Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          p+/h9MXViUgdvqKar8a7ZYmhF5uuksAfPwAUFOcCGsw=
Subject key identifier:   AD:51:69:5C:67:F2:03:C3:2C:5E:F6:AA:3B:EB:3B:3F:20:84:F4:0C
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       5028E332957FFB9F36F30AF883B66C4FD2EA1165
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 10 Jun 2024 07:31:57 +0000
ROA not before:           Mon 10 Jun 2024 07:26:57 +0000
ROA not after:            Mon 09 Jun 2025 07:31:57 +0000
asID:                     138123
IP address blocks:        103.132.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 18:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:28:e3:32:95:7f:fb:9f:36:f3:0a:f8:83:b6:6c:4f:d2:ea:11:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Jun 10 07:26:57 2024 GMT
            Not After : Jun  9 07:31:57 2025 GMT
        Subject: CN=AD51695C67F203C32C5EF6AA3BEB3B3F2084F40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:15:a0:76:09:88:50:50:91:22:26:d0:f8:
                    31:a5:03:c6:b6:79:32:4a:02:32:a1:2c:07:a9:b7:
                    9b:e7:75:0d:7e:c3:0c:0e:9e:ec:7a:9b:8f:ea:0a:
                    6f:a1:d7:52:c5:59:63:50:e6:25:bc:84:2b:14:75:
                    64:f9:f5:74:8a:ae:af:71:19:af:45:47:50:90:37:
                    19:c0:f4:e2:3b:26:7a:0d:18:6e:25:26:a5:aa:05:
                    1b:d2:d4:29:b1:c2:fb:4a:51:cc:7e:86:88:61:48:
                    01:61:03:a8:3b:d6:78:3b:e4:74:99:65:50:b0:03:
                    77:94:52:37:e1:77:c9:aa:00:eb:f1:bd:34:c2:ed:
                    0f:80:8e:c6:62:84:0e:82:66:5b:4f:ea:45:9b:47:
                    83:81:54:3f:1d:f4:7a:16:1c:f1:3b:9e:6c:1e:9b:
                    32:41:16:f5:fb:2c:8c:be:62:c3:3f:ec:0a:22:9c:
                    d7:c1:86:76:0d:a6:8c:ed:f7:52:15:a2:5d:03:e3:
                    fd:ff:b8:cd:8d:5c:62:a8:fe:22:d7:31:1f:f9:82:
                    bd:9f:0d:d8:17:c5:22:2f:56:1f:1c:85:ee:b1:5c:
                    eb:ba:f6:52:40:20:eb:aa:bd:b8:50:99:30:4e:7a:
                    7c:52:95:5e:c3:e7:91:e4:b9:9c:d1:ee:05:23:20:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:69:5C:67:F2:03:C3:2C:5E:F6:AA:3B:EB:3B:3F:20:84:F4:0C
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:b5:a6:18:88:91:7c:75:47:be:80:29:62:4d:e6:92:f0:
         bd:74:b6:5a:f7:00:91:06:89:d4:67:d4:fb:57:b8:0e:44:1c:
         a4:ca:59:99:60:af:8e:fb:14:05:e4:77:c3:b0:83:2f:a1:1e:
         ea:25:ff:2f:00:c5:8c:36:42:2a:c2:82:31:0e:c5:d2:c3:ec:
         32:d1:56:4c:33:83:b5:e2:05:d1:12:fb:16:c6:22:1f:e6:6f:
         9f:88:d6:2c:07:f9:b9:d7:d6:66:aa:a1:20:a1:b6:fa:79:21:
         e3:ac:63:a5:98:d1:7d:0a:04:66:66:30:27:95:41:f7:86:16:
         67:8a:e8:a9:0c:89:f2:a7:03:b3:d5:58:3f:81:5e:41:56:38:
         e9:b9:bc:34:61:0f:07:eb:fa:76:98:9d:7d:46:9a:02:b0:80:
         cb:cc:6f:c8:0d:fb:ff:2e:92:6d:e7:d5:04:1d:60:91:9d:43:
         67:44:36:ee:d0:61:c2:b0:2f:b9:db:99:d4:aa:cd:f0:f4:d5:
         f9:19:16:4d:08:9a:a4:af:a0:3c:43:b9:cd:a2:a2:9c:eb:c0:
         1c:b4:76:de:d1:47:f2:0d:f5:63:c8:4f:1d:4e:35:e4:1c:8c:
         8e:07:19:e8:44:60:0f:95:c5:a5:5f:43:6a:e7:15:71:aa:3b:
         b5:d8:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org