Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa
File:                     3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          efOl0y5H6y+/SRY92ZrtvKWeUDH0DOhwTq3Z2tZRlD4=
Subject key identifier:   B3:C2:E7:16:4F:33:6C:C9:EA:E5:77:D3:D4:FD:06:C7:C1:D0:B1:FB
Certificate issuer:       /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial:       74EACA6D07AB8FB5C270ADE6731180877463D5FF
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa
Signing time:             Tue 28 Nov 2023 06:00:00 +0000
ROA not before:           Tue 28 Nov 2023 05:55:00 +0000
ROA not after:            Tue 26 Nov 2024 06:00:00 +0000
asID:                     139369
IP address blocks:        103.142.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
                          rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:ca:6d:07:ab:8f:b5:c2:70:ad:e6:73:11:80:87:74:63:d5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Validity
            Not Before: Nov 28 05:55:00 2023 GMT
            Not After : Nov 26 06:00:00 2024 GMT
        Subject: CN=B3C2E7164F336CC9EAE577D3D4FD06C7C1D0B1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:7a:0f:4f:6e:34:fc:51:3f:f1:53:e0:37:
                    be:17:80:23:95:cf:34:7b:0b:da:96:a9:b6:07:89:
                    0b:79:ec:91:7a:1a:e5:66:64:a0:9a:22:4f:5d:ac:
                    3e:d3:67:9b:1d:a8:02:36:7a:47:17:2c:f2:a8:2c:
                    f3:8a:e1:90:32:e4:9a:5a:74:eb:01:26:7c:36:29:
                    19:f1:9c:9f:45:6b:ea:7e:fb:74:54:9f:69:89:9e:
                    9d:07:59:a2:65:53:67:b2:55:85:29:b1:cc:ef:26:
                    5e:59:91:d2:29:82:5f:43:ae:d9:dc:3e:25:43:5e:
                    d4:21:50:bd:a9:98:1c:76:e6:b1:8f:94:9a:82:ff:
                    15:cc:f7:aa:15:4d:f1:f3:68:62:0b:39:18:81:df:
                    d4:9a:75:5b:4b:27:d8:8d:e8:ec:b3:d6:a6:67:e3:
                    5f:b6:5c:c2:ee:db:70:c0:12:7f:c1:8b:90:5b:a3:
                    e6:61:6e:ff:e4:ca:6b:12:0b:f4:9e:85:e4:37:d9:
                    ef:81:2d:d7:fb:51:64:2a:b3:dd:97:f8:27:2a:3e:
                    3b:a1:1a:86:78:93:d9:03:8d:1e:a8:87:25:2e:ca:
                    5c:6d:7e:15:6f:e7:9f:fb:f6:dd:58:35:15:74:e0:
                    ad:10:ea:4b:0c:a6:ee:c4:55:b3:07:df:d0:bb:e8:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:E7:16:4F:33:6C:C9:EA:E5:77:D3:D4:FD:06:C7:C1:D0:B1:FB
            X509v3 Authority Key Identifier:
                keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:b2:80:88:f8:fc:44:f0:3e:60:f5:4a:4b:91:af:e6:a2:
         cf:9b:40:7e:95:f9:bd:3f:3d:a7:79:55:aa:ce:9d:e5:f5:65:
         20:df:ff:38:ee:af:38:23:22:a0:0d:59:e3:55:a3:9b:7f:00:
         5d:de:9a:ab:53:f9:7f:b3:a1:05:1f:f1:51:d8:a9:58:b4:70:
         87:35:ff:58:c8:38:44:8a:49:ad:37:aa:67:2a:d2:98:21:ce:
         1e:ef:14:77:cc:0a:d1:4e:45:21:6b:b9:e7:22:62:3b:6e:b7:
         91:6c:1e:bb:95:a8:69:d7:f0:8a:f5:84:6a:3d:bf:8f:ca:2f:
         2c:b3:ea:26:27:c4:c0:41:29:30:e8:5d:cb:e3:45:6a:1c:99:
         b4:6d:a8:fd:a7:cd:47:28:a1:48:ba:ee:16:e6:1b:a2:e0:05:
         ee:42:2b:49:3a:34:58:ad:1c:13:2c:f3:2a:14:41:af:18:1a:
         72:e8:59:1d:80:b9:56:7d:4f:37:06:55:cd:29:4c:98:38:99:
         8b:4e:3c:da:4a:6c:41:96:a3:5a:cc:b2:fe:6e:a9:96:f9:83:
         65:c1:39:80:71:59:61:8c:bd:af:57:55:83:ee:c7:39:a4:01:
         79:3e:f1:50:1a:18:c1:a9:5d:f9:8d:1d:40:b1:ad:16:ea:9d:
         20:a2:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:34:54 2024 by rpki-client on console-ams.rpki-client.org