Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          QgODoIyqYZYJFRy4PIBQYLz2dNOwL8f8bQ3ZEigNWZw=
Subject key identifier:   74:17:99:41:2B:CD:0F:A7:0B:49:6C:53:BD:57:58:C4:08:F4:06:DE
Certificate issuer:       /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
Certificate serial:       081020F8A07D938B876081D927F880692084CD18
Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa
Signing time:             Thu 06 Jun 2024 05:01:52 +0000
ROA not before:           Thu 06 Jun 2024 04:56:52 +0000
ROA not after:            Thu 05 Jun 2025 05:01:52 +0000
asID:                     141126
IP address blocks:        103.172.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl
                          rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:10:20:f8:a0:7d:93:8b:87:60:81:d9:27:f8:80:69:20:84:cd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE
        Validity
            Not Before: Jun  6 04:56:52 2024 GMT
            Not After : Jun  5 05:01:52 2025 GMT
        Subject: CN=741799412BCD0FA70B496C53BD5758C408F406DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:e2:f6:94:5e:4f:ab:09:50:f7:06:db:19:
                    ed:f9:96:bc:e2:dd:ff:ce:16:fe:33:65:5c:bd:4c:
                    35:e7:ca:16:46:a2:fb:41:67:9e:97:6d:cc:2d:ed:
                    bf:d5:e4:c4:99:93:c0:c1:eb:48:e9:3c:84:71:ab:
                    f9:4c:b1:fd:de:6e:b3:c9:74:e6:9c:d3:e2:ec:0f:
                    bd:0d:e0:1d:bb:1e:36:c2:7c:7d:8a:b9:25:49:27:
                    f2:7f:97:9c:ce:65:32:8d:e2:f2:df:75:a4:18:f5:
                    28:52:41:23:9e:ef:81:9e:06:77:22:91:9c:ca:b8:
                    ca:f6:fc:92:66:fd:45:89:23:cc:e1:28:26:b1:2d:
                    9f:a2:2f:64:99:85:53:70:7d:51:03:2c:7f:89:ba:
                    0d:8d:da:63:ee:02:87:2d:cc:c3:2d:5d:6b:88:eb:
                    39:db:23:76:c7:eb:6c:b6:98:4b:80:c9:ed:87:f1:
                    ec:84:46:b1:37:71:db:66:3b:f2:c4:5d:d2:7a:5c:
                    fb:23:a1:b3:ad:29:cc:a1:d1:6b:bb:b4:73:ba:a7:
                    07:95:67:29:d0:ae:23:b3:7b:5b:6e:31:dd:1a:e2:
                    f0:85:84:14:dd:6e:0e:75:4e:db:54:bc:37:00:dc:
                    b2:28:f3:aa:15:84:d6:c8:fa:d1:23:9a:55:27:57:
                    f6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:99:41:2B:CD:0F:A7:0B:49:6C:53:BD:57:58:C4:08:F4:06:DE
            X509v3 Authority Key Identifier:
                keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/3130332e3137322e312e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:67:da:e2:7c:38:bf:df:e1:09:de:db:72:e2:06:4a:d8:3e:
         33:3a:e7:06:b2:3a:f6:22:ef:38:99:67:e8:7d:b7:2e:44:90:
         b1:a5:52:3a:10:6b:e0:1c:64:8d:51:15:8b:5f:6e:ff:57:96:
         ff:4f:f6:b0:9f:c7:f5:b4:96:5f:ab:c0:63:d7:71:37:3e:ee:
         01:cf:1c:3e:09:a9:be:21:a9:af:01:12:88:f5:0d:0e:f8:8c:
         e6:81:53:fe:41:45:24:8b:d4:63:8b:65:2a:e3:63:d0:eb:7e:
         78:c4:aa:be:8a:67:af:2d:b3:10:04:35:bd:b6:49:73:bc:cb:
         7b:93:fa:90:f1:d0:af:2a:2c:c9:72:67:9b:0d:f4:46:31:f5:
         f5:0b:28:29:e5:34:26:c0:16:af:ca:aa:10:fd:9d:d0:88:d4:
         77:59:8a:7f:68:11:11:5e:f5:2d:98:f7:88:bc:14:c7:21:b4:
         cd:45:9b:38:fe:55:13:df:2d:01:59:2c:65:e1:4c:bd:00:0d:
         78:3f:55:56:2a:aa:50:7a:2d:18:c7:62:43:55:0e:8e:26:3e:
         e4:8c:4f:8e:77:68:ad:56:5a:79:82:d8:03:d7:06:04:b1:04:
         85:00:f5:e6:f3:85:2d:cc:43:17:21:1c:50:07:48:28:c7:ea:
         db:a1:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org