Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          vPRQv2jZkxQ+Ovsga3TjxJvUsSFm1cG8qhwGNGoY7p4=
Subject key identifier:   00:2A:F1:D5:69:AB:43:4D:92:D1:7B:47:0C:25:9A:65:A6:5E:E2:81
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       19698462E9E6CC073F8E5447D32CE5ECDD136ABA
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa
Signing time:             Fri 23 Jun 2023 13:00:00 +0000
ROA not before:           Fri 23 Jun 2023 12:55:00 +0000
ROA not after:            Fri 21 Jun 2024 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:84:62:e9:e6:cc:07:3f:8e:54:47:d3:2c:e5:ec:dd:13:6a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Jun 23 12:55:00 2023 GMT
            Not After : Jun 21 13:00:00 2024 GMT
        Subject: CN=002AF1D569AB434D92D17B470C259A65A65EE281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:de:50:e3:ec:35:44:a1:20:6f:18:a3:b2:b3:
                    7d:5d:f2:61:14:18:5e:1a:45:5c:07:95:de:6e:c6:
                    40:27:0e:4c:e7:25:dd:50:fb:c5:34:cf:c4:63:a6:
                    3c:2c:d5:75:18:cf:38:b8:95:f3:37:8d:4e:b6:81:
                    2e:42:57:b2:87:1d:b6:fb:fe:c9:3e:cf:0a:33:a4:
                    42:d2:95:3d:ef:15:0b:7f:ea:87:64:a6:b5:1b:e1:
                    00:f0:16:25:72:8e:54:60:e8:89:be:06:ad:e4:3b:
                    44:95:42:df:b1:20:cc:75:bd:b3:38:b1:4b:55:32:
                    de:c3:59:37:61:8a:cc:87:81:58:12:0f:75:3e:7b:
                    4e:5e:3c:7b:ff:1b:11:53:a7:87:75:44:a8:5d:5e:
                    ec:dd:0f:9a:4c:19:7d:12:eb:1d:a0:d0:b6:cd:12:
                    39:d2:d6:91:10:c7:d7:3d:79:0f:e0:bf:cc:07:9f:
                    ce:b8:2f:1c:8d:ba:34:08:87:07:6c:7a:e7:f2:07:
                    cb:57:24:99:cf:5a:5f:af:72:ad:0d:ff:46:bb:e2:
                    e6:99:a6:7d:fe:59:8d:16:2b:d5:e3:ca:14:85:f6:
                    65:5b:d5:fa:22:25:a2:2e:e6:87:18:c7:fe:49:80:
                    d1:4a:fc:5a:a2:26:3b:03:38:63:7d:b8:f6:3e:7a:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2A:F1:D5:69:AB:43:4D:92:D1:7B:47:0C:25:9A:65:A6:5E:E2:81
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:94:c5:e7:d8:a7:c1:1b:c7:08:cd:fc:a0:de:69:20:3a:3e:
         ee:8c:f0:97:83:0d:25:a5:46:63:10:f5:fe:6c:cd:68:b5:f5:
         6c:18:8b:2e:a3:0e:74:1c:21:69:29:26:0a:94:9e:55:a3:8e:
         13:39:a5:3f:79:36:52:6f:66:dc:0f:bf:4e:6b:3b:11:f4:63:
         32:ca:6a:fa:6d:0a:03:51:e3:5c:91:69:ce:5e:f8:a5:5d:99:
         0b:a7:d6:eb:e3:a6:9c:33:1d:d8:99:70:78:a1:ee:64:31:8c:
         5b:7f:ea:59:b4:5a:41:d6:be:04:40:02:f9:57:aa:c6:79:6e:
         60:22:ff:fd:d6:77:a5:95:97:86:46:94:e5:90:f6:aa:d6:30:
         75:f9:7d:3a:bd:32:5c:b7:81:79:2d:8b:3f:3a:51:10:21:bd:
         b3:f4:1e:e5:d6:c9:21:17:be:49:2b:e4:36:d2:34:a4:0c:19:
         a3:b2:4f:85:67:c3:89:29:30:47:90:df:ec:f0:13:86:e0:ea:
         d6:0f:fa:19:ed:72:09:59:11:73:aa:8f:50:b8:bf:30:6c:8a:
         fd:72:24:b4:65:32:75:32:92:e4:38:a6:5a:ee:b2:12:68:3e:
         d8:cd:f3:ae:0f:3b:52:fc:8c:e9:e4:c3:b5:26:8f:2c:70:55:
         2a:ca:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:03 2024 by rpki-client on console-fra.rpki-client.org