Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/3130332e35322e362e302f32342d3234203d3e20313530323032.roa
File:                     3130332e35322e362e302f32342d3234203d3e20313530323032.roa (raw, json)
Hash identifier:          soziTxIfuvcSaQvzY0L7nb3zItW0zemaoDhGjEi98TQ=
Subject key identifier:   49:9A:E8:A6:E1:97:7E:01:0A:A3:26:4A:BB:0B:06:5B:D9:D7:B4:CA
Certificate issuer:       /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD
Certificate serial:       5448D0A341F9DBAE92112892506852B73D2A42DC
Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/3130332e35322e362e302f32342d3234203d3e20313530323032.roa
Signing time:             Mon 18 Sep 2023 00:00:02 +0000
ROA not before:           Sun 17 Sep 2023 23:55:02 +0000
ROA not after:            Mon 16 Sep 2024 00:00:02 +0000
asID:                     150202
IP address blocks:        103.52.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl
                          rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:48:d0:a3:41:f9:db:ae:92:11:28:92:50:68:52:b7:3d:2a:42:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD
        Validity
            Not Before: Sep 17 23:55:02 2023 GMT
            Not After : Sep 16 00:00:02 2024 GMT
        Subject: CN=499AE8A6E1977E010AA3264ABB0B065BD9D7B4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:68:00:a2:ce:17:83:6f:5b:66:a3:28:54:
                    2e:0b:7e:0a:b8:31:e3:b0:66:97:34:d3:c5:16:2a:
                    74:02:c3:69:fa:86:c2:eb:04:51:17:e4:bf:a8:81:
                    85:2f:c1:0d:30:f1:28:31:71:b0:de:ce:5e:31:3a:
                    e4:5d:57:e4:16:76:ce:94:58:86:dd:7d:ec:29:84:
                    1d:70:02:55:4b:2d:72:97:a4:fa:ea:cc:94:58:5a:
                    59:f0:47:3e:10:66:13:da:8b:ca:f6:ed:dc:32:72:
                    38:f0:63:a3:49:12:4d:27:41:7f:35:78:34:2b:89:
                    32:d1:30:73:6d:a6:f2:bf:ba:28:9a:67:d5:43:d4:
                    90:7e:8a:48:88:f8:c1:4f:e4:f7:e2:bb:a3:0d:70:
                    74:43:96:b9:29:e9:89:b4:58:ca:1b:1f:11:9c:de:
                    d9:d1:c8:65:56:76:fa:af:9f:96:bc:9c:fc:15:b2:
                    f2:32:52:53:3f:b8:ba:79:18:ee:dc:34:8c:5c:de:
                    4f:83:b6:16:fd:d7:64:b2:8c:2a:b9:cd:3d:5e:2f:
                    26:68:14:49:77:cf:28:4c:1e:88:90:c9:43:b7:90:
                    93:22:ba:10:01:5f:81:cc:c4:ac:49:3a:66:8c:de:
                    85:d2:fd:de:3d:f6:99:aa:1d:96:b6:99:cf:9d:18:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9A:E8:A6:E1:97:7E:01:0A:A3:26:4A:BB:0B:06:5B:D9:D7:B4:CA
            X509v3 Authority Key Identifier:
                keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/3130332e35322e362e302f32342d3234203d3e20313530323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:0d:0b:39:48:7b:b7:b5:36:7b:7a:aa:85:24:42:5f:1f:1f:
         2b:55:b9:3e:26:44:2d:d1:4a:45:8a:e5:5c:d4:9c:6b:c5:63:
         c0:66:ba:ac:1b:ef:bb:11:8c:97:d1:09:37:ea:a3:42:ac:1e:
         cd:8a:46:c4:ee:d9:1c:0b:a5:5e:3c:02:f0:76:ba:23:f2:64:
         21:fb:a2:76:db:b9:7a:c4:57:a9:f6:4b:ff:b2:cd:ba:a5:39:
         6e:54:c2:04:20:5a:d1:8e:a1:69:9c:3f:27:2a:6e:d5:ba:a6:
         b8:03:74:8b:cf:67:b9:61:58:07:7f:3d:46:23:ab:eb:ae:da:
         d9:ab:a8:9f:23:16:bb:73:ec:76:b0:79:db:60:95:3f:5c:85:
         36:05:86:09:a2:7d:e9:73:09:20:d4:c9:e3:0e:d5:f3:14:41:
         ab:8b:c6:45:96:ee:58:23:46:f8:41:f0:61:c3:fe:50:7a:8b:
         97:01:2c:7c:aa:46:8c:0b:a4:bf:12:1c:98:2b:46:66:53:38:
         6b:68:89:7a:81:ce:04:ed:25:fa:5d:9c:9a:d2:dc:93:4c:30:
         07:3c:7a:ca:4c:68:56:93:3b:1b:3d:37:b3:76:5a:c9:fc:8d:
         1e:7e:b0:e2:ae:c5:0f:61:82:2f:57:a0:49:55:1d:f9:a9:f6:
         8c:a3:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:36:12 2024 by rpki-client on console-fra.rpki-client.org