Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
File:                     3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          HepAw4B8lBUh/Y3MMVp/+7NfuqMoWhVFmRARv6c88zY=
Subject key identifier:   B9:AF:30:86:C5:2C:47:DC:32:5A:AD:11:74:5E:74:04:B2:19:7E:4E
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       586B90FDF8E3EF067D76765BB0D2F47A5A32EF98
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 01 Jul 2024 01:05:51 +0000
ROA not before:           Mon 01 Jul 2024 01:00:51 +0000
ROA not after:            Mon 30 Jun 2025 01:05:51 +0000
asID:                     63872
IP address blocks:        103.52.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:90:fd:f8:e3:ef:06:7d:76:76:5b:b0:d2:f4:7a:5a:32:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul  1 01:00:51 2024 GMT
            Not After : Jun 30 01:05:51 2025 GMT
        Subject: CN=B9AF3086C52C47DC325AAD11745E7404B2197E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:fc:96:56:e6:36:31:ef:bf:9a:58:d8:3c:
                    8a:c6:57:47:5e:c8:c7:bb:53:c8:0d:29:45:30:3e:
                    76:6d:32:97:ab:34:5d:f6:8e:db:da:c1:73:bb:c3:
                    77:9e:c8:2a:1a:82:a9:a9:3c:3e:e6:39:b8:72:c7:
                    0c:b6:7e:60:37:c6:86:a6:43:6c:10:5b:bb:80:3b:
                    7a:7d:5e:5f:7d:70:42:e0:c0:ad:0c:34:7c:85:b5:
                    ee:ff:a7:d8:91:64:bf:5c:0e:38:7a:a7:10:c6:e3:
                    c4:1d:c0:9a:c3:04:79:0a:d7:01:d6:22:2a:b8:2c:
                    46:6b:3b:7f:a7:14:d7:b9:b8:9b:91:c6:6d:91:0f:
                    9b:5d:b2:b6:51:0f:67:74:f5:d4:90:75:6c:5e:e4:
                    ff:a1:1f:e1:08:2e:8b:0f:0d:b8:a9:20:3c:5d:50:
                    4c:d5:a2:c8:7c:58:e9:7b:f8:2a:52:93:97:39:b1:
                    95:99:54:3f:a3:f9:90:f3:84:f5:aa:9c:ee:de:fb:
                    73:1b:48:1a:e7:1d:e9:41:e7:39:0d:3d:54:d4:15:
                    f5:e4:2c:a6:01:8b:5e:76:c9:06:17:27:6b:cf:69:
                    b1:3e:9f:7c:ab:ff:d1:93:4f:69:09:0f:85:df:4b:
                    05:d2:42:77:07:9e:63:c1:3e:e5:a0:c9:7e:ad:32:
                    21:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:30:86:C5:2C:47:DC:32:5A:AD:11:74:5E:74:04:B2:19:7E:4E
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:58:01:d7:5b:6b:6e:86:d2:fe:36:a7:8a:09:eb:bc:87:ec:
         d8:e3:c3:fa:e9:3f:04:41:a5:c5:a6:09:7f:94:7d:c0:19:17:
         a1:e3:90:4c:4f:0b:a1:7d:5b:e2:80:0d:3f:2e:af:30:82:40:
         63:3b:2d:00:11:1d:c6:83:bc:ea:d7:cb:a7:54:c0:32:77:78:
         86:08:92:59:b4:11:ee:c6:0a:0d:87:4a:dd:aa:c8:42:e3:9b:
         e9:88:d9:b5:c6:85:fd:75:7c:84:ea:30:89:a8:33:a6:91:4b:
         0b:59:eb:e1:82:b5:79:b5:69:da:13:f4:e4:ab:e6:57:f0:2d:
         03:fc:f1:c4:b1:15:5b:99:7a:6a:62:ba:ea:41:88:bb:b2:b2:
         99:38:9d:d8:74:66:94:71:20:f4:39:de:84:d0:6f:84:a5:d8:
         7a:89:b4:37:a7:2e:45:eb:78:f0:05:41:61:7c:8b:54:98:7d:
         07:46:ef:5d:2b:9c:2b:8f:bb:9a:58:58:26:43:6c:e2:51:06:
         0d:85:e2:85:e8:44:9f:34:2b:82:b2:1a:8b:c9:74:dc:4b:3b:
         0e:0e:cf:e0:2c:bd:3f:80:d8:a2:76:a9:3b:e8:71:a2:56:17:
         19:df:5d:48:cd:4a:07:0e:e0:5e:32:4c:a7:a6:97:87:e1:09:
         8d:bc:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:17 2024 by rpki-client on console-fra.rpki-client.org