Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa
File:                     3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (raw, json)
Hash identifier:          z2+zxRk+wf+jCSmrNsYyUGK/oYQNa8ev2JDVJrHXjrA=
Subject key identifier:   3F:BE:6A:06:F0:01:11:E5:9A:FF:7A:FE:F4:9D:3B:8D:CC:69:A3:D4
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       36840B24131F28ABAB409F84BD7FD4D8691CE020
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa
Signing time:             Mon 01 Jul 2024 01:05:51 +0000
ROA not before:           Mon 01 Jul 2024 01:00:51 +0000
ROA not after:            Mon 30 Jun 2025 01:05:51 +0000
asID:                     63872
IP address blocks:        103.52.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:84:0b:24:13:1f:28:ab:ab:40:9f:84:bd:7f:d4:d8:69:1c:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul  1 01:00:51 2024 GMT
            Not After : Jun 30 01:05:51 2025 GMT
        Subject: CN=3FBE6A06F00111E59AFF7AFEF49D3B8DCC69A3D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:7d:34:c5:ca:6a:d6:84:09:44:99:44:38:
                    c7:cd:17:26:c2:61:aa:b7:54:dc:93:de:5f:d8:7f:
                    f2:d3:2f:17:72:4e:4d:a9:97:48:01:d1:55:6d:f4:
                    97:00:e5:2d:d7:b2:01:26:6f:f5:36:5e:94:92:23:
                    66:7a:25:fe:b1:19:ab:03:22:d5:6f:cb:c2:6f:42:
                    c0:a3:a9:8c:52:87:a7:6a:e8:f4:a5:b9:1b:3e:38:
                    0f:bf:76:32:40:e9:a5:fa:6a:e7:03:b7:c0:41:b5:
                    c1:f8:27:d0:8c:8f:32:a9:c6:8e:6e:4f:33:42:91:
                    0e:ca:7d:da:2b:0a:86:c2:e8:c7:35:93:cb:34:b1:
                    c7:a8:b5:4c:17:cb:68:b7:40:fa:e5:51:03:81:8b:
                    e0:ff:50:3a:70:d9:44:f4:15:7a:e1:ac:39:34:19:
                    34:8c:89:46:c5:bc:ae:c8:80:e6:47:7f:a6:2e:4a:
                    5c:39:6c:06:00:04:f1:48:1f:d8:b6:6b:b2:f8:e2:
                    42:26:25:26:48:53:38:9d:a6:9a:e5:be:51:b3:92:
                    52:c0:f6:07:d9:cf:a4:26:10:04:7d:6b:26:66:a0:
                    52:35:30:3e:c1:06:53:53:1f:38:42:d0:ce:7a:d2:
                    33:9f:0c:5f:69:dc:de:85:cc:b7:0e:98:6b:aa:68:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BE:6A:06:F0:01:11:E5:9A:FF:7A:FE:F4:9D:3B:8D:CC:69:A3:D4
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:90:4a:b6:57:8b:4d:7f:97:5c:c4:40:dd:07:78:f1:a5:
         fa:2b:92:b2:d1:49:ee:49:b7:50:96:f8:8f:31:5a:3e:df:80:
         fb:15:03:b1:c5:65:98:c0:be:c1:d1:fe:95:35:16:7f:3a:79:
         a7:82:20:4d:80:ac:99:90:a3:a3:23:59:81:cf:7c:20:68:8b:
         5c:da:4e:f9:52:df:de:a5:12:71:87:3f:59:cf:17:16:0b:77:
         11:69:db:01:ed:3f:93:47:92:a7:29:1d:e5:3e:28:c8:8f:b7:
         c6:7a:78:6e:e8:97:a2:76:67:fb:35:92:e8:fd:4f:e7:1b:d8:
         78:f0:c1:69:ba:cd:7c:fd:7b:0f:dd:ae:58:3e:43:d2:90:92:
         28:d1:c4:83:ab:84:86:11:2e:e5:1b:12:b6:2d:fa:2e:1a:25:
         22:c0:d7:9f:29:66:80:5d:65:2e:f2:bf:49:d3:8d:b8:8a:c5:
         52:1c:4f:a9:97:dd:76:7e:0f:b4:06:5a:a7:0d:50:d8:55:fa:
         00:08:8f:7a:58:fe:66:cc:dd:b2:88:bc:00:97:bb:19:00:2b:
         01:9e:57:7d:94:d9:2e:df:77:ab:84:df:27:10:7a:07:e6:ec:
         fe:00:2a:f1:87:f1:64:31:2e:18:23:65:7b:8d:fd:05:c4:2c:
         ec:f6:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:15 2024 by rpki-client on console-ams.rpki-client.org