0536ADD428BBA9023E2AB85CC258D1C6E8AEB5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:a7:f6:dd:1b:56:f1:4c:17:fd:c9:75:00:
                    a6:b6:da:71:be:88:56:e9:66:95:af:36:8e:fa:59:
                    52:a8:a9:9b:57:90:3b:d6:9a:81:c9:2a:71:7f:ce:
                    b0:84:e1:1d:40:d1:5b:ea:4f:b8:4d:3e:a3:48:2b:
                    3b:b0:fa:0a:1f:fa:ad:d8:f1:84:ec:70:e6:4e:21:
                    68:86:a8:f9:51:40:75:77:f5:56:1f:94:af:76:bf:
                    66:d9:6f:0f:b2:cf:33:f2:46:86:ee:51:b6:75:80:
                    25:52:44:0e:d7:22:10:9a:d5:89:34:f8:0e:10:c8:
                    80:62:93:4e:3c:50:41:3f:98:16:db:96:c8:29:7e:
                    4d:cf:96:69:9d:72:d4:a4:16:63:8a:1d:39:5d:ad:
                    16:9e:11:92:78:ca:cb:5e:d5:ca:97:a0:17:b1:9d:
                    c1:6a:8a:15:9b:68:eb:c3:1e:d6:38:e8:bf:10:c3:
                    ba:4d:66:fd:91:bf:9d:8c:71:21:81:a8:42:a3:35:
                    c9:90:05:ac:16:2c:cb:3e:cc:fc:a6:13:0a:8a:62:
                    99:09:89:66:0a:3a:a4:45:b7:89:76:db:f2:17:2a:
                    d7:da:61:39:26:dc:c7:42:9a:41:19:d7:48:28:2d:
                    33:c8:a7:32:96:b1:e8:81:30:39:e0:46:11:3e:c9:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:36:AD:D4:28:BB:A9:02:3E:2A:B8:5C:C2:58:D1:C6:E8:AE:B5:A3
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:85:88:6a:5a:d3:85:1e:73:c6:47:52:85:68:02:ff:95:4a:
         a2:36:5f:87:03:3c:a3:82:9a:65:b8:ec:4b:27:3d:75:e8:d4:
         a1:13:23:3e:09:5a:72:f4:d3:d4:8f:67:4e:92:01:17:41:d4:
         ab:cb:2d:e4:f2:76:9f:ed:d9:43:0b:2d:be:4f:e8:2c:cb:6c:
         7d:8c:69:12:8e:72:e1:2a:31:c8:e1:b0:8a:9d:f9:5c:10:35:
         08:3e:12:75:68:15:75:42:5b:f6:92:0c:37:d2:98:fe:e3:d4:
         b0:f6:b8:b4:9c:b8:0b:51:5f:3d:10:32:0f:4a:51:bd:a1:05:
         11:ee:6e:25:7e:ec:b1:85:bd:4c:ca:1c:c5:93:6e:6b:a5:a2:
         27:63:6b:bd:b9:d6:70:87:30:2c:18:8e:35:8a:8d:97:e4:b2:
         21:dc:88:38:e8:67:3c:91:01:3e:df:4d:e8:40:04:24:8b:6d:
         39:84:d1:5c:e1:75:a2:4f:4e:38:71:b2:45:0a:34:e3:58:40:
         cc:ce:d7:e8:27:a6:2b:53:c8:ea:d2:b4:9f:e3:14:6b:b3:95:
         06:47:b0:98:5a:cb:ff:53:f0:b7:ed:0f:a6:5a:44:f8:d9:68:
         f7:ce:1a:02:4e:fd:82:c9:f5:50:52:0d:ee:d6:88:53:1b:94:
         5f:40:13:a9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBwi+8EFnO/9yKe5rwJIXFA0IW6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD
QjhBQTI0NTAeFw0yMzEyMTYxMjU1MDBaFw0yNDEyMTQxMzAwMDBaMDMxMTAvBgNV
BAMTKDA1MzZBREQ0MjhCQkE5MDIzRTJBQjg1Q0MyNThEMUM2RThBRUI1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+Kf23RtW8UwX/cl1AKa22nG+
iFbpZpWvNo76WVKoqZtXkDvWmoHJKnF/zrCE4R1A0VvqT7hNPqNIKzuw+gof+q3Y
8YTscOZOIWiGqPlRQHV39VYflK92v2bZbw+yzzPyRobuUbZ1gCVSRA7XIhCa1Yk0
+A4QyIBik048UEE/mBbblsgpfk3PlmmdctSkFmOKHTldrRaeEZJ4yste1cqXoBex
ncFqihWbaOvDHtY46L8Qw7pNZv2Rv52McSGBqEKjNcmQBawWLMs+zPymEwqKYpkJ
iWYKOqRFt4l22/IXKtfaYTkm3MdCmkEZ10goLTPIpzKWseiBMDngRhE+yZCHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBTat1Ci7qQI+KrhcwljRxuiutaMwHwYDVR0j
BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD
MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB
QTI0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzOTA4NzgyLTQ1MjAtNDViNC05
OWVkLTE5M2U1MWRmNTFjMy8wLzMxMzAzMzJlMzEzODMwMmUzMTM2MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntKQwDQYJ
KoZIhvcNAQELBQADggEBAAmFiGpa04Uec8ZHUoVoAv+VSqI2X4cDPKOCmmW47Esn
PXXo1KETIz4JWnL009SPZ06SARdB1KvLLeTydp/t2UMLLb5P6CzLbH2MaRKOcuEq
McjhsIqd+VwQNQg+EnVoFXVCW/aSDDfSmP7j1LD2uLScuAtRXz0QMg9KUb2hBRHu
biV+7LGFvUzKHMWTbmuloidja7251nCHMCwYjjWKjZfksiHciDjoZzyRAT7fTehA
BCSLbTmE0VzhdaJPTjhxskUKNONYQMzO1+gnpitTyOrStJ/jFGuzlQZHsJhay/9T
8LftD6ZaRPjZaPfOGgJO/YLJ9VBSDe7WiFMblF9AE6k=
-----END CERTIFICATE-----
Generated at Wed May 8 17:45:13 2024 by rpki-client on console-ams.rpki-client.org