Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa
File:                     3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (raw, json)
Hash identifier:          Z5b7Vua54PJ7Om3JFRHBsES1fzMuzJN6IPDPQVO0+lM=
Subject key identifier:   17:9D:FE:EC:F7:C1:46:7F:19:39:B5:FD:28:19:18:05:F4:7A:C7:19
Certificate issuer:       /CN=C45A558750D6CF5BE02532DDE80326AEF5012912
Certificate serial:       6755E0F4F54AAE282AD1D7A18B52AF3263587C36
Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa
Signing time:             Mon 03 Jun 2024 16:00:00 +0000
ROA not before:           Mon 03 Jun 2024 15:55:00 +0000
ROA not after:            Mon 02 Jun 2025 16:00:00 +0000
asID:                     142369
IP address blocks:        103.170.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl
                          rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 07:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:e0:f4:f5:4a:ae:28:2a:d1:d7:a1:8b:52:af:32:63:58:7c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912
        Validity
            Not Before: Jun  3 15:55:00 2024 GMT
            Not After : Jun  2 16:00:00 2025 GMT
        Subject: CN=179DFEECF7C1467F1939B5FD28191805F47AC719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:58:83:2e:38:ed:15:b9:65:e4:41:9f:68:
                    0e:b8:c7:bb:99:63:2c:af:93:2e:78:f5:86:a1:64:
                    5e:62:c1:a2:d2:e3:e2:05:f8:75:52:fb:a5:08:76:
                    6e:0a:71:19:39:17:cc:ed:52:42:c5:08:ae:42:23:
                    f0:49:cc:e7:a7:fd:4e:f5:72:be:01:fa:ca:b2:b2:
                    60:99:a2:5d:17:c7:3b:d1:c9:eb:47:a4:fb:08:db:
                    d0:97:d8:15:c7:0c:74:7e:15:6a:da:94:fe:a9:86:
                    16:3a:d5:94:eb:c5:e4:d6:dd:fe:a2:79:dc:dd:f6:
                    01:77:e2:51:88:1d:c9:3f:39:f1:85:4b:d9:dc:81:
                    e7:91:ed:89:ae:c6:df:16:52:2f:46:af:c9:39:f4:
                    19:49:88:6d:34:35:44:36:5b:76:57:4c:41:dd:74:
                    e3:ee:48:b1:51:02:95:e7:b2:d5:c3:4c:c0:24:1b:
                    09:5f:c8:80:6a:bc:5a:95:a3:dc:5c:f7:41:7b:48:
                    eb:47:5b:70:a0:b8:34:1a:aa:bf:03:c9:88:0c:f3:
                    3e:4f:df:e9:91:81:15:84:b2:eb:25:e5:b9:a5:c8:
                    39:03:36:10:78:d0:60:95:7b:91:20:44:a2:4d:c4:
                    da:1d:2d:f9:ea:42:c0:a6:62:50:59:00:17:d5:97:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9D:FE:EC:F7:C1:46:7F:19:39:B5:FD:28:19:18:05:F4:7A:C7:19
            X509v3 Authority Key Identifier:
                keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:77:40:32:4b:ab:d0:ac:86:73:c3:7d:41:4d:0b:7f:5f:
         76:f7:c4:7f:27:3a:95:9c:50:72:c5:4a:1f:58:c6:f4:28:08:
         71:33:c8:fe:75:5f:7d:3d:e9:f9:47:24:33:3f:d7:ab:e9:dc:
         69:8a:be:ce:81:62:12:df:74:72:1c:c1:ce:e0:fc:ce:2e:24:
         f4:ec:a8:91:28:e7:46:a0:ee:9f:c3:49:c3:64:de:15:31:01:
         8d:3d:a2:60:6e:bb:d9:81:dd:9b:c0:17:95:f5:e5:21:a6:28:
         18:50:d6:6c:c9:88:f9:5f:a2:2b:95:b0:72:6f:e8:fa:59:13:
         d8:54:d4:58:44:02:16:09:93:f3:71:63:ae:02:cc:5a:d0:f8:
         7f:9b:d1:a9:12:ae:a4:03:33:c8:dd:6d:3e:09:c4:79:e1:71:
         aa:67:f2:e4:ad:ad:ef:e6:19:0c:ea:57:a1:06:48:ad:77:20:
         95:32:05:b8:9c:3b:45:f2:44:51:16:4d:d5:fa:a1:19:a4:64:
         95:c3:cd:81:b0:d3:57:66:15:bc:67:15:30:2f:3e:ad:bb:19:
         12:a8:b2:d4:e7:53:92:ca:1d:e4:36:f4:9e:fb:ba:5c:59:82:
         75:bf:73:69:dd:7c:d0:a0:b4:4e:4e:f7:74:70:fa:f7:7a:c1:
         f4:61:cc:9b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZ1Xg9PVKrigq0dehi1KvMmNYfDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG
NTAxMjkxMjAeFw0yNDA2MDMxNTU1MDBaFw0yNTA2MDIxNjAwMDBaMDMxMTAvBgNV
BAMTKDE3OURGRUVDRjdDMTQ2N0YxOTM5QjVGRDI4MTkxODA1RjQ3QUM3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiFiDLjjtFbll5EGfaA64x7uZ
Yyyvky549YahZF5iwaLS4+IF+HVS+6UIdm4KcRk5F8ztUkLFCK5CI/BJzOen/U71
cr4B+sqysmCZol0XxzvRyetHpPsI29CX2BXHDHR+FWralP6phhY61ZTrxeTW3f6i
edzd9gF34lGIHck/OfGFS9ncgeeR7Ymuxt8WUi9Gr8k59BlJiG00NUQ2W3ZXTEHd
dOPuSLFRApXnstXDTMAkGwlfyIBqvFqVo9xc90F7SOtHW3CguDQaqr8DyYgM8z5P
3+mRgRWEsusl5bmlyDkDNhB40GCVe5EgRKJNxNodLfnqQsCmYlBZABfVl609AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUF53+7PfBRn8ZObX9KBkYBfR6xxkwHwYDVR0j
BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw
RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx
MjkxMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYmMzZjI5LTZmOWQtNDdkMy05
ZTc3LWMyODllNWZlZTc4ZS8wLzMxMzAzMzJlMzEzNzMwMmUzMTMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqnMwDQYJ
KoZIhvcNAQELBQADggEBAIp1d0AyS6vQrIZzw31BTQt/X3b3xH8nOpWcUHLFSh9Y
xvQoCHEzyP51X3096flHJDM/16vp3GmKvs6BYhLfdHIcwc7g/M4uJPTsqJEo50ag
7p/DScNk3hUxAY09omBuu9mB3ZvAF5X15SGmKBhQ1mzJiPlfoiuVsHJv6PpZE9hU
1FhEAhYJk/NxY64CzFrQ+H+b0akSrqQDM8jdbT4JxHnhcapn8uStre/mGQzqV6EG
SK13IJUyBbicO0XyRFEWTdX6oRmkZJXDzYGw01dmFbxnFTAvPq27GRKostTnU5LK
HeQ29J77ulxZgnW/c2ndfNCgtE5O93Rw+vd6wfRhzJs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org