Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
File:                     3130332e342e3137352e302f32342d3234203d3e203536323531.roa (raw, json)
Hash identifier:          0c0AcZ/g0Y/aLqSrBLtFXttsaA+nVZZS35pU9na53Pc=
Subject key identifier:   9F:19:CB:4B:1B:62:66:CF:78:69:87:E9:0A:76:AB:56:D9:14:A0:0F
Certificate issuer:       /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Certificate serial:       48A1B6DA0F2A6E1392D2FC7A5B1DFAA83D83F5A7
Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa
Signing time:             Tue 21 May 2024 10:00:00 +0000
ROA not before:           Tue 21 May 2024 09:55:00 +0000
ROA not after:            Tue 20 May 2025 10:00:00 +0000
asID:                     56251
IP address blocks:        103.4.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
                          rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 08:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a1:b6:da:0f:2a:6e:13:92:d2:fc:7a:5b:1d:fa:a8:3d:83:f5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
        Validity
            Not Before: May 21 09:55:00 2024 GMT
            Not After : May 20 10:00:00 2025 GMT
        Subject: CN=9F19CB4B1B6266CF786987E90A76AB56D914A00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f9:8c:1b:e3:7e:8e:e5:52:99:8e:eb:12:dc:
                    30:9e:5a:e4:c6:00:5c:1a:57:a0:c2:d2:21:4f:eb:
                    27:0c:81:da:0d:21:3e:ce:08:27:df:20:28:4e:8f:
                    45:d9:fc:f4:89:dc:0b:17:df:63:80:5b:28:92:91:
                    cc:d8:39:da:f4:3d:25:9e:05:87:e7:f9:96:71:e3:
                    aa:35:67:df:2a:92:c4:aa:6e:b4:5b:28:e5:a4:47:
                    de:4d:99:79:52:64:35:64:36:c3:ab:7b:d6:51:58:
                    7f:d5:ad:17:62:62:21:95:95:ea:07:47:07:54:0b:
                    07:f3:85:83:22:79:2a:0f:57:4d:a9:0f:78:2e:a6:
                    6e:22:e6:67:bf:d2:84:c8:56:95:4d:13:71:cb:6f:
                    f9:f3:10:eb:61:9b:5d:46:a8:46:36:41:a1:1a:e4:
                    29:23:fb:1d:4a:59:96:e8:b8:a4:76:2a:d3:4b:bb:
                    96:e8:01:1b:4c:f2:f9:d9:42:3b:45:47:4f:2f:e4:
                    18:b1:37:8f:cb:af:36:31:c6:81:3f:84:f2:85:b0:
                    cb:49:84:5f:aa:6f:eb:ac:82:5c:83:b6:e7:31:58:
                    14:13:38:c9:ae:4c:04:28:dc:a7:5e:1b:45:9f:de:
                    77:a1:fe:20:27:01:2d:0b:f0:55:41:04:2e:e4:71:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:CB:4B:1B:62:66:CF:78:69:87:E9:0A:76:AB:56:D9:14:A0:0F
            X509v3 Authority Key Identifier:
                keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137352e302f32342d3234203d3e203536323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:60:8f:8b:30:d5:fb:85:b8:24:31:6b:76:1d:12:5f:62:
         92:c1:4e:92:e3:e8:5c:03:41:5b:64:26:cd:20:0f:41:f8:03:
         3e:3a:f2:5b:ab:93:1b:7a:54:1c:49:71:0c:36:17:c1:2d:06:
         11:cc:ca:68:cf:b4:bf:a9:4a:4d:80:8b:b9:35:4b:74:99:7e:
         c7:85:be:cb:7f:38:3f:61:2a:b4:c5:24:20:73:c5:d9:ee:ce:
         9d:de:bf:4f:a4:e7:11:53:40:a5:ad:d1:18:fd:db:13:c3:9d:
         00:ae:e7:e0:8e:b6:08:64:b8:f9:d7:44:3b:0b:f8:4f:c2:d4:
         ee:af:64:59:48:c0:05:5f:3f:c7:55:e7:ba:16:f6:a3:26:1c:
         e2:96:ef:45:55:a7:be:62:2b:58:3a:9c:b9:fe:0b:c5:7d:d2:
         92:7a:33:78:6f:2b:36:7c:7a:36:11:fb:55:5f:cd:9b:95:79:
         f7:bb:d8:9a:76:96:c8:1e:f6:9a:42:81:6c:17:6e:fa:95:29:
         12:60:8e:72:d8:87:af:59:e5:d4:b4:4d:2c:e7:49:e6:2c:3c:
         b8:4f:ea:bf:5a:29:a2:f5:9a:a8:bd:00:5c:40:10:91:b9:20:
         04:30:8a:69:5e:66:d9:fc:d9:62:06:45:22:24:8a:21:89:80:
         a2:b3:c8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:14:55 2024 by rpki-client on console-ams.rpki-client.org