Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa
File:                     3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (raw, json)
Hash identifier:          FECXbEANcSvpuwQi6g61+PQ8hXLctZV7VoL+uT0qSco=
Subject key identifier:   C6:E7:51:DA:F3:A2:3F:B5:12:9A:0E:3E:24:8F:76:2A:FE:AC:E6:EB
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       235D676A983BC999D4CBC16913DDBB4079F1A378
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa
Signing time:             Thu 04 Jul 2024 04:00:22 +0000
ROA not before:           Thu 04 Jul 2024 03:55:22 +0000
ROA not after:            Thu 03 Jul 2025 04:00:22 +0000
asID:                     141126
IP address blocks:        103.172.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
                          rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5d:67:6a:98:3b:c9:99:d4:cb:c1:69:13:dd:bb:40:79:f1:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Jul  4 03:55:22 2024 GMT
            Not After : Jul  3 04:00:22 2025 GMT
        Subject: CN=C6E751DAF3A23FB5129A0E3E248F762AFEACE6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:32:9b:ee:3c:ee:f9:3b:31:38:46:e4:98:
                    17:cf:46:db:00:31:7c:b0:b5:b7:7d:87:78:ac:20:
                    d6:a2:48:b6:77:17:d9:db:ac:61:8c:8d:25:25:95:
                    8d:2d:81:b4:9f:b5:9a:4d:85:0e:36:b1:a6:93:a3:
                    52:c3:03:03:f2:5c:4e:e8:33:bb:40:dc:f4:94:cd:
                    00:31:a7:2b:4c:ab:6e:e1:aa:52:4c:ef:72:ee:2f:
                    4b:ab:f9:2e:cd:c7:d0:0d:7b:a0:b8:91:67:55:24:
                    63:19:ab:38:93:e5:a5:41:86:82:05:cf:2b:be:dd:
                    bb:8a:80:1c:14:78:f2:e0:96:35:50:41:93:6e:44:
                    1d:1d:ff:fc:c4:8b:ac:c8:3d:e7:b8:fe:88:81:fb:
                    9e:1b:df:7b:e4:7b:6c:48:67:6e:85:96:d7:5d:7c:
                    f1:a3:8e:e6:e5:72:4c:de:97:da:2c:82:2a:39:5c:
                    97:57:9c:b8:05:73:75:cf:3b:16:ab:79:8e:f7:e7:
                    58:62:1f:62:8d:9a:bc:64:74:4f:4a:97:64:17:1a:
                    49:6d:90:7a:9a:cb:2d:7e:5d:01:db:12:73:83:04:
                    d1:54:5c:39:b2:5c:ee:58:10:3c:3f:00:be:35:6c:
                    6e:c1:c7:52:44:38:77:17:25:29:88:ea:4d:58:b4:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:51:DA:F3:A2:3F:B5:12:9A:0E:3E:24:8F:76:2A:FE:AC:E6:EB
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32332d3233203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:47:a1:6a:9a:0a:96:67:d4:7c:85:92:0b:5b:6f:01:53:a8:
         46:c3:1d:3e:0e:7a:61:d1:56:e3:72:6a:f8:48:2e:1d:ba:62:
         a3:3a:db:02:70:6d:e0:b0:be:0a:ef:6a:b7:7b:59:0b:26:c9:
         75:a9:c8:7c:03:68:b5:11:cf:57:95:db:a2:a2:44:22:3e:12:
         da:1f:73:09:70:dc:95:35:8c:a9:21:4e:36:af:9b:66:f3:c9:
         db:22:14:77:bc:71:73:23:82:1d:40:33:da:ac:c7:9c:05:76:
         0c:3e:15:ea:78:27:2b:b4:5e:58:e3:55:d5:79:ea:11:73:9c:
         b7:5e:2d:b8:f6:c8:54:9d:30:28:b5:3c:8c:93:95:0c:11:77:
         b1:df:62:3e:73:ee:bb:05:67:85:4f:d5:b9:2b:c2:a0:e0:7e:
         a7:16:30:47:9e:33:f4:de:a7:44:fa:8b:70:c9:87:e4:be:6d:
         da:72:4a:82:ad:b1:05:4e:4a:7e:d1:d1:73:b8:46:bd:ab:29:
         a9:18:80:64:33:60:7f:03:61:44:18:3f:18:dc:22:80:e3:f6:
         1a:cd:a8:4e:55:f1:a5:9e:09:6f:90:00:dd:b1:ff:70:6d:d8:
         20:52:05:fa:9c:b3:f9:fc:23:52:75:86:8e:12:2d:e7:d7:bc:
         e7:86:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org