Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa
File:                     3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          6EhkXeE+t0/F1qZJMNgppu11iXtle+Lb18imNuIuhxw=
Subject key identifier:   E3:82:A6:72:8A:86:27:0F:D3:AC:42:48:2E:79:86:4E:D1:21:38:DD
Certificate issuer:       /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial:       21510C87594219FBDE52CA3A16F3D77119E396E8
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa
Signing time:             Sat 02 Nov 2024 08:00:01 +0000
ROA not before:           Sat 02 Nov 2024 07:55:01 +0000
ROA not after:            Sat 01 Nov 2025 08:00:01 +0000
asID:                     8100
IP address blocks:        103.120.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
                          rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:0c:87:59:42:19:fb:de:52:ca:3a:16:f3:d7:71:19:e3:96:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Validity
            Not Before: Nov  2 07:55:01 2024 GMT
            Not After : Nov  1 08:00:01 2025 GMT
        Subject: CN=E382A6728A86270FD3AC42482E79864ED12138DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:c6:16:6e:70:82:25:97:d7:b3:1b:3a:83:
                    b1:90:ab:5d:39:69:fa:4d:2a:00:6d:ae:4e:03:f0:
                    b4:9c:e6:5f:bf:7e:eb:ac:3e:72:2f:67:9e:83:30:
                    bb:88:6c:6b:69:56:12:ff:f4:66:35:9a:72:99:36:
                    5d:19:36:72:fa:86:95:b8:18:9b:4c:3d:cb:03:3a:
                    a4:71:ac:5c:b7:e4:83:dd:2b:15:fd:74:5c:57:90:
                    f5:ab:0b:c1:53:c6:06:dc:d8:ac:0f:d2:4f:d1:f8:
                    7b:22:a0:6d:48:4c:56:89:e5:23:35:1a:f4:44:04:
                    f0:a7:fe:ee:32:0d:e3:bb:36:03:82:f4:61:01:46:
                    f8:92:91:92:74:cc:f8:cb:19:8f:61:54:b8:cd:48:
                    0d:41:57:18:65:30:85:dc:8e:8b:57:e7:18:66:84:
                    d3:3c:95:6a:35:90:7d:85:53:43:45:b5:41:76:a8:
                    63:7a:aa:d6:b4:9a:4e:ae:f8:2e:81:cd:fc:82:45:
                    b2:01:21:5b:d5:04:da:57:d8:9e:f7:06:e4:9e:83:
                    74:18:5f:bc:d1:8d:54:ce:81:8a:44:80:f4:38:82:
                    3b:91:3d:31:fb:ca:fb:b6:10:12:08:23:b9:31:fd:
                    c4:4c:1c:94:a1:52:a9:63:d8:e9:6f:25:52:82:c2:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:A6:72:8A:86:27:0F:D3:AC:42:48:2E:79:86:4E:D1:21:38:DD
            X509v3 Authority Key Identifier:
                keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:b6:90:84:fe:9e:52:19:b3:a8:bd:7a:90:e2:fd:6f:33:
         00:07:8e:2c:2d:46:0a:55:8f:92:a8:57:5e:55:b2:cf:2d:02:
         cb:5d:09:be:bf:f6:ed:d4:33:b7:55:ed:eb:aa:c6:13:a0:d0:
         04:01:f1:0a:8b:32:b2:c8:3e:2a:0c:95:01:f6:17:da:82:bb:
         01:1e:44:a2:55:ad:67:b1:ae:3b:ed:e2:27:b9:05:37:e4:bf:
         a9:95:55:85:ad:09:db:b4:4d:d3:6f:84:db:7a:ea:65:3d:ca:
         c2:49:6a:01:4f:36:d4:4e:b9:c3:75:2c:48:87:db:45:9d:29:
         7e:fa:a9:e0:4e:d9:b8:86:dc:b0:05:3e:f7:c5:37:6c:09:23:
         38:34:97:35:8a:1e:50:44:35:b6:43:13:4a:e5:52:85:d4:ab:
         36:10:64:f1:e9:47:f5:ad:71:2d:9a:ba:0e:71:d7:6c:d2:75:
         05:ec:81:1f:31:4e:54:11:33:72:a1:15:60:a7:d6:94:e1:2e:
         66:13:8c:48:d8:86:b1:16:a7:3c:41:4d:d9:06:17:05:0a:06:
         e8:1f:3c:82:67:31:2c:21:6d:f5:aa:7f:f9:98:a3:b6:d4:62:
         b9:fb:9e:fb:10:00:56:82:2a:13:07:d2:c9:16:89:6a:b1:32:
         aa:41:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org