Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa
File:                     3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (raw, json)
Hash identifier:          dghjU1zZ9kGjcMRT5/T9O0//sXRfgHxldxyPdO36eG8=
Subject key identifier:   DD:28:60:9E:46:DD:17:7D:D2:9E:69:3F:33:DE:FB:DD:C7:AA:64:38
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       6994E255157D2C3701D4912B2A983284FE3C6FED
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa
Signing time:             Mon 01 Jul 2024 01:04:24 +0000
ROA not before:           Mon 01 Jul 2024 00:59:24 +0000
ROA not after:            Mon 30 Jun 2025 01:04:24 +0000
asID:                     138079
IP address blocks:        103.130.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:94:e2:55:15:7d:2c:37:01:d4:91:2b:2a:98:32:84:fe:3c:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul  1 00:59:24 2024 GMT
            Not After : Jun 30 01:04:24 2025 GMT
        Subject: CN=DD28609E46DD177DD29E693F33DEFBDDC7AA6438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:3a:46:3c:86:b4:94:65:bd:aa:39:7d:53:
                    d6:06:47:70:d2:4d:a1:b2:32:44:62:4b:94:62:c3:
                    dc:17:b3:15:ee:1b:40:37:e6:28:ff:5f:4c:e8:59:
                    07:e9:29:74:21:16:4d:1d:80:ff:96:6c:93:66:3a:
                    0f:09:45:46:df:80:e7:90:a1:f0:fb:0d:aa:d4:90:
                    04:17:04:13:08:b8:1f:59:34:ea:f4:81:ca:7f:76:
                    99:54:36:86:b5:c9:1a:5b:73:6d:e7:5e:1c:f9:96:
                    aa:a0:33:10:e2:64:c0:d6:5a:44:2e:33:c5:88:ab:
                    9a:f3:ae:e3:b1:07:75:e4:90:6f:19:90:75:93:fd:
                    cd:11:f2:ee:eb:ae:0e:43:78:88:04:83:b3:b1:b4:
                    f6:5b:4d:f4:1b:28:cf:26:f6:cc:46:42:d1:2e:2d:
                    3e:2b:8d:7a:14:74:6e:e0:0f:f3:17:85:e2:51:99:
                    d5:9f:6f:00:3b:72:a2:26:0f:15:40:22:aa:9a:5d:
                    ca:e7:4b:53:d2:18:69:ff:81:5a:0b:0b:22:95:6d:
                    75:34:a0:9a:36:19:d8:6c:46:28:f0:91:1a:9d:f4:
                    bf:9b:a6:c0:6b:f9:90:d6:57:a8:c9:76:27:7f:86:
                    aa:aa:d4:da:27:f6:90:31:05:d5:7e:8f:5d:ed:3b:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:60:9E:46:DD:17:7D:D2:9E:69:3F:33:DE:FB:DD:C7:AA:64:38
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:20:56:86:4e:61:12:42:eb:6d:d7:92:9a:02:25:1b:be:
         bf:6e:e7:ae:90:90:ec:36:08:33:bf:11:50:84:37:80:6e:04:
         56:fd:62:a9:59:94:2a:74:50:9f:e6:2e:a7:6a:ed:10:1f:59:
         77:e3:71:d6:1a:4e:36:b3:ed:14:62:50:32:06:92:5b:3c:31:
         cb:a8:91:af:18:ae:96:eb:2f:6c:c1:6f:9d:eb:8b:e3:23:a4:
         47:36:65:ff:b2:ee:eb:94:2f:e5:20:f0:a8:d9:e3:02:81:c7:
         14:16:54:9e:d4:69:56:56:19:2d:ca:37:8d:70:21:b3:20:ff:
         20:d8:ad:2b:93:21:5a:d4:be:8a:5b:e3:ff:5a:19:dd:4d:67:
         d8:41:bd:6b:ae:27:bd:b1:0c:32:d5:df:67:90:41:09:26:cc:
         20:6f:1c:ef:41:8d:4b:08:09:39:74:67:fe:dc:46:d3:d8:72:
         b5:d8:58:60:49:3c:ca:f8:e6:b6:a8:b2:d9:fe:bb:b1:bb:d2:
         34:cd:c5:49:70:c1:e9:8f:a2:aa:fd:3d:07:7d:28:76:69:9d:
         bf:d8:aa:b1:85:19:2b:9f:49:cd:a7:2a:52:48:f9:51:ff:47:
         93:08:5c:9c:cd:bb:68:60:5d:36:27:aa:59:25:8c:4d:17:99:
         73:5f:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org