Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          TFhZKwNR/B40CI6MIhTrGqXdafQxmGh3I/WIFrNxEC0=
Subject key identifier:   14:62:F9:4F:AA:04:33:89:41:B0:75:7C:A4:B1:92:24:34:18:94:B5
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       22EBC4487E94A94293236FDB6D5EAA0A289D7A3B
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 01 Jul 2024 01:02:30 +0000
ROA not before:           Mon 01 Jul 2024 00:57:30 +0000
ROA not after:            Mon 30 Jun 2025 01:02:30 +0000
asID:                     133811
IP address blocks:        103.52.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:eb:c4:48:7e:94:a9:42:93:23:6f:db:6d:5e:aa:0a:28:9d:7a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul  1 00:57:30 2024 GMT
            Not After : Jun 30 01:02:30 2025 GMT
        Subject: CN=1462F94FAA04338941B0757CA4B19224341894B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:9e:6d:7e:c6:a6:a4:8d:c2:c4:06:e5:4f:
                    1f:a4:5f:5d:45:a7:0b:92:e2:83:57:09:bb:a0:0e:
                    30:c7:d7:e1:fa:a9:5d:1b:2a:75:33:29:e6:1d:8c:
                    04:4a:39:cc:a8:e4:ce:dd:6f:f5:50:be:43:48:0b:
                    c4:ea:f5:aa:42:04:9b:e9:97:1f:95:ae:7a:b7:dd:
                    1f:89:ce:5c:65:ce:1f:6e:71:9d:1b:dc:61:c5:39:
                    2f:8c:54:50:d5:c9:27:f5:73:36:16:e0:47:94:43:
                    6b:20:0d:40:2d:de:41:12:c9:b8:bf:12:64:24:39:
                    ed:a9:34:b9:b3:d0:35:70:02:69:da:a6:ee:11:72:
                    be:49:f5:98:71:65:11:77:33:a4:75:5b:b6:f9:d2:
                    c4:d8:2b:b7:5e:36:0f:8d:49:9a:d9:50:25:c5:19:
                    61:0b:d2:57:08:b6:8c:dc:33:16:20:f7:5b:38:4e:
                    58:75:f4:0a:50:dd:44:07:ea:14:c5:83:46:c0:2a:
                    39:e9:ee:8d:34:c1:7f:64:75:7f:3c:90:0c:ce:25:
                    f0:7c:07:3d:78:76:1f:45:ff:ae:10:d2:d7:43:82:
                    5f:78:b3:2b:72:31:17:6d:c9:4a:50:4a:84:78:bc:
                    f2:e8:ca:1f:31:81:32:dd:b1:31:41:14:cd:c6:78:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:F9:4F:AA:04:33:89:41:B0:75:7C:A4:B1:92:24:34:18:94:B5
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31382e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:28:ab:d8:65:76:de:31:0a:e6:90:d2:b3:f9:d1:54:e2:ba:
         b5:36:2b:fa:cd:9f:05:2a:9e:c3:48:91:0e:dd:50:84:f1:03:
         e6:8a:8e:6f:44:b8:a4:aa:e7:71:1f:e4:e8:7c:a2:fa:73:f3:
         3e:dc:b8:90:17:fb:9e:cd:73:67:e2:c3:18:4f:62:ca:cb:cb:
         d0:49:3d:85:c5:c7:a8:20:80:75:5e:55:97:c1:d7:25:5c:4c:
         8c:21:f9:de:d9:5a:2a:e2:13:2d:d9:a6:35:cd:d1:27:17:03:
         3c:2b:33:d2:8d:3a:69:d7:ed:d0:76:20:46:52:ad:6a:40:58:
         f3:10:7a:b3:a7:1c:d3:07:be:8c:65:fa:79:cb:76:85:04:5d:
         82:fd:e1:b6:44:c8:fa:41:d2:b9:c1:36:d9:a2:e4:9e:f1:f9:
         31:af:b2:e8:98:48:c5:de:63:e3:eb:2d:33:03:b9:f6:d3:b3:
         9c:22:f2:81:80:5b:86:57:26:02:ca:71:09:2e:ed:f6:89:48:
         bf:75:e7:7f:50:35:2b:30:1e:cb:63:fe:36:de:19:ec:80:50:
         60:6e:26:bb:71:64:e0:87:4d:aa:e5:47:51:ed:e5:2e:45:fe:
         9b:b1:ad:45:cb:94:6d:30:7d:7e:11:05:8c:ca:05:24:3b:71:
         f5:f7:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org