Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          evc/UpwdT3gTClNncvGMlQTNbD6X2VVV/aczvt6xJGI=
Subject key identifier:   2D:03:F3:21:3F:C3:1C:B1:DD:EA:C2:F7:E8:59:FB:19:9B:42:F4:41
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       141324B58C8B43114F0DA124B2F1150D818BABC3
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 31 Jul 2023 00:07:23 +0000
ROA not before:           Mon 31 Jul 2023 00:02:23 +0000
ROA not after:            Mon 29 Jul 2024 00:07:23 +0000
asID:                     138079
IP address blocks:        103.130.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:13:24:b5:8c:8b:43:11:4f:0d:a1:24:b2:f1:15:0d:81:8b:ab:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul 31 00:02:23 2023 GMT
            Not After : Jul 29 00:07:23 2024 GMT
        Subject: CN=2D03F3213FC31CB1DDEAC2F7E859FB199B42F441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:33:c9:d7:6c:ce:ba:47:50:7a:36:0b:8e:
                    1b:19:82:4f:4c:c6:48:86:c1:71:47:6c:8a:e7:6c:
                    2e:5c:65:59:69:1c:31:e6:6d:e6:1c:4a:29:de:8b:
                    07:6d:4f:a6:a3:8c:a0:49:83:62:86:40:1a:b9:7f:
                    f9:20:9b:8a:52:2b:cd:75:02:89:e9:bd:bf:a4:55:
                    ce:4b:0f:e2:b5:60:01:53:d7:04:27:99:8a:d3:d4:
                    e8:01:c3:43:f9:0d:33:90:85:57:55:85:81:ee:23:
                    44:4f:08:4f:6a:05:f4:e7:33:05:a3:3b:4b:ee:23:
                    f2:9c:c1:c2:b4:b4:0f:cc:17:06:9c:20:36:34:08:
                    e4:56:f8:31:a3:b9:b8:93:bf:53:0b:08:fd:1e:cf:
                    96:70:a2:0a:24:7e:3b:cb:a9:89:57:c6:78:f8:c3:
                    10:7c:bf:69:5f:4a:7e:3f:54:8a:d1:8c:35:d8:29:
                    43:6e:e8:ba:26:d0:e6:a1:37:e7:3b:a6:15:73:82:
                    2c:2b:56:e9:04:9f:53:2e:84:f1:07:ec:ef:5a:5f:
                    ff:15:f1:71:7a:f6:e9:6e:1a:70:1e:52:7f:2f:bb:
                    a1:19:8c:26:6a:0b:93:a5:d9:07:50:77:05:0c:fe:
                    99:bf:30:57:89:46:5a:15:78:f0:c4:a6:cc:b5:cc:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:F3:21:3F:C3:1C:B1:DD:EA:C2:F7:E8:59:FB:19:9B:42:F4:41
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:97:65:8b:31:63:ad:fe:43:40:d6:3f:ab:dd:fe:16:9e:
         e6:9f:fc:7c:14:e6:8a:42:43:a2:04:c1:ed:a6:d4:9c:88:d5:
         f1:71:92:8c:da:2f:d7:b0:75:f3:7e:6f:45:9c:b2:c4:d1:85:
         d9:8b:1a:54:56:84:2a:d2:36:ff:e4:cb:fb:2d:d5:6c:57:ea:
         ee:f9:24:9c:9b:c7:ba:2c:68:11:45:37:0f:29:13:40:30:55:
         5c:b9:bd:38:32:82:31:d2:24:76:e9:42:3a:8d:2f:f1:67:78:
         d6:4e:ef:cb:24:77:91:5e:7d:91:8d:41:8c:e3:c9:57:a0:07:
         ae:cb:ea:a2:24:d6:ec:af:62:80:f9:34:32:df:31:fd:1f:dc:
         fa:c6:4b:b3:75:32:36:e5:fb:40:d4:9a:77:1a:0f:92:49:50:
         87:47:58:23:b5:a9:56:65:b2:97:e4:bb:89:40:1f:56:6b:95:
         45:0f:08:87:12:b0:50:31:a7:d2:55:b3:35:e6:74:d1:4f:f6:
         a6:54:8c:18:5d:1e:d1:95:c6:8b:f1:f8:ce:f7:89:e3:17:bb:
         e4:ba:38:25:85:04:42:e4:8f:d5:08:34:d7:bc:3b:a9:9f:6b:
         4b:e6:0e:90:18:da:7e:22:c9:e9:21:23:15:14:82:f5:0c:52:
         88:43:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 22:58:34 2024 by rpki-client on console-ams.rpki-client.org