Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
File:                     3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (raw, json)
Hash identifier:          Vg6vRv44QEMmcxMY7wG9DqNa3m6MXJFFYpsWtGwaPGA=
Subject key identifier:   3F:64:A4:79:D6:AC:14:3C:60:8D:36:46:F8:44:4A:AE:8E:6A:14:8A
Certificate issuer:       /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial:       56D4A7786535DD7686EAEBA5F7A181673870413F
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa
Signing time:             Sat 02 Dec 2023 07:00:01 +0000
ROA not before:           Sat 02 Dec 2023 06:55:01 +0000
ROA not after:            Sat 30 Nov 2024 07:00:01 +0000
asID:                     63930
IP address blocks:        103.120.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
                          rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d4:a7:78:65:35:dd:76:86:ea:eb:a5:f7:a1:81:67:38:70:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Validity
            Not Before: Dec  2 06:55:01 2023 GMT
            Not After : Nov 30 07:00:01 2024 GMT
        Subject: CN=3F64A479D6AC143C608D3646F8444AAE8E6A148A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:43:bc:58:9d:34:2f:5a:58:0e:5b:42:ca:
                    ef:22:d2:c4:2b:e0:78:8d:dc:16:4e:aa:57:86:d6:
                    9e:37:6c:3f:e5:c9:c6:1c:7f:a2:08:1a:3f:44:12:
                    a3:b1:38:b5:6f:1c:ea:a8:69:1e:0b:68:d7:09:3a:
                    fc:79:f7:4a:13:88:e4:9c:a5:06:bf:30:97:43:56:
                    d9:63:49:eb:13:72:22:aa:ed:2d:b7:13:0f:88:12:
                    d4:1b:0b:fd:e2:fa:a8:ba:ea:61:40:fc:bb:16:01:
                    50:25:dd:d8:68:7e:72:fd:a9:52:9f:cd:cb:67:1c:
                    56:f2:9e:6f:44:7f:38:48:88:27:5a:51:33:5a:95:
                    61:98:0c:20:8b:57:02:41:c0:01:2a:2a:af:bf:37:
                    57:8d:a0:eb:04:47:c6:54:27:07:61:56:8d:4b:8f:
                    85:24:a3:a9:b0:76:18:5c:9c:00:48:39:e3:2c:13:
                    04:e3:0a:fe:b9:d3:f0:3e:d9:1b:53:e0:eb:75:46:
                    69:7c:83:b7:00:3b:65:3d:01:f2:c1:f8:cb:2b:fc:
                    1c:ed:5a:be:8a:7d:67:84:1a:30:69:87:bf:0f:9d:
                    87:13:4f:2d:1d:62:30:35:20:8c:33:49:8c:12:de:
                    b0:dc:bb:74:e8:f6:53:b6:41:e4:5b:9b:c3:a5:64:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:A4:79:D6:AC:14:3C:60:8D:36:46:F8:44:4A:AE:8E:6A:14:8A
            X509v3 Authority Key Identifier:
                keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cb:e7:86:34:f0:e0:c9:61:92:63:f0:25:e9:88:4c:b5:5d:
         c7:ec:28:61:d6:56:b1:3d:de:fe:8c:bb:ca:8b:2c:fe:0f:78:
         fd:53:fe:8a:72:7c:bd:57:8b:66:8a:d3:56:80:0e:55:c0:9b:
         57:85:66:7b:5b:92:33:29:dc:6c:32:58:12:ce:32:3f:30:b6:
         84:10:62:ac:dd:2c:05:ed:1a:40:a1:e7:10:91:fc:19:d9:8a:
         4e:59:b0:9a:53:c2:3c:4b:e3:ec:71:3b:df:01:dc:91:6a:c7:
         93:c2:25:77:18:ba:15:bd:2d:45:ff:cc:d5:d3:af:1e:3a:dd:
         b2:68:20:2c:b2:4d:63:0e:65:4f:0c:e4:08:3e:29:79:3a:43:
         ba:04:d8:12:4a:e7:96:b7:0a:9f:d7:02:21:06:1c:5d:fb:51:
         79:63:0f:d9:19:4c:6b:31:88:45:44:dc:12:9c:f9:b5:64:90:
         25:52:05:34:32:1b:a5:c3:cf:9b:ca:48:32:1e:2a:6b:54:5e:
         cb:2f:c6:a1:ae:a3:4f:9e:78:82:e0:8b:38:5e:a5:73:58:e5:
         af:b4:b5:4a:08:09:c2:20:2d:c1:2f:50:82:f0:4f:2c:15:0f:
         a9:38:a0:51:c0:79:cc:7e:78:ab:dd:ef:cd:0e:aa:44:20:51:
         40:6b:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org