Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa
File:                     3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          fRqyngvw82Wsy10hqtugTymIlGohJtw4S4I3wxNz99Q=
Subject key identifier:   E4:F8:93:BE:BE:FE:39:28:10:35:5A:B4:BE:A9:C5:9D:98:44:4E:34
Certificate issuer:       /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial:       7E07726C93BE53BD432E38BEBB302E18EB14CFB7
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa
Signing time:             Sat 02 Dec 2023 07:00:01 +0000
ROA not before:           Sat 02 Dec 2023 06:55:01 +0000
ROA not after:            Sat 30 Nov 2024 07:00:01 +0000
asID:                     63023
IP address blocks:        103.120.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
                          rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Apr 2024 22:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:72:6c:93:be:53:bd:43:2e:38:be:bb:30:2e:18:eb:14:cf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Validity
            Not Before: Dec  2 06:55:01 2023 GMT
            Not After : Nov 30 07:00:01 2024 GMT
        Subject: CN=E4F893BEBEFE392810355AB4BEA9C59D98444E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:41:46:a0:e0:12:13:4e:93:95:a2:ee:24:
                    81:2c:69:82:f5:a2:fe:fa:f0:4c:a0:fc:54:da:46:
                    9b:ac:07:22:cf:9c:51:83:3a:36:02:66:65:ec:01:
                    4c:eb:c4:27:98:5f:0b:2d:9c:52:82:b4:73:f4:c1:
                    3a:94:fb:9f:7c:1d:79:f0:c2:cc:d2:f3:22:29:77:
                    05:73:f0:59:b0:88:ef:3c:d9:57:e1:e8:a1:a1:e2:
                    36:26:86:e5:ad:de:c0:2c:f7:82:de:a7:d2:e2:47:
                    30:f6:f3:ed:de:fd:ed:ef:01:34:6f:7b:a9:9b:ae:
                    46:30:b0:ad:dc:ac:22:79:87:1b:0e:24:6c:b9:72:
                    36:dc:c6:dd:40:2f:94:a4:82:6c:18:91:26:41:af:
                    09:96:b9:e7:57:7a:82:c2:21:36:93:fd:a0:a8:2b:
                    dd:45:45:97:b1:85:82:0a:04:5e:e5:cc:2d:40:5c:
                    0c:8e:1e:a3:6d:57:da:b3:8f:f5:0e:16:e3:08:95:
                    6a:fe:9f:ea:aa:ec:70:51:c5:30:3e:f2:1b:99:fa:
                    66:8c:cf:8d:de:19:d4:6c:12:c8:98:cb:11:bc:70:
                    7b:68:8a:d0:96:b3:b7:4a:b2:9c:59:f7:f8:d9:f1:
                    d9:8c:56:7d:74:7d:70:bc:63:4a:29:fe:d3:3c:04:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F8:93:BE:BE:FE:39:28:10:35:5A:B4:BE:A9:C5:9D:98:44:4E:34
            X509v3 Authority Key Identifier:
                keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:1e:fc:df:48:e9:e4:af:e2:d9:e3:56:b6:17:12:66:6c:94:
         fd:ab:8b:40:88:33:59:51:cd:d4:29:6d:6c:0e:39:78:ff:da:
         d9:e7:a9:68:0f:22:d2:04:bc:b2:dd:0f:43:1d:56:9a:5b:21:
         b2:5e:cd:b4:b9:84:45:8e:2e:0f:5e:8e:34:b7:58:66:bd:09:
         65:58:8c:57:ed:bd:15:bc:d7:e9:87:6a:1d:b0:80:e4:3b:e5:
         93:fb:81:af:09:a7:b5:ef:a5:37:f2:5f:db:17:c4:93:ff:82:
         01:1f:93:de:fa:70:12:54:cb:1a:df:54:ff:4b:38:ee:f3:a8:
         98:0d:33:e4:e1:56:77:35:dc:3c:9e:99:d8:f4:21:ca:38:62:
         8c:c1:d3:53:ac:2e:54:d6:f2:26:cd:a3:71:34:00:a0:c6:6a:
         2e:db:31:bb:74:62:a9:56:fb:6e:2e:29:1c:66:07:74:cb:b5:
         7b:12:0b:97:d9:61:79:ea:bb:12:60:cf:ec:d3:6c:ee:e9:98:
         3f:35:73:69:58:89:bd:2f:e8:f4:05:94:67:7e:f2:21:f9:09:
         48:7e:9e:d6:3b:ea:44:1b:b9:f4:2e:87:03:be:ea:fc:2a:22:
         6e:86:36:39:a1:0d:ba:36:2e:5f:e9:41:3f:f0:74:78:de:a8:
         7c:27:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 20:47:54 2024 by rpki-client on console-ams.rpki-client.org