Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa
File:                     3130332e36302e39302e302f32342d3234203d3e20313531353730.roa (raw, json)
Hash identifier:          Tl2rjQIDcXWAwfdwhzTW6KkETBmnvM6nR4bUGmMm/jQ=
Subject key identifier:   E3:79:0D:9D:B7:66:AA:5A:B8:53:89:87:68:F4:1A:9C:45:66:83:1E
Certificate issuer:       /CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
Certificate serial:       760AC4EFCAC8181DDB17C50366552795742850E9
Authority key identifier: 46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa
Signing time:             Sat 15 Jun 2024 22:47:41 +0000
ROA not before:           Sat 15 Jun 2024 22:42:41 +0000
ROA not after:            Sat 14 Jun 2025 22:47:41 +0000
asID:                     151570
IP address blocks:        103.60.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl
                          rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 10:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:c4:ef:ca:c8:18:1d:db:17:c5:03:66:55:27:95:74:28:50:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46BF7D6907C7E35726A4180F0BC5F133F6C5AD93
        Validity
            Not Before: Jun 15 22:42:41 2024 GMT
            Not After : Jun 14 22:47:41 2025 GMT
        Subject: CN=E3790D9DB766AA5AB853898768F41A9C4566831E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f4:40:62:56:76:0f:fc:50:93:c2:93:5c:75:
                    b9:11:52:d9:f7:28:86:ff:f5:68:87:8a:4b:f6:16:
                    4b:79:c1:35:08:30:3c:f8:92:5c:78:7b:90:df:be:
                    4e:bb:f5:18:18:d2:07:36:18:44:59:bf:4f:63:2a:
                    a4:f0:09:62:78:3a:3e:a5:8d:82:fc:db:9f:61:40:
                    fb:04:cd:83:16:76:fb:c6:ba:cd:2e:19:c0:ae:e8:
                    61:09:e7:d3:41:b8:1a:e1:48:22:e7:95:75:d3:cf:
                    55:63:47:77:fa:98:5a:26:a3:5d:aa:fd:2b:d3:0d:
                    65:de:37:18:76:b3:c0:41:b7:6c:00:dc:58:b3:92:
                    a7:0d:cc:31:33:3c:d1:e4:d4:ae:96:45:f8:27:02:
                    5e:34:73:6f:23:1c:62:29:ac:73:43:46:44:87:5e:
                    50:40:c6:c5:55:00:35:f4:24:22:79:37:df:59:47:
                    5d:8d:32:35:9f:68:4d:da:75:c8:79:25:fe:bf:af:
                    ed:e5:03:8f:a2:3f:9a:80:ff:12:e4:b2:1f:2f:50:
                    c6:c0:8a:d2:34:da:68:bf:c8:ef:1e:78:8a:50:6c:
                    b0:fa:8c:80:93:73:41:41:be:e5:9e:fb:42:f9:51:
                    73:bb:0d:c8:0b:2e:a9:50:cf:70:a1:df:b9:38:52:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:0D:9D:B7:66:AA:5A:B8:53:89:87:68:F4:1A:9C:45:66:83:1E
            X509v3 Authority Key Identifier:
                keyid:46:BF:7D:69:07:C7:E3:57:26:A4:18:0F:0B:C5:F1:33:F6:C5:AD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46BF7D6907C7E35726A4180F0BC5F133F6C5AD93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0146632a-b2e1-420a-a895-c4a1e2217da3/0/3130332e36302e39302e302f32342d3234203d3e20313531353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:5a:11:fc:9b:34:ff:41:e6:71:0f:6b:82:7c:11:a0:e2:
         5d:fd:23:a3:0e:60:17:15:aa:aa:d5:dd:84:ef:2c:d9:23:e1:
         5e:97:8a:d9:c6:fd:f8:54:3e:90:a6:4b:e7:00:ad:55:a9:3e:
         d9:ef:00:05:c0:ab:e2:1d:4e:fe:e9:54:06:fd:d2:62:07:93:
         dc:e9:4f:07:0c:e3:5f:40:59:98:f4:50:3a:3b:3e:84:bb:73:
         11:2a:14:5d:9e:5b:bd:13:b5:f1:2b:49:dd:27:14:57:23:ec:
         40:0f:21:ea:72:e9:d8:0c:16:52:fe:f0:d0:7c:8e:3e:69:68:
         bd:5b:00:d5:0b:6c:86:33:23:b7:14:9d:71:58:d5:d5:f6:4c:
         90:fe:33:ae:70:3b:7f:72:75:b9:b3:48:0c:5d:cc:61:2a:ef:
         02:5b:16:19:e2:77:47:f9:2c:86:89:f0:d1:b1:62:60:ce:0e:
         2a:b8:ca:ff:a7:08:b3:31:1b:5a:2b:66:d6:3c:d9:58:e1:97:
         e7:2b:b0:b0:c3:bb:46:f9:19:c6:ec:40:fd:61:3d:b7:34:2e:
         8c:bf:00:80:8b:21:11:ad:da:39:e3:20:47:a6:6b:d7:b7:36:
         ff:c9:2b:d7:02:60:bc:8f:ba:f4:ec:e3:0d:92:83:9b:18:1d:
         fd:c5:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:15 2024 by rpki-client on console-ams.rpki-client.org