Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          m0DDzRC3feSj6y45osqkbsLYsylOgOeCyWwC8Yi0XgQ=
Subject key identifier:   6E:C4:A5:64:AF:A0:92:98:61:E1:00:4B:AC:5F:42:90:DF:05:22:58
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       28FD8A07A3368FC2316D88A76164D49B104D5A4E
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 10 Jun 2024 07:31:08 +0000
ROA not before:           Mon 10 Jun 2024 07:26:08 +0000
ROA not after:            Mon 09 Jun 2025 07:31:08 +0000
asID:                     138123
IP address blocks:        103.132.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 18:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fd:8a:07:a3:36:8f:c2:31:6d:88:a7:61:64:d4:9b:10:4d:5a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Jun 10 07:26:08 2024 GMT
            Not After : Jun  9 07:31:08 2025 GMT
        Subject: CN=6EC4A564AFA0929861E1004BAC5F4290DF052258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:58:45:b3:e8:e3:c2:b9:60:05:40:1a:6e:
                    ef:75:df:0e:e7:c3:45:dd:2e:1c:8f:6c:c1:2a:c2:
                    e0:a3:4c:a8:14:f7:57:e4:6e:7f:4d:20:7b:18:e4:
                    9b:ac:ab:43:f2:64:7c:89:c3:b5:ac:51:9f:83:a1:
                    11:5d:62:40:1c:13:67:7e:04:9e:df:e9:48:20:0d:
                    12:6a:8f:29:11:ce:59:c9:c0:1f:45:fb:5c:e9:82:
                    05:55:3b:c0:eb:34:08:41:2e:f4:15:ad:c5:77:82:
                    d5:01:74:a2:2a:b0:0d:32:87:57:3c:22:b8:11:cd:
                    d4:c1:8f:b5:4d:44:69:82:d8:94:a0:33:e4:0b:1d:
                    e0:60:3f:e7:eb:41:41:4c:f6:f4:60:be:11:70:1b:
                    79:ad:12:bf:8b:6f:ae:5a:71:58:0e:31:1c:5a:a8:
                    25:2a:7b:1e:db:87:c6:ef:f9:4d:1b:25:8b:18:6b:
                    33:53:24:b6:cf:52:23:6b:c3:12:6e:9e:1e:8c:c7:
                    25:9a:f4:d8:4b:13:bc:ab:40:6a:ef:80:3c:f4:3d:
                    72:a4:0e:67:44:f2:83:75:8d:22:08:60:2a:56:ca:
                    18:78:ba:f0:d2:bd:6f:c1:7b:0d:79:9a:d3:7e:7f:
                    cd:d5:4b:86:53:26:95:e3:4b:3b:8f:04:28:78:25:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:A5:64:AF:A0:92:98:61:E1:00:4B:AC:5F:42:90:DF:05:22:58
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:e5:f3:4b:9a:98:2d:1f:28:fd:17:cb:b0:0b:16:ff:33:
         76:93:79:b9:c4:99:f6:97:fc:98:17:1c:a8:94:79:1a:dc:56:
         be:2d:0c:e3:f7:e7:f9:25:f6:1f:22:59:9a:f9:d9:93:7b:26:
         0a:70:9d:2c:83:b9:b9:91:d4:43:49:f5:e2:89:f3:53:4a:70:
         01:66:b0:7b:0d:96:d6:cc:b2:9a:67:65:e4:8e:6c:5d:e8:df:
         c9:cc:b9:ac:62:0f:c5:a5:6d:dc:cb:b0:32:74:8f:4f:eb:74:
         45:46:b6:09:06:a0:43:3f:e8:dc:00:31:bf:d1:ea:2a:6f:b3:
         94:af:60:0b:18:28:6e:e2:45:5c:27:6b:74:94:b9:fc:f6:d4:
         57:4c:91:68:a9:14:be:81:b9:1c:18:7d:fc:2b:7e:59:9a:a7:
         84:31:02:b8:f8:72:9b:44:c2:1f:16:fc:33:89:54:cc:34:00:
         84:5e:77:f6:a2:40:ab:2b:89:89:3a:e9:b6:ae:6a:fc:e3:3c:
         68:5d:f0:3b:ab:d2:81:2f:f3:a5:4f:c3:92:12:63:2a:46:5e:
         87:9e:83:53:32:99:a3:87:fb:58:af:d5:aa:05:2b:d7:3d:86:
         80:cf:9a:f7:57:2d:c7:f9:a4:98:53:21:83:4c:9a:70:73:60:
         57:47:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org