Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          ZWhy/wolBT2qTHnDdCH6juzwqEsIwsR+xgtIVGxTfs4=
Subject key identifier:   2E:A4:74:6C:C5:E0:96:F3:77:33:7B:60:20:14:B6:A2:49:D7:BF:93
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       01CC6C974676EB9BB569F3E4ABDD5F149ECEEF0A
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 01 Jul 2024 01:02:31 +0000
ROA not before:           Mon 01 Jul 2024 00:57:31 +0000
ROA not after:            Mon 30 Jun 2025 01:02:31 +0000
asID:                     133811
IP address blocks:        103.52.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:cc:6c:97:46:76:eb:9b:b5:69:f3:e4:ab:dd:5f:14:9e:ce:ef:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jul  1 00:57:31 2024 GMT
            Not After : Jun 30 01:02:31 2025 GMT
        Subject: CN=2EA4746CC5E096F377337B602014B6A249D7BF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:f6:9b:5e:63:95:12:56:db:58:6a:63:ac:
                    f2:ee:ee:57:39:09:c3:9d:b5:2a:87:40:27:84:10:
                    44:d4:35:62:b1:69:fd:79:ca:8a:42:2b:20:35:95:
                    97:c8:a9:eb:d0:af:e0:ee:00:6d:86:4b:19:22:ae:
                    dd:96:29:a8:da:78:9f:6b:69:40:6f:4e:44:ce:94:
                    33:43:5b:74:66:75:69:03:aa:75:a1:b1:42:4a:3e:
                    ed:59:8a:11:66:cb:05:f2:b3:5a:fb:1f:02:2b:24:
                    5a:0e:6e:a3:b2:b6:e0:e9:0b:cb:b6:f2:7f:b8:22:
                    85:f3:7e:28:7c:f3:7b:01:88:da:6a:bf:5e:e2:b3:
                    d9:01:88:06:b8:2b:ae:57:85:1a:bd:77:9a:95:91:
                    06:3c:84:c4:4c:a3:15:4e:18:74:66:df:40:d4:5b:
                    ce:d4:bf:64:e4:c4:98:a3:25:75:b1:84:1b:7e:49:
                    d7:49:8f:2a:6d:24:02:53:e7:92:2a:b9:7d:51:d0:
                    32:f6:8b:96:46:bc:e7:07:39:a5:3e:61:96:65:4b:
                    53:93:c3:02:90:07:de:91:d1:1e:e4:f0:14:09:72:
                    03:2b:05:ff:b2:e5:a1:2e:8b:27:94:bc:0d:a5:24:
                    09:8f:aa:7a:f3:9d:33:31:92:af:5b:16:b8:7d:c8:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A4:74:6C:C5:E0:96:F3:77:33:7B:60:20:14:B6:A2:49:D7:BF:93
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31392e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:51:9d:d0:af:4d:7c:bf:8b:4b:f7:76:03:b0:a9:af:70:80:
         bd:ce:a9:12:5b:b1:07:42:80:1a:d6:34:0d:da:da:67:b1:a1:
         1c:fb:d9:f4:b7:d7:67:ca:9f:5a:7e:d0:14:1b:23:31:9c:aa:
         71:d7:da:fd:67:01:3b:28:9d:a4:fb:98:5e:44:6f:44:3e:b6:
         39:be:52:fb:83:b6:c8:ec:4e:97:bb:5b:32:ae:4f:e7:6c:ea:
         d3:4f:a4:7b:bb:4f:34:90:d3:94:b9:fa:cd:49:7f:0d:a4:57:
         71:b3:20:ad:aa:cd:d0:1e:bb:44:43:30:ee:65:04:54:5b:a0:
         23:a8:e5:b8:4b:47:ea:a3:dc:d2:f6:4f:bf:f7:8c:11:ee:b6:
         5a:aa:a5:ad:63:5c:4f:61:ef:43:4c:7f:39:c3:12:89:e2:6f:
         b7:d3:44:2b:98:9a:9c:26:61:5e:f0:1a:01:1e:dd:38:83:c7:
         df:f5:6a:9d:ac:6c:2c:7f:fc:18:99:99:11:6b:57:97:f3:3c:
         95:fd:cf:ac:f2:7e:32:93:d9:97:aa:f0:9e:78:8a:a5:56:e8:
         f1:70:b7:f3:ca:0e:6a:ee:17:f5:3e:d2:82:f4:f3:38:04:be:
         05:63:97:53:7c:c7:bd:d0:e4:65:87:bb:60:5a:9d:66:95:2f:
         54:01:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org