Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          7Y6qCTa63vPiuGKVBW20e/ioBfU8xWNmqBl6jRZtq+c=
Subject key identifier:   67:69:2E:05:32:8D:29:4B:BC:A9:3F:FF:A6:D0:50:3C:73:CA:C4:3C
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       19CDC6339B88B32BC2FD0369453A8C6E6B2D71FE
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 01 Jul 2024 01:02:30 +0000
ROA not before:           Mon 01 Jul 2024 00:57:30 +0000
ROA not after:            Mon 30 Jun 2025 01:02:30 +0000
asID:                     133811
IP address blocks:        103.52.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cd:c6:33:9b:88:b3:2b:c2:fd:03:69:45:3a:8c:6e:6b:2d:71:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul  1 00:57:30 2024 GMT
            Not After : Jun 30 01:02:30 2025 GMT
        Subject: CN=67692E05328D294BBCA93FFFA6D0503C73CAC43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:65:ae:14:cc:3d:7d:75:2f:40:94:75:ed:
                    92:b5:09:b6:86:68:a7:ba:a8:0b:11:f3:b1:ef:b6:
                    0e:11:f0:22:92:b5:ac:e3:bb:f8:3c:33:ff:b5:3c:
                    b6:13:6f:84:18:d5:32:20:61:e5:75:60:91:6d:c4:
                    e7:43:ae:04:78:8d:4f:88:c3:6b:ec:42:f5:4a:5f:
                    13:d3:3a:c1:1c:6a:5b:f2:55:7e:03:65:4d:03:f4:
                    ab:d2:13:dd:71:64:57:ba:f3:ea:7d:0b:d1:e3:3f:
                    ab:60:01:4e:20:83:76:24:fb:cb:6d:df:36:72:ac:
                    3b:77:49:0c:f4:63:ee:42:38:31:28:c4:f4:d5:c9:
                    4d:c3:11:cc:17:fe:04:d7:a9:85:93:0d:ee:92:0b:
                    7f:be:3c:08:14:b9:87:f3:77:7a:a8:28:08:7f:a5:
                    03:70:6f:d8:08:a3:75:f8:e6:81:ea:48:dc:9a:68:
                    00:1c:2b:67:4c:3e:85:69:49:ef:e5:c4:6d:73:93:
                    2d:10:ac:a4:69:3a:c3:ab:f2:6f:e6:35:0a:62:59:
                    bb:44:9f:47:0a:2b:98:34:44:97:21:e6:52:47:2e:
                    6b:38:53:f2:f8:2e:99:f8:9a:fb:8d:25:79:7a:6e:
                    c1:79:b2:b2:8f:fc:d4:2c:44:4c:e4:a1:7c:65:9c:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:2E:05:32:8D:29:4B:BC:A9:3F:FF:A6:D0:50:3C:73:CA:C4:3C
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:24:05:a8:4f:71:49:ed:df:ab:3a:e2:c9:c9:01:4f:4a:
         70:eb:c9:89:c2:a2:24:91:b6:99:77:b6:34:58:62:d3:90:bc:
         99:52:8c:12:6a:7e:fe:ea:d5:c2:f0:29:f1:cb:67:17:89:ba:
         f7:43:f3:21:63:d0:78:5c:49:9a:84:d5:44:8e:88:46:46:da:
         58:39:c1:4c:e3:09:23:c2:3e:20:4f:f8:57:37:50:ee:e3:d9:
         50:76:1c:ac:86:a8:16:d2:fe:a4:bd:fd:5f:ea:e2:3c:e3:06:
         80:34:d6:c0:f2:d5:7b:d2:33:d7:92:91:d5:7e:e2:55:d5:4a:
         63:c1:8f:ac:5c:28:16:fb:aa:5b:79:69:b7:b2:33:7e:7b:cc:
         a8:a7:c7:75:23:8f:9b:9f:ec:6e:db:54:c4:8f:0f:2d:97:28:
         71:34:f3:f9:6c:be:15:58:1a:16:0c:c0:d7:c3:de:b3:c8:71:
         d6:c3:00:1b:49:fa:21:34:10:fe:14:3f:cb:77:ec:8f:38:48:
         1e:a4:7e:4b:58:25:38:ea:8f:99:da:fe:5b:d6:f2:f8:2d:8f:
         4c:56:62:9a:bf:c7:26:c4:5e:f4:35:92:24:7b:05:0c:27:b1:
         4c:b5:58:08:f7:55:80:4f:0d:1f:c7:ba:e8:85:57:22:89:6f:
         0e:82:09:fd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGc3GM5uIsyvC/QNpRTqMbmstcf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB
OUMwQjZBMDAeFw0yNDA3MDEwMDU3MzBaFw0yNTA2MzAwMTAyMzBaMDMxMTAvBgNV
BAMTKDY3NjkyRTA1MzI4RDI5NEJCQ0E5M0ZGRkE2RDA1MDNDNzNDQUM0M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NGWuFMw9fXUvQJR17ZK1CbaG
aKe6qAsR87Hvtg4R8CKStazju/g8M/+1PLYTb4QY1TIgYeV1YJFtxOdDrgR4jU+I
w2vsQvVKXxPTOsEcalvyVX4DZU0D9KvSE91xZFe68+p9C9HjP6tgAU4gg3Yk+8tt
3zZyrDt3SQz0Y+5CODEoxPTVyU3DEcwX/gTXqYWTDe6SC3++PAgUuYfzd3qoKAh/
pQNwb9gIo3X45oHqSNyaaAAcK2dMPoVpSe/lxG1zky0QrKRpOsOr8m/mNQpiWbtE
n0cKK5g0RJch5lJHLms4U/L4Lpn4mvuNJXl6bsF5srKP/NQsREzkoXxlnNr/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZ2kuBTKNKUu8qT//ptBQPHPKxDwwHwYDVR0j
BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG
OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw
QjZBMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZGQ3YzBmLTAyZDMtNDIxNy05
ZmMzLTAwNDdhZTE4MzZkYy8wLzMxMzAzMzJlMzUzMjJlMzEzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc0EDANBgkqhkiG
9w0BAQsFAAOCAQEABM0kBahPcUnt36s64snJAU9KcOvJicKiJJG2mXe2NFhi05C8
mVKMEmp+/urVwvAp8ctnF4m690PzIWPQeFxJmoTVRI6IRkbaWDnBTOMJI8I+IE/4
VzdQ7uPZUHYcrIaoFtL+pL39X+riPOMGgDTWwPLVe9Iz15KR1X7iVdVKY8GPrFwo
FvuqW3lpt7IzfnvMqKfHdSOPm5/sbttUxI8PLZcocTTz+Wy+FVgaFgzA18Pes8hx
1sMAG0n6ITQQ/hQ/y3fsjzhIHqR+S1glOOqPmdr+W9by+C2PTFZimr/HJsRe9DWS
JHsFDCexTLVYCPdVgE8NH8e66IVXIolvDoIJ/Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org