Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa
File:                     3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (raw, json)
Hash identifier:          hfuVaF1cZyRkoFhdAOjESPlHe/VBJtQ7zzHfUuNRmRg=
Subject key identifier:   2F:5B:FA:AE:B2:0B:66:20:92:C2:81:AF:08:C2:71:2F:0A:A0:8D:AD
Certificate issuer:       /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
Certificate serial:       41D112B618E96C46D09F48A55A67C5202688AA86
Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa
Signing time:             Wed 26 Jun 2024 04:49:12 +0000
ROA not before:           Wed 26 Jun 2024 04:44:12 +0000
ROA not after:            Wed 25 Jun 2025 04:49:12 +0000
asID:                     149371
IP address blocks:        103.180.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl
                          rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 13:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d1:12:b6:18:e9:6c:46:d0:9f:48:a5:5a:67:c5:20:26:88:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C
        Validity
            Not Before: Jun 26 04:44:12 2024 GMT
            Not After : Jun 25 04:49:12 2025 GMT
        Subject: CN=2F5BFAAEB20B662092C281AF08C2712F0AA08DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:16:24:43:31:14:43:db:d2:6d:8e:c2:e1:
                    78:46:6c:41:c5:87:f8:a5:0e:da:d2:16:5e:5d:00:
                    b7:87:a9:f5:4a:62:14:d7:cc:72:cf:05:a5:c2:44:
                    c6:f1:03:e2:01:20:1a:9d:7a:97:23:f3:4f:2b:bb:
                    47:f0:20:d1:96:78:2b:c3:e8:a4:f5:d5:5e:fa:eb:
                    f4:ef:8e:d5:d1:d8:bf:f8:99:30:24:4c:77:7a:de:
                    0a:34:b7:85:90:5c:47:d9:29:17:b1:fa:b4:96:b0:
                    e0:3e:30:87:93:8e:23:13:78:9a:35:61:ad:88:a2:
                    b3:85:a9:c9:5c:cd:6f:59:b1:f7:87:60:d6:3a:aa:
                    04:45:65:1a:70:af:9b:0d:7c:1b:29:0d:16:5c:52:
                    d6:b2:e4:59:68:f2:22:9a:ea:66:3a:8c:c5:fe:57:
                    20:00:fb:65:03:a2:78:52:45:00:4a:f8:59:3d:8a:
                    8d:b7:68:2a:34:4f:ac:67:20:99:70:c6:90:c0:35:
                    49:b7:e7:55:b1:fa:35:4b:6a:1e:78:22:c1:1b:13:
                    40:8a:4d:4a:1f:62:7e:32:92:21:0f:6e:77:55:40:
                    9e:81:b8:16:55:3e:19:7f:97:be:28:d1:92:95:55:
                    be:63:cf:26:3f:42:41:9d:0d:16:00:ec:38:94:e1:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:FA:AE:B2:0B:66:20:92:C2:81:AF:08:C2:71:2F:0A:A0:8D:AD
            X509v3 Authority Key Identifier:
                keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:5d:8a:33:c0:c8:2a:e9:58:04:c6:9e:03:e2:88:3e:0c:21:
         d6:27:d0:93:63:95:77:55:b3:05:bd:a6:62:a4:d2:0a:03:fe:
         c0:9f:4e:2f:55:5e:44:d2:36:a5:59:b1:58:7d:5c:21:e8:da:
         00:92:54:61:aa:5a:0b:79:36:21:4c:c9:8d:ad:db:58:17:f8:
         67:4d:77:1e:cd:e6:70:3e:0f:dd:0d:b9:22:f4:0a:d9:62:eb:
         7f:d6:3f:b7:8b:d2:15:da:5f:6f:2b:49:ca:3a:71:80:b7:c3:
         7f:07:43:de:8d:ab:c8:9f:de:97:e2:7f:8f:7c:0f:0e:d3:42:
         56:3e:cb:ba:0d:87:05:d4:84:17:3f:5e:91:84:0a:8b:59:8f:
         73:16:79:58:6d:5d:c1:75:03:25:26:30:f8:5c:ed:05:27:28:
         c4:9a:45:f3:61:02:7e:eb:6c:4e:14:01:f5:82:3d:90:76:26:
         2d:04:99:d1:4f:3c:07:2e:48:2a:ab:ec:84:95:e7:f5:02:71:
         69:a3:d3:fb:4f:c0:b6:d8:63:f9:12:8f:51:7a:a5:45:24:3a:
         8f:29:ef:c0:b4:eb:5c:68:5a:4d:02:4d:6d:11:76:33:6a:ee:
         3f:46:be:ea:5e:3a:d7:7b:85:d7:99:59:ee:79:68:a5:9b:b5:
         76:27:08:bd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQdESthjpbEbQn0ilWmfFICaIqoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2
NEJCOTM1QzAeFw0yNDA2MjYwNDQ0MTJaFw0yNTA2MjUwNDQ5MTJaMDMxMTAvBgNV
BAMTKDJGNUJGQUFFQjIwQjY2MjA5MkMyODFBRjA4QzI3MTJGMEFBMDhEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aRYkQzEUQ9vSbY7C4XhGbEHF
h/ilDtrSFl5dALeHqfVKYhTXzHLPBaXCRMbxA+IBIBqdepcj808ru0fwINGWeCvD
6KT11V766/TvjtXR2L/4mTAkTHd63go0t4WQXEfZKRex+rSWsOA+MIeTjiMTeJo1
Ya2IorOFqclczW9ZsfeHYNY6qgRFZRpwr5sNfBspDRZcUtay5Flo8iKa6mY6jMX+
VyAA+2UDonhSRQBK+Fk9io23aCo0T6xnIJlwxpDANUm351Wx+jVLah54IsEbE0CK
TUofYn4ykiEPbndVQJ6BuBZVPhl/l74o0ZKVVb5jzyY/QkGdDRYA7DiU4a53AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUL1v6rrILZiCSwoGvCMJxLwqgja0wHwYDVR0j
BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux
REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC
OTM1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwZGU2YzgyLWQ5MmItNDA4NS04
ODkzLWQ2NDc3OTFjMjc3Zi8wLzMxMzAzMzJlMzEzODMwMmUzMjM0MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntPYwDQYJ
KoZIhvcNAQELBQADggEBAMddijPAyCrpWATGngPiiD4MIdYn0JNjlXdVswW9pmKk
0goD/sCfTi9VXkTSNqVZsVh9XCHo2gCSVGGqWgt5NiFMyY2t21gX+GdNdx7N5nA+
D90NuSL0Ctli63/WP7eL0hXaX28rSco6cYC3w38HQ96Nq8if3pfif498Dw7TQlY+
y7oNhwXUhBc/XpGECotZj3MWeVhtXcF1AyUmMPhc7QUnKMSaRfNhAn7rbE4UAfWC
PZB2Ji0EmdFPPAcuSCqr7ISV5/UCcWmj0/tPwLbYY/kSj1F6pUUkOo8p78C061xo
Wk0CTW0RdjNq7j9GvupeOtd7hdeZWe55aKWbtXYnCL0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 06:03:22 2024 by rpki-client on console-fra.rpki-client.org