Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          Zn8G7kto7H0teel/AK5hoQPL4J/EZewllX6vXX/ujC0=
Subject key identifier:   E5:26:E3:22:21:2C:D1:17:3B:66:C4:EA:E7:E7:A3:94:6A:B9:72:97
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       4A3F022C4813D8DAC974A0FBA6903095F854C052
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
Signing time:             Thu 06 Jul 2023 05:00:57 +0000
ROA not before:           Thu 06 Jul 2023 04:55:57 +0000
ROA not after:            Thu 04 Jul 2024 05:00:57 +0000
asID:                     141126
IP address blocks:        103.172.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
                          rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3f:02:2c:48:13:d8:da:c9:74:a0:fb:a6:90:30:95:f8:54:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Jul  6 04:55:57 2023 GMT
            Not After : Jul  4 05:00:57 2024 GMT
        Subject: CN=E526E322212CD1173B66C4EAE7E7A3946AB97297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:f2:7c:13:07:75:90:5c:23:72:a7:08:eb:
                    a3:48:62:53:77:17:4d:61:36:e3:f4:be:97:ab:0f:
                    b2:52:bc:df:a9:c2:7c:b2:2e:d3:1b:8b:76:d4:66:
                    b1:17:a1:55:76:c6:fa:b9:5a:2b:ff:20:47:ab:36:
                    6e:7c:c3:2a:3e:f7:29:12:d3:0c:fc:29:e3:f3:2d:
                    b3:51:80:26:cc:65:57:54:37:4e:9d:72:11:d7:98:
                    71:00:ce:f8:cf:4f:34:1e:e9:38:66:d8:32:e9:68:
                    f5:9d:a0:ba:9c:27:41:05:71:81:6c:3d:52:cb:6a:
                    b8:79:75:62:d6:36:52:55:69:72:8c:8d:32:51:b5:
                    07:de:f3:d9:e3:77:32:f8:5c:a1:80:cd:29:e6:d4:
                    02:36:68:ca:c7:55:1d:d3:f0:e9:37:70:f9:19:29:
                    6c:61:f2:19:c6:07:54:36:24:61:b0:85:d6:5d:b4:
                    c8:b1:6e:b1:8a:3a:43:b6:d6:59:80:e5:2b:7f:cb:
                    04:84:51:e8:9c:47:b6:46:2a:da:be:40:21:09:b1:
                    41:bf:21:8b:7c:74:7b:ba:08:23:58:23:b3:b3:47:
                    f1:8e:9d:8a:8d:ba:9c:59:95:d2:cb:dd:0f:5f:55:
                    96:3c:e0:f1:3b:c2:33:68:df:35:0e:01:8c:e3:d5:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:26:E3:22:21:2C:D1:17:3B:66:C4:EA:E7:E7:A3:94:6A:B9:72:97
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:96:9b:78:2b:68:cb:8f:d7:50:01:41:3e:1e:ba:c9:ea:5e:
         94:36:0c:9f:22:be:43:6d:5d:c2:ae:31:1b:0a:de:e4:70:d2:
         4f:1c:81:e7:19:b7:53:51:b9:18:f3:5b:69:fa:e7:5c:7a:97:
         a1:8a:cd:f3:e1:6c:95:c8:f6:75:f7:89:4b:1c:f3:07:20:e8:
         69:63:f2:17:c8:6c:e9:cf:6b:8d:0d:bc:34:48:6d:b8:d3:be:
         87:d9:b5:fa:16:c7:35:d5:76:90:36:22:22:ed:2e:f0:64:34:
         ee:7d:1c:34:8c:e5:5e:3d:ab:eb:38:c1:a4:7a:9d:94:cc:76:
         d2:80:8b:17:23:8a:e4:90:9f:f4:da:9b:0c:57:19:6f:69:9f:
         49:c3:5b:bc:9f:77:7f:30:91:1b:9c:5c:e7:36:04:b5:96:2b:
         35:b5:23:c0:68:48:a8:65:26:2f:14:78:e7:70:17:e7:60:10:
         4f:80:36:41:f8:0a:a6:4a:57:a6:73:17:f8:59:c9:16:92:6e:
         ca:e6:08:75:04:5e:91:65:05:3e:08:35:f1:bc:c5:d5:ce:81:
         c3:72:c5:4d:cc:16:b1:3f:d7:02:c5:0a:8a:43:27:77:02:30:
         34:5d:cf:00:74:9d:f8:d4:0a:77:87:ef:49:ec:ce:4d:7e:36:
         02:8d:77:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSj8CLEgT2NrJdKD7ppAwlfhUwFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0
RkNGOUZDRTAeFw0yMzA3MDYwNDU1NTdaFw0yNDA3MDQwNTAwNTdaMDMxMTAvBgNV
BAMTKEU1MjZFMzIyMjEyQ0QxMTczQjY2QzRFQUU3RTdBMzk0NkFCOTcyOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6fJ8Ewd1kFwjcqcI66NIYlN3
F01hNuP0vperD7JSvN+pwnyyLtMbi3bUZrEXoVV2xvq5Wiv/IEerNm58wyo+9ykS
0wz8KePzLbNRgCbMZVdUN06dchHXmHEAzvjPTzQe6Thm2DLpaPWdoLqcJ0EFcYFs
PVLLarh5dWLWNlJVaXKMjTJRtQfe89njdzL4XKGAzSnm1AI2aMrHVR3T8Ok3cPkZ
KWxh8hnGB1Q2JGGwhdZdtMixbrGKOkO21lmA5St/ywSEUeicR7ZGKtq+QCEJsUG/
IYt8dHu6CCNYI7OzR/GOnYqNupxZldLL3Q9fVZY84PE7wjNo3zUOAYzj1SbZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5SbjIiEs0Rc7ZsTq5+ejlGq5cpcwHwYDVR0j
BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD
NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG
OUZDRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNTIyNGM2LTMzNGQtNGYzZC05
ODM3LTFiYWNjYTVhMDIyYi8wLzMxMzAzMzJlMzEzNzMyMmUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMxMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGesATANBgkqhkiG
9w0BAQsFAAOCAQEAU5abeCtoy4/XUAFBPh66yepelDYMnyK+Q21dwq4xGwre5HDS
TxyB5xm3U1G5GPNbafrnXHqXoYrN8+Fslcj2dfeJSxzzByDoaWPyF8hs6c9rjQ28
NEhtuNO+h9m1+hbHNdV2kDYiIu0u8GQ07n0cNIzlXj2r6zjBpHqdlMx20oCLFyOK
5JCf9NqbDFcZb2mfScNbvJ93fzCRG5xc5zYEtZYrNbUjwGhIqGUmLxR453AX52AQ
T4A2QfgKpkpXpnMX+FnJFpJuyuYIdQRekWUFPgg18bzF1c6Bw3LFTcwWsT/XAsUK
ikMndwIwNF3PAHSd+NQKd4fvSezOTX42Ao13bw==
-----END CERTIFICATE-----
Generated at Mon May 6 15:04:04 2024 by rpki-client on console-ams.rpki-client.org