Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          cSa4Pi5/yTp96m12ocRyHE79mT0PeI4GuS1qU8S2gr0=
Subject key identifier:   29:DA:F0:3C:13:EC:B2:73:0A:FA:2A:1A:91:27:E7:45:54:05:1C:44
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       78F87B3E7E74C99A0C524B0B8BE3524D88E2733D
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa
Signing time:             Fri 23 Jun 2023 13:00:00 +0000
ROA not before:           Fri 23 Jun 2023 12:55:00 +0000
ROA not after:            Fri 21 Jun 2024 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 18:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:7b:3e:7e:74:c9:9a:0c:52:4b:0b:8b:e3:52:4d:88:e2:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Jun 23 12:55:00 2023 GMT
            Not After : Jun 21 13:00:00 2024 GMT
        Subject: CN=29DAF03C13ECB2730AFA2A1A9127E74554051C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:3f:e5:60:c2:97:58:6a:17:39:11:14:f2:
                    b4:2f:59:31:cc:ca:08:00:e8:6f:03:96:98:e8:ef:
                    1b:d3:2f:e4:e1:df:45:10:df:83:ad:bd:38:c1:8a:
                    a8:8b:62:5e:1c:c3:f4:90:26:a5:6f:c9:9e:34:ed:
                    d5:90:f0:be:57:da:ba:77:fd:88:09:27:49:70:49:
                    2b:ad:86:31:54:9b:bb:de:5a:0a:de:52:33:34:0b:
                    8b:0d:f5:db:cc:81:17:e3:e0:39:00:ff:83:49:a5:
                    ff:34:4d:4d:e3:5f:9e:23:f6:f4:17:56:f7:48:bb:
                    19:ed:8c:10:a1:c2:68:af:a0:91:f0:e5:bc:56:09:
                    05:0b:26:38:a7:d5:dd:b5:4a:f0:8c:8f:d1:ce:4f:
                    69:bb:99:41:13:d0:c3:86:fa:69:79:7f:5e:8c:0d:
                    84:09:41:6b:00:94:74:6a:0a:2f:17:8e:e6:00:bb:
                    da:b5:0f:a4:ac:92:95:88:11:8e:73:19:1e:f7:46:
                    7f:0f:43:e2:59:47:26:ed:ba:34:8b:fb:a1:c9:60:
                    da:a7:66:3c:9a:74:45:de:be:94:de:60:29:b8:ce:
                    08:e6:88:6f:20:62:c9:49:a6:93:27:8c:87:6c:56:
                    79:6a:92:3d:ea:17:e9:2f:44:4c:15:22:57:e3:f1:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:F0:3C:13:EC:B2:73:0A:FA:2A:1A:91:27:E7:45:54:05:1C:44
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:00:e5:e1:90:b7:18:91:0b:b3:31:cd:87:7c:40:ce:08:db:
         3e:29:59:58:ca:aa:cd:68:63:81:be:9a:64:92:6d:78:3a:5c:
         dd:0d:6f:bb:8a:89:6e:e8:d0:50:d2:be:d8:91:df:a2:21:38:
         3b:01:5f:44:e6:d9:81:45:ad:17:10:81:bf:c5:fe:23:e6:5c:
         b3:e1:85:cb:6e:b9:21:f3:ba:f8:3b:ab:63:56:41:fd:6a:76:
         0d:08:09:84:2e:b5:50:23:4d:dc:d6:81:69:ac:a1:4e:86:aa:
         7b:73:c2:ba:52:f9:65:90:16:e1:f0:e8:ed:58:da:92:04:04:
         8f:a5:05:08:03:2a:69:9a:e1:22:af:77:f1:a7:e1:a3:e4:14:
         ef:d2:83:8e:75:3e:64:b4:38:7e:33:c7:3e:47:99:ff:86:2e:
         78:83:76:23:65:88:4c:e3:87:fc:f2:f5:04:c6:57:44:7c:5b:
         0b:36:48:c4:a5:03:5c:08:a0:57:a6:64:00:01:b4:25:8b:60:
         69:b9:70:3d:d0:32:a8:ae:44:09:87:43:46:bc:8b:d8:3a:7f:
         e2:4f:b1:ed:c8:58:0d:37:05:df:19:72:cd:9b:c2:19:ca:32:
         78:7f:43:26:7a:91:78:58:47:20:f5:07:91:e4:4b:85:c5:3a:
         8e:e3:1b:bf
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUePh7Pn50yZoMUksLi+NSTYjicz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD
QjhBQTI0NTAeFw0yMzA2MjMxMjU1MDBaFw0yNDA2MjExMzAwMDBaMDMxMTAvBgNV
BAMTKDI5REFGMDNDMTNFQ0IyNzMwQUZBMkExQTkxMjdFNzQ1NTQwNTFDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZj/lYMKXWGoXOREU8rQvWTHM
yggA6G8Dlpjo7xvTL+Th30UQ34OtvTjBiqiLYl4cw/SQJqVvyZ407dWQ8L5X2rp3
/YgJJ0lwSSuthjFUm7veWgreUjM0C4sN9dvMgRfj4DkA/4NJpf80TU3jX54j9vQX
VvdIuxntjBChwmivoJHw5bxWCQULJjin1d21SvCMj9HOT2m7mUET0MOG+ml5f16M
DYQJQWsAlHRqCi8XjuYAu9q1D6SskpWIEY5zGR73Rn8PQ+JZRybtujSL+6HJYNqn
ZjyadEXevpTeYCm4zgjmiG8gYslJppMnjIdsVnlqkj3qF+kvREwVIlfj8RGdAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKdrwPBPssnMK+ioakSfnRVQFHEQwHwYDVR0j
BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD
MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB
QTI0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzOTA4NzgyLTQ1MjAtNDViNC05
OWVkLTE5M2U1MWRmNTFjMy8wLzMxMzAzMzJlMzEzODMwMmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntKQwDQYJ
KoZIhvcNAQELBQADggEBAEgA5eGQtxiRC7MxzYd8QM4I2z4pWVjKqs1oY4G+mmSS
bXg6XN0Nb7uKiW7o0FDSvtiR36IhODsBX0Tm2YFFrRcQgb/F/iPmXLPhhctuuSHz
uvg7q2NWQf1qdg0ICYQutVAjTdzWgWmsoU6GqntzwrpS+WWQFuHw6O1Y2pIEBI+l
BQgDKmma4SKvd/Gn4aPkFO/Sg451PmS0OH4zxz5Hmf+GLniDdiNliEzjh/zy9QTG
V0R8Wws2SMSlA1wIoFemZAABtCWLYGm5cD3QMqiuRAmHQ0a8i9g6f+JPse3IWA03
Bd8Zcs2bwhnKMnh/QyZ6kXhYRyD1B5HkS4XFOo7jG78=
-----END CERTIFICATE-----
Generated at Wed May 8 17:45:13 2024 by rpki-client on console-ams.rpki-client.org