Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa
File:                     3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (raw, json)
Hash identifier:          jpn48nG0Ycj+1UdP2KBIiJehtvwWTXv0KyE63OCNOE4=
Subject key identifier:   0F:E9:59:A6:C1:CF:17:D7:AE:3F:C8:62:E5:72:BE:49:1F:3D:0A:86
Certificate issuer:       /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
Certificate serial:       46E21D92ABB090E5160892B7C66E783192FF342A
Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa
Signing time:             Tue 21 May 2024 11:14:30 +0000
ROA not before:           Tue 21 May 2024 11:09:30 +0000
ROA not after:            Tue 20 May 2025 11:14:30 +0000
asID:                     151572
IP address blocks:        103.60.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl
                          rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:1d:92:ab:b0:90:e5:16:08:92:b7:c6:6e:78:31:92:ff:34:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
        Validity
            Not Before: May 21 11:09:30 2024 GMT
            Not After : May 20 11:14:30 2025 GMT
        Subject: CN=0FE959A6C1CF17D7AE3FC862E572BE491F3D0A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:e2:f1:7d:34:23:5b:d8:72:a1:e6:c4:f0:
                    c5:76:80:28:fe:7c:73:fb:08:4d:18:f9:51:c9:92:
                    04:2a:d8:10:cb:13:fa:c7:f8:cc:fb:f3:0f:eb:af:
                    6c:d8:0a:a0:f9:01:eb:af:b0:06:63:52:91:4b:35:
                    5c:6a:16:19:1f:bf:5c:bf:c4:d5:29:26:33:1f:ef:
                    2a:26:db:a0:ac:49:39:74:f6:fe:33:57:0f:2e:69:
                    8a:7a:4f:b5:ef:f8:39:0d:51:43:5a:3b:7a:93:c6:
                    01:21:52:b3:f3:ef:ef:3a:89:61:3b:9b:fe:6f:40:
                    57:ed:8e:72:e1:9c:ee:6f:ee:21:0c:cf:21:8c:c6:
                    f2:ba:48:60:77:0d:c1:9c:47:67:3c:4e:f5:06:9e:
                    eb:67:c1:9c:2e:c1:82:16:87:fe:15:ee:ae:8a:cd:
                    80:b0:d0:f5:10:6c:29:8e:4c:2b:6c:b8:79:ee:a8:
                    4c:ec:51:44:a6:c2:45:54:dc:e5:c3:58:8e:27:52:
                    57:fd:34:f7:3c:04:45:f1:cd:f8:00:ca:7e:d0:46:
                    75:1f:4c:4d:fd:91:8d:53:80:c9:ab:f1:fb:ce:b4:
                    d0:90:4d:99:8d:f3:a7:a5:30:70:79:02:61:a1:98:
                    76:6a:9c:53:88:bc:51:af:56:13:7e:9a:2a:a0:7c:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:59:A6:C1:CF:17:D7:AE:3F:C8:62:E5:72:BE:49:1F:3D:0A:86
            X509v3 Authority Key Identifier:
                keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32342d3234203d3e20313531353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:28:92:5e:88:ea:3c:77:ad:09:81:5f:62:cc:9e:ef:2a:b3:
         ea:04:fa:73:c5:4b:ec:5d:6e:8f:2f:02:48:f4:1f:9d:33:17:
         31:89:ae:37:38:a5:49:33:47:31:80:83:71:9c:5a:7f:4b:dd:
         cc:0d:d4:a3:cf:15:bd:13:33:1a:90:96:47:0b:51:30:2e:b7:
         01:16:08:9e:d7:07:64:6c:1d:e8:29:b5:e0:9e:58:f9:9f:bd:
         86:0d:7a:0c:bd:b8:b4:45:b5:7a:0d:86:1c:05:66:2d:38:52:
         d4:30:9c:cf:fe:5e:a5:00:73:6b:b7:98:67:ba:b4:82:e2:5f:
         53:37:ed:7f:29:c7:16:de:c2:a5:30:c8:d6:12:0a:9e:b7:2b:
         26:4e:78:85:3c:1b:0b:02:55:cb:30:14:6d:36:8a:6a:d9:40:
         8e:33:25:11:cb:f0:34:a7:05:65:48:e7:b0:05:3c:18:09:b9:
         f2:30:25:fd:9c:a0:fd:d0:ea:af:17:a9:a5:a3:df:5c:55:b0:
         25:c1:45:e9:bb:32:20:49:c6:52:96:e1:51:6a:42:0a:81:74:
         7e:38:61:d0:37:e0:54:82:72:8a:8f:a9:f9:16:b8:16:1e:13:
         5c:72:ad:1e:1d:ae:4c:a5:fe:b3:9d:ee:14:b6:9f:eb:40:a8:
         83:d3:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 15:17:13 2024 by rpki-client on console-ams.rpki-client.org