Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa
File:                     3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          HYCKwx3IG/dczvioVZHxcsNJV00q43UghIpeJjHa0wI=
Subject key identifier:   C0:FE:72:58:2B:44:53:0D:07:B0:74:80:7A:03:CD:5D:6D:A0:FA:2F
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       0FC52B0208A2C24EBFD8DA57A57F13A99B334D28
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa
Signing time:             Mon 10 Jun 2024 07:30:42 +0000
ROA not before:           Mon 10 Jun 2024 07:25:42 +0000
ROA not after:            Mon 09 Jun 2025 07:30:42 +0000
asID:                     138123
IP address blocks:        103.132.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 18:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:2b:02:08:a2:c2:4e:bf:d8:da:57:a5:7f:13:a9:9b:33:4d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Jun 10 07:25:42 2024 GMT
            Not After : Jun  9 07:30:42 2025 GMT
        Subject: CN=C0FE72582B44530D07B074807A03CD5D6DA0FA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:c2:03:95:74:76:9b:37:0a:8c:c5:7a:3d:
                    29:8b:93:31:3d:b6:c5:2e:a3:07:ae:ca:77:36:ac:
                    6e:05:67:4c:ef:37:74:5c:d6:fe:01:51:09:aa:a3:
                    e2:84:46:5f:e7:ca:32:c7:0e:a9:63:7c:d1:7c:83:
                    d1:0f:ed:09:12:f7:a3:c5:98:83:fb:bc:b0:1e:95:
                    8a:4a:54:08:b7:28:b6:cc:45:90:51:88:15:e6:2a:
                    ce:4c:9f:1f:10:01:16:6b:f3:fe:3f:98:20:64:a1:
                    3a:61:8c:61:da:e0:6e:7f:73:6c:35:51:61:92:20:
                    70:ba:81:73:7b:23:c7:fa:22:29:4d:28:58:a5:fa:
                    9e:23:66:a3:1a:46:c5:eb:cc:d9:ac:6c:9b:cc:e2:
                    a1:f6:1d:ca:5d:6b:78:1b:a4:f6:b2:96:7f:cb:6c:
                    a0:19:35:e7:49:c8:07:63:56:3b:89:d2:9a:08:a3:
                    0c:39:d2:64:08:d8:77:47:49:b8:7c:82:54:49:d0:
                    1c:94:b9:2d:5a:5b:40:5e:8d:9f:30:ab:4b:5e:1c:
                    d1:1b:52:19:d9:14:5d:7b:bb:09:0e:e1:7d:ed:b3:
                    cb:e5:70:ba:4a:32:11:b1:17:ac:ca:05:51:6e:c0:
                    55:46:54:61:73:25:fe:8c:35:37:0e:29:bf:57:6c:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:72:58:2B:44:53:0D:07:B0:74:80:7A:03:CD:5D:6D:A0:FA:2F
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:d7:8d:d0:2b:20:d0:9e:31:da:61:19:65:98:7d:79:6a:
         74:78:13:6b:1b:61:27:73:a7:02:0e:f7:fa:a7:2c:9f:9c:52:
         59:55:1f:0d:82:6c:d2:eb:fc:54:e1:6d:20:0f:ee:15:ae:86:
         a2:5d:47:05:ba:3a:a1:64:03:7f:8b:8c:77:27:32:a4:30:8b:
         45:f7:7b:1e:12:90:58:25:da:d7:ca:f3:1c:e6:4f:21:fb:1c:
         02:84:1d:6d:77:7b:d9:a8:24:29:6a:49:9d:df:80:33:4a:de:
         15:fa:eb:a5:21:81:04:fc:10:65:27:3e:ee:77:61:6e:94:82:
         6c:10:7f:57:a8:33:d2:53:99:68:e3:56:c8:50:e0:c0:1d:10:
         1f:b4:e4:8b:2c:f8:b7:ee:6f:88:b5:02:1c:dd:74:81:87:5f:
         4a:ce:38:4b:76:54:a0:c7:99:53:b0:46:b4:f7:3d:1f:41:7e:
         8e:bf:39:94:61:80:e0:40:88:09:b2:3a:e5:93:40:2b:04:29:
         73:97:f1:0a:26:36:4d:60:a9:f9:f5:ae:60:ea:ee:62:d0:8b:
         d0:cf:50:a2:6b:9a:81:9a:fc:30:68:9a:31:2e:af:2c:d5:ed:
         1a:2d:65:b1:8d:93:81:f3:73:dd:34:1f:f8:56:17:d8:51:31:
         32:2e:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org