Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa
File:                     3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (raw, json)
Hash identifier:          C1HlnOYNkbj9dYN+GVNsy5Ocwp8L1tuS754SnYYyHlE=
Subject key identifier:   1E:B2:AD:05:B3:D2:4B:01:76:10:90:B9:1A:B6:39:A0:E1:00:EC:AC
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       0F33A92170D16AA26FA391C0CE4CB3176CEB1E73
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa
Signing time:             Mon 01 Jul 2024 01:04:26 +0000
ROA not before:           Mon 01 Jul 2024 00:59:26 +0000
ROA not after:            Mon 30 Jun 2025 01:04:26 +0000
asID:                     138079
IP address blocks:        103.130.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:33:a9:21:70:d1:6a:a2:6f:a3:91:c0:ce:4c:b3:17:6c:eb:1e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul  1 00:59:26 2024 GMT
            Not After : Jun 30 01:04:26 2025 GMT
        Subject: CN=1EB2AD05B3D24B01761090B91AB639A0E100ECAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:d0:ba:e2:44:7c:47:3e:b7:31:a5:ec:6a:
                    f1:07:91:35:34:1a:2f:38:69:d5:9c:1e:5c:57:b9:
                    51:87:55:71:b6:fa:c3:2f:3b:23:5a:83:b6:77:66:
                    d6:f9:a7:2d:d1:7c:55:40:03:54:7b:c4:97:7c:2e:
                    12:bc:a1:28:71:4e:25:db:64:8d:6a:81:2a:06:23:
                    84:95:b5:50:52:e8:77:55:28:24:f5:64:66:43:c7:
                    6b:e5:71:8d:92:1b:03:dd:e6:62:91:99:7e:69:1b:
                    27:3d:81:9e:3e:9d:51:21:b2:b5:0e:ae:c0:56:66:
                    ff:c8:3a:ab:fa:40:6b:cb:4f:9e:42:79:ac:5e:19:
                    1a:29:48:e5:95:62:b7:f0:c8:98:6c:c8:8c:d3:58:
                    c5:25:b7:0a:10:0f:f3:30:a4:41:a8:47:b9:d3:2f:
                    1c:b1:8d:fa:70:55:19:a0:f0:73:83:61:ce:9f:1a:
                    ce:b0:dc:3c:6f:3d:cf:73:73:86:20:92:a3:5b:08:
                    76:43:5c:b1:07:94:08:bf:fd:49:63:47:3c:87:4d:
                    dd:57:5e:07:93:18:aa:37:f5:2e:61:ef:28:d9:de:
                    f7:21:b8:9e:6a:00:61:a3:87:38:4d:c3:52:ad:6c:
                    2c:6c:33:c8:83:6f:26:19:58:4e:ba:68:38:8f:fa:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:AD:05:B3:D2:4B:01:76:10:90:B9:1A:B6:39:A0:E1:00:EC:AC
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:51:9b:45:ed:2d:70:30:86:47:11:df:50:90:59:05:8a:
         2b:24:b3:43:8e:f9:70:8e:50:d2:43:2e:65:fc:5d:e5:83:da:
         fb:82:ec:8c:db:ac:9f:30:89:26:c1:45:73:24:87:24:0c:38:
         7f:43:5c:93:aa:f1:85:cc:3e:27:f0:bc:ca:08:e2:50:70:ec:
         ac:68:23:cc:47:2d:f6:f7:fd:38:49:fa:b6:ca:39:a5:8f:d1:
         2b:7b:7f:46:39:ca:79:b0:2e:c2:2d:44:3a:e5:a8:80:c9:d2:
         db:f2:54:c7:d3:64:71:08:5b:d6:b0:52:64:c1:01:3e:7b:9f:
         60:8f:19:4d:fe:92:48:c7:96:aa:56:f6:ed:2d:04:90:81:6e:
         0c:0e:30:d7:ea:0c:a1:50:00:23:c1:81:e4:c9:3f:7b:b5:ea:
         45:db:b2:15:57:96:2e:57:95:c3:50:c3:b0:da:db:17:74:7c:
         d6:e5:60:c4:b5:8c:a3:93:0b:81:6c:8d:2a:e7:a6:fb:ad:da:
         ba:b9:2e:d0:d5:41:96:85:f8:bb:fd:95:24:ab:1a:40:6a:1d:
         26:74:39:5f:71:27:35:49:38:f3:c4:4a:1c:44:1d:65:be:6b:
         fb:16:9c:5c:ea:32:6f:8a:07:f9:89:4d:52:42:80:b6:b0:d9:
         d9:c7:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org