Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137342e302f32342d3234203d3e203536323531.roa
File:                     3130332e342e3137342e302f32342d3234203d3e203536323531.roa (raw, json)
Hash identifier:          JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=
Subject key identifier:   78:8C:14:11:09:36:F2:5D:7D:18:15:E6:36:86:C7:78:A6:22:01:77
Certificate issuer:       /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
Certificate serial:       69025B9DB017DCD12F37550A00D58184FAB5A88F
Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137342e302f32342d3234203d3e203536323531.roa
Signing time:             Tue 22 Apr 2025 10:00:00 +0000
ROA not before:           Tue 22 Apr 2025 09:55:00 +0000
ROA not after:            Tue 21 Apr 2026 10:00:00 +0000
asID:                     56251
IP address blocks:        103.4.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl
                          rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:02:5b:9d:b0:17:dc:d1:2f:37:55:0a:00:d5:81:84:fa:b5:a8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5
        Validity
            Not Before: Apr 22 09:55:00 2025 GMT
            Not After : Apr 21 10:00:00 2026 GMT
        Subject: CN=788C14110936F25D7D1815E63686C778A6220177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:e1:90:ab:66:cb:64:89:a4:ba:30:2c:2d:
                    b9:ed:27:c7:30:ac:1e:15:4d:93:a1:d1:42:df:f8:
                    06:1a:6f:69:6d:94:b4:11:1b:72:a9:bb:ed:70:0b:
                    79:67:2a:6b:66:c3:64:d5:75:d6:07:ae:8a:2a:0f:
                    13:0b:13:a6:2d:51:82:28:e5:65:15:bb:38:eb:23:
                    33:a4:64:97:6d:53:72:fe:69:bd:cf:a4:21:f6:94:
                    9a:cd:ae:32:52:b2:02:b1:34:21:14:68:68:f8:d5:
                    e4:17:2b:db:fd:fc:9b:e4:92:ec:68:e1:0d:a9:1e:
                    98:38:6f:08:99:5e:7b:1a:73:e4:1e:2e:24:70:06:
                    2e:0f:1c:6d:e6:fb:a1:e8:46:89:18:99:49:04:83:
                    6d:9b:2d:28:64:45:77:4d:f5:0c:cc:bd:2e:7f:45:
                    e3:ea:52:d1:aa:3f:b2:94:cb:af:d8:b2:c3:a3:7c:
                    47:5d:2d:f6:38:7d:ea:74:71:ba:e5:b7:91:92:be:
                    ab:c0:c4:fc:9b:8a:c8:9a:aa:f8:93:19:5c:be:84:
                    0e:7e:de:b7:08:43:d0:53:4a:05:d8:2f:71:ee:4b:
                    cd:34:a1:45:d1:82:ae:62:97:52:05:f5:df:fe:4f:
                    15:b2:f9:bd:e4:65:4b:fd:41:8f:7b:54:20:c7:1c:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:14:11:09:36:F2:5D:7D:18:15:E6:36:86:C7:78:A6:22:01:77
            X509v3 Authority Key Identifier:
                keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/3130332e342e3137342e302f32342d3234203d3e203536323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:f6:eb:6a:1b:eb:f1:a0:d9:dd:a1:57:3c:b0:ae:7d:ea:
         80:06:99:10:cb:44:cd:75:41:4d:76:80:95:07:4d:03:a0:4c:
         90:43:b9:0c:3a:6c:74:8b:dc:18:c2:de:c8:02:33:75:89:c2:
         ab:2a:fa:af:20:87:b5:94:c7:8f:e4:dc:89:d8:8e:02:4c:ec:
         a6:c3:8d:2a:ee:99:5c:e1:9a:ee:aa:e5:92:77:85:ea:5f:ab:
         07:b6:cc:1d:da:fe:b5:0e:59:5b:2c:51:19:c4:2a:c9:ad:98:
         ae:3e:ec:ba:a2:14:45:f0:18:4c:d1:7a:4b:45:11:28:08:55:
         d5:d9:24:74:97:26:08:79:a1:4a:7c:e8:35:54:74:2a:90:29:
         aa:ad:f5:f1:0c:d1:a0:68:4e:ee:6f:5d:a2:53:69:37:48:71:
         5b:b7:54:c7:dc:f6:f6:ad:21:a4:85:c9:f7:7d:79:da:a9:86:
         68:9f:f8:60:bf:d3:62:59:d9:50:11:51:25:4d:f2:e3:a1:c0:
         69:ab:77:c6:d3:ac:8e:51:87:34:af:fc:53:95:d3:d5:e9:04:
         5c:c8:5f:64:d5:42:92:a4:da:bb:24:dc:73:28:73:f1:ce:8c:
         2b:b5:a5:47:e4:34:08:50:9e:58:a5:11:25:87:d8:16:ae:c0:
         2b:e9:b0:81
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUaQJbnbAX3NEvN1UKANWBhPq1qI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4
NDk1MDNCNTAeFw0yNTA0MjIwOTU1MDBaFw0yNjA0MjExMDAwMDBaMDMxMTAvBgNV
BAMTKDc4OEMxNDExMDkzNkYyNUQ3RDE4MTVFNjM2ODZDNzc4QTYyMjAxNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4+GQq2bLZImkujAsLbntJ8cw
rB4VTZOh0ULf+AYab2ltlLQRG3Kpu+1wC3lnKmtmw2TVddYHrooqDxMLE6YtUYIo
5WUVuzjrIzOkZJdtU3L+ab3PpCH2lJrNrjJSsgKxNCEUaGj41eQXK9v9/Jvkkuxo
4Q2pHpg4bwiZXnsac+QeLiRwBi4PHG3m+6HoRokYmUkEg22bLShkRXdN9QzMvS5/
RePqUtGqP7KUy6/YssOjfEddLfY4fep0cbrlt5GSvqvAxPybisiaqviTGVy+hA5+
3rcIQ9BTSgXYL3HuS800oUXRgq5il1IF9d/+TxWy+b3kZUv9QY97VCDHHGJTAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUeIwUEQk28l19GBXmNobHeKYiAXcwHwYDVR0j
BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND
QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1
MDNCNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNWY3NjhiLTQyMTgtNGM1ZC04
OTNhLTBmZjY5NjUyNjYzOS8wLzMxMzAzMzJlMzQyZTMxMzczNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzYzMjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBK4wDQYJKoZIhvcN
AQELBQADggEBAH9r9utqG+vxoNndoVc8sK596oAGmRDLRM11QU12gJUHTQOgTJBD
uQw6bHSL3BjC3sgCM3WJwqsq+q8gh7WUx4/k3InYjgJM7KbDjSrumVzhmu6q5ZJ3
hepfqwe2zB3a/rUOWVssURnEKsmtmK4+7LqiFEXwGEzRektFESgIVdXZJHSXJgh5
oUp86DVUdCqQKaqt9fEM0aBoTu5vXaJTaTdIcVu3VMfc9vatIaSFyfd9edqphmif
+GC/02JZ2VARUSVN8uOhwGmrd8bTrI5RhzSv/FOV09XpBFzIX2TVQpKk2rsk3HMo
c/HOjCu1pUfkNAhQnlilESWH2BauwCvpsIE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net