Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          kMTgFhm7y8+vUOnTIGuYD/xnygQP3IJ+v4/uEIrSv/M=
Subject key identifier:   42:FB:26:F2:10:21:C1:64:E8:A0:A9:B3:17:BE:9D:07:BB:BB:95:05
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       730D445387F417A83596D2388535D68B2056FE60
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
Signing time:             Thu 06 Jun 2024 15:00:02 +0000
ROA not before:           Thu 06 Jun 2024 14:55:02 +0000
ROA not after:            Thu 05 Jun 2025 15:00:02 +0000
asID:                     142364
IP address blocks:        103.170.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0d:44:53:87:f4:17:a8:35:96:d2:38:85:35:d6:8b:20:56:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: Jun  6 14:55:02 2024 GMT
            Not After : Jun  5 15:00:02 2025 GMT
        Subject: CN=42FB26F21021C164E8A0A9B317BE9D07BBBB9505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:26:80:ee:80:21:69:56:09:dd:ab:61:55:38:
                    08:a1:c8:eb:ca:7d:34:b6:98:f7:8c:98:1a:76:f8:
                    dd:5b:53:2e:01:ce:ba:1b:41:2a:eb:e7:a0:17:3d:
                    b8:1a:bd:ba:0a:89:a6:83:bc:e3:bb:f1:36:8d:f7:
                    d7:64:37:e4:58:bb:cd:61:35:01:8d:68:9d:09:9f:
                    b4:47:e6:78:5b:c8:47:65:41:d6:30:55:bd:b7:e3:
                    87:38:a4:d8:fa:08:df:f3:af:c9:c5:6a:69:26:33:
                    f7:ae:95:26:2f:4a:dc:76:46:80:1f:00:57:32:f8:
                    0f:be:15:bc:7f:fb:fe:88:3a:67:a5:49:78:1b:d1:
                    5d:d1:60:81:5c:0b:8d:a3:bc:0f:79:ee:8a:b4:11:
                    de:2e:5b:d4:64:b4:0c:db:74:13:72:15:0c:23:e3:
                    a0:9f:c2:36:a9:a3:ef:38:3e:51:b5:b2:e6:84:01:
                    90:dc:79:b8:24:52:09:23:75:86:51:fb:3d:c6:11:
                    88:aa:22:f9:21:a8:76:02:69:71:ee:99:7c:74:e6:
                    47:3c:5a:c7:0f:8b:f2:4d:da:da:23:ce:36:92:a4:
                    bc:ef:b1:09:b5:2b:73:05:e0:ea:81:74:b7:29:16:
                    7b:1c:b5:e4:76:04:6a:af:86:4b:1f:f3:17:cd:ab:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:26:F2:10:21:C1:64:E8:A0:A9:B3:17:BE:9D:07:BB:BB:95:05
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:55:73:1e:f1:27:5d:c4:1d:c3:8c:2f:9f:4c:b9:9a:12:2c:
         0c:1d:f2:50:2f:13:5f:0f:59:0f:cc:4b:98:b2:6c:6c:4d:8c:
         22:a4:85:87:db:5a:e8:eb:d3:59:3b:0c:ec:1d:00:a3:1c:b1:
         c5:d0:64:95:ea:2d:7b:20:26:6c:6d:f6:03:34:51:76:c2:73:
         80:ef:d2:9a:22:a3:cc:bb:2b:b9:f7:84:f7:85:3b:6a:0e:6a:
         97:63:38:cf:35:51:39:98:fe:57:5b:15:2b:5a:0b:0e:69:66:
         a4:64:94:4f:cb:8d:a2:a1:d6:86:27:0a:c4:5a:60:a1:9c:76:
         42:f3:60:03:81:f7:b6:2c:24:e7:e1:2c:cd:b3:d7:dd:ee:3f:
         74:ec:08:66:4c:65:68:67:9a:64:03:04:1a:4e:db:e0:28:e4:
         2c:1e:02:52:c4:fe:b8:35:52:04:06:fc:c9:ed:7a:46:54:cb:
         2b:21:71:98:9e:8c:2c:ea:ec:d1:57:55:d6:28:eb:3d:69:cf:
         e1:9a:b4:fa:14:08:b0:8a:81:2b:87:e0:02:f5:51:f8:78:3b:
         a5:90:7c:1a:6a:43:c0:1c:67:eb:7a:91:ff:47:c6:28:ee:44:
         18:7f:12:05:a9:99:ac:87:ac:2d:7d:f6:c8:4d:eb:94:84:15:
         b2:59:ac:48
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUcw1EU4f0F6g1ltI4hTXWiyBW/mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD
MzVFMUU0RjAeFw0yNDA2MDYxNDU1MDJaFw0yNTA2MDUxNTAwMDJaMDMxMTAvBgNV
BAMTKDQyRkIyNkYyMTAyMUMxNjRFOEEwQTlCMzE3QkU5RDA3QkJCQjk1MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJoDugCFpVgndq2FVOAihyOvK
fTS2mPeMmBp2+N1bUy4BzrobQSrr56AXPbgavboKiaaDvOO78TaN99dkN+RYu81h
NQGNaJ0Jn7RH5nhbyEdlQdYwVb2344c4pNj6CN/zr8nFamkmM/eulSYvStx2RoAf
AFcy+A++Fbx/+/6IOmelSXgb0V3RYIFcC42jvA957oq0Ed4uW9RktAzbdBNyFQwj
46Cfwjapo+84PlG1suaEAZDcebgkUgkjdYZR+z3GEYiqIvkhqHYCaXHumXx05kc8
WscPi/JN2tojzjaSpLzvsQm1K3MF4OqBdLcpFnscteR2BGqvhksf8xfNq3R3AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUQvsm8hAhwWTooKmzF76dB7u7lQUwHwYDVR0j
BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB
MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF
MUU0Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2MWNmNzc3LThhZGYtNGVmMS04
ZDZmLTk4NjJjNTU2MjBlYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTMwMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqmUwDQYJ
KoZIhvcNAQELBQADggEBAFFVcx7xJ13EHcOML59MuZoSLAwd8lAvE18PWQ/MS5iy
bGxNjCKkhYfbWujr01k7DOwdAKMcscXQZJXqLXsgJmxt9gM0UXbCc4Dv0poio8y7
K7n3hPeFO2oOapdjOM81UTmY/ldbFStaCw5pZqRklE/LjaKh1oYnCsRaYKGcdkLz
YAOB97YsJOfhLM2z193uP3TsCGZMZWhnmmQDBBpO2+Ao5CweAlLE/rg1UgQG/Mnt
ekZUyyshcZiejCzq7NFXVdYo6z1pz+GatPoUCLCKgSuH4AL1Ufh4O6WQfBpqQ8Ac
Z+t6kf9HxijuRBh/EgWpmayHrC199shN65SEFbJZrEg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org