Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          5T8eHor5zmp1kuFa7D2kKOMHrJWy3PNt3q7VirpvC8E=
Subject key identifier:   6A:C0:A5:8F:2A:06:BD:5B:E8:78:A4:F5:64:40:87:01:2D:E7:97:E1
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       587D2023909FEFBA5A4D0D16A52A4B71683C76E1
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa
Signing time:             Thu 06 Jul 2023 05:00:57 +0000
ROA not before:           Thu 06 Jul 2023 04:55:57 +0000
ROA not after:            Thu 04 Jul 2024 05:00:57 +0000
asID:                     141126
IP address blocks:        103.172.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
                          rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7d:20:23:90:9f:ef:ba:5a:4d:0d:16:a5:2a:4b:71:68:3c:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Jul  6 04:55:57 2023 GMT
            Not After : Jul  4 05:00:57 2024 GMT
        Subject: CN=6AC0A58F2A06BD5BE878A4F5644087012DE797E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:08:89:86:33:d7:7c:aa:f0:d3:41:66:f9:
                    da:f5:a1:8a:98:fb:56:de:94:97:7f:c3:e6:c7:eb:
                    09:0a:50:5c:fb:66:8c:91:56:e7:2c:05:c0:ef:9e:
                    c2:ac:53:38:49:92:c6:80:d9:6c:28:9e:d4:e7:1d:
                    57:b9:ef:bf:5f:c8:d8:68:b4:db:f5:5d:64:aa:42:
                    03:9a:ae:8e:4b:44:59:93:a4:09:8a:af:c8:82:87:
                    8c:72:4a:bc:5e:57:1c:3e:1e:38:f4:b5:ee:a7:1d:
                    f4:be:67:57:0e:c7:3c:86:de:ac:c1:72:19:fc:a5:
                    6b:c9:e5:18:5b:35:98:05:53:40:c6:6a:10:1e:f3:
                    7c:72:ee:ca:db:3b:67:c3:13:8b:a7:76:28:fa:bd:
                    64:23:10:70:fd:47:63:df:9e:d9:e6:af:b1:ee:61:
                    ee:b4:97:e1:ff:49:58:bf:86:bd:b6:be:b1:dc:3c:
                    df:b9:7f:20:27:17:7b:c1:c7:71:2e:6e:3f:b8:03:
                    e2:83:19:52:ac:f8:19:8e:15:51:6c:bd:9a:9e:d8:
                    db:52:d1:81:3d:6f:f0:6e:ca:5f:44:8f:c1:9d:0d:
                    12:b7:22:b2:8a:52:a8:64:d9:17:73:93:25:2d:70:
                    6c:b7:4a:ff:61:5f:21:a4:56:c5:fa:73:2d:98:f0:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:A5:8F:2A:06:BD:5B:E8:78:A4:F5:64:40:87:01:2D:E7:97:E1
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e302e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:8f:6b:ee:0d:18:8d:4f:33:04:f7:37:d7:6d:e3:da:3e:c6:
         50:3f:ec:39:1b:30:17:e4:2a:82:fe:49:43:00:79:69:44:55:
         50:70:ab:73:2a:10:5f:55:86:f3:84:52:f4:5d:65:8f:70:a0:
         cf:05:77:cd:da:e8:96:b1:82:3a:66:9a:b6:f9:67:37:85:fd:
         94:b9:9a:fe:43:22:34:35:69:25:f3:88:c3:b7:f7:61:d3:c0:
         b9:f1:49:0b:c1:c0:8a:dd:ba:39:35:29:86:73:1f:fc:58:46:
         a6:f3:a9:21:18:c3:71:90:ed:48:e0:43:d4:67:12:b8:30:a0:
         97:e3:2e:a7:a0:4f:81:b2:99:59:57:db:bd:2e:87:4e:3e:49:
         06:b7:8f:ab:da:d6:e8:62:17:96:61:af:fb:97:fc:70:54:ad:
         96:1e:7e:3e:4b:c9:ca:d2:5b:9e:28:62:d8:de:92:38:d5:e7:
         de:b1:fd:39:47:c0:65:7f:2d:35:ab:fe:d6:1c:19:d2:c6:f7:
         9c:72:b0:30:21:76:ee:b7:29:37:cf:8e:e9:ad:d1:ef:c4:a9:
         9d:ca:f2:ef:72:83:1a:44:9f:7e:9d:77:33:06:69:a3:d4:6a:
         b4:00:1a:f0:02:c9:a3:3f:6d:fc:df:1a:6b:e5:3a:cb:a0:38:
         45:54:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:28 2024 by rpki-client on console-ams.rpki-client.org