Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa
File:                     3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          p5ClT54mxazN85axV+qeDZZXN9I7DrPOIHu+OlnqtNU=
Subject key identifier:   65:D0:64:0C:92:49:D1:9E:B7:5D:44:CF:1B:9E:46:51:3E:11:E8:1D
Certificate issuer:       /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial:       2E34B69080C783A5B83BDD55C0927F14EC3BD1C7
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa
Signing time:             Tue 05 Mar 2024 17:00:01 +0000
ROA not before:           Tue 05 Mar 2024 16:55:01 +0000
ROA not after:            Tue 04 Mar 2025 17:00:01 +0000
asID:                     137373
IP address blocks:        103.120.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
                          rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 13:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:34:b6:90:80:c7:83:a5:b8:3b:dd:55:c0:92:7f:14:ec:3b:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Validity
            Not Before: Mar  5 16:55:01 2024 GMT
            Not After : Mar  4 17:00:01 2025 GMT
        Subject: CN=65D0640C9249D19EB75D44CF1B9E46513E11E81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:4e:e7:d9:b4:58:a3:22:9d:c2:9c:a7:cd:
                    93:f8:d7:b4:7f:ce:17:76:37:14:1a:50:71:ed:a9:
                    61:90:06:6d:b0:2b:07:8c:9a:c8:99:d9:89:ef:b6:
                    e4:c6:17:dc:10:fe:63:fc:ce:ee:0e:4f:d9:9b:9e:
                    c3:c3:3a:19:3a:e6:33:85:c2:75:3d:80:0d:3c:7e:
                    93:3a:2c:ef:f1:19:2e:1a:03:5c:57:30:67:08:95:
                    89:37:de:83:37:64:b4:dd:b6:47:50:0d:42:3e:5c:
                    85:7f:28:c9:75:fa:2f:e2:53:ed:a8:91:92:c3:e3:
                    f0:f8:32:ee:ef:6d:4f:9a:d3:24:83:c7:70:d7:c3:
                    f1:96:87:6a:44:44:40:87:0d:7d:48:c0:7a:cc:04:
                    51:58:50:fd:25:46:48:4b:21:97:a0:08:ec:0c:aa:
                    33:4f:5d:62:8d:e9:4f:a5:60:00:3e:39:56:46:b7:
                    1d:78:5b:90:27:32:28:24:32:20:21:c3:8d:87:83:
                    5c:2e:5b:2e:d5:d1:fb:94:4b:8f:46:54:74:a6:55:
                    3f:e9:a8:d3:6e:0d:3b:60:56:af:07:96:2b:3a:84:
                    dd:5b:30:f5:ba:ea:5d:bb:00:d5:3c:08:55:f8:ce:
                    f5:41:74:a3:38:41:37:d1:b5:48:ff:cb:e6:18:e0:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:64:0C:92:49:D1:9E:B7:5D:44:CF:1B:9E:46:51:3E:11:E8:1D
            X509v3 Authority Key Identifier:
                keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36342e302f32332d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:b3:16:d0:bf:84:f8:8e:65:d3:6e:ed:b6:c9:24:aa:a2:
         d7:9c:77:8e:80:15:e8:b6:b5:c4:62:af:fd:17:64:63:3d:e9:
         c1:90:76:ca:7b:f6:c2:15:8f:ad:e2:41:e8:31:c6:7c:02:95:
         32:55:aa:fb:87:95:14:21:59:5e:22:73:0c:41:f2:51:2b:63:
         27:21:07:06:98:b5:c7:60:02:56:af:2d:16:72:c4:59:7b:33:
         c8:97:34:15:00:42:f3:3a:e1:66:3f:55:54:cc:ec:f3:a6:eb:
         31:8d:f0:13:b0:be:b0:95:98:cb:c3:17:9e:7e:21:81:4d:57:
         f0:19:3b:95:8d:1f:8e:c6:8f:c2:3a:8c:02:3c:59:82:eb:25:
         bc:94:b3:09:ea:30:c3:4f:70:f7:01:a9:8a:fa:ff:bc:6f:59:
         6e:c8:19:1a:47:0e:b5:a9:87:e2:e4:66:5d:6c:bf:f8:06:ee:
         26:70:4c:83:1e:10:47:ce:27:df:07:84:f1:ae:56:43:a4:fa:
         ca:fb:a2:73:d3:40:02:08:64:ae:a1:f9:c5:15:5a:e5:52:f9:
         ec:06:a2:66:c1:ac:02:bf:54:75:fa:f5:38:34:f3:17:92:6b:
         e0:3d:a2:2e:79:fd:ca:ee:80:59:bf:ba:25:b0:cd:db:1b:43:
         d0:36:4c:06
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULjS2kIDHg6W4O91VwJJ/FOw70ccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVF
NTY2Rjk0RTAeFw0yNDAzMDUxNjU1MDFaFw0yNTAzMDQxNzAwMDFaMDMxMTAvBgNV
BAMTKDY1RDA2NDBDOTI0OUQxOUVCNzVENDRDRjFCOUU0NjUxM0UxMUU4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebE7n2bRYoyKdwpynzZP417R/
zhd2NxQaUHHtqWGQBm2wKweMmsiZ2YnvtuTGF9wQ/mP8zu4OT9mbnsPDOhk65jOF
wnU9gA08fpM6LO/xGS4aA1xXMGcIlYk33oM3ZLTdtkdQDUI+XIV/KMl1+i/iU+2o
kZLD4/D4Mu7vbU+a0ySDx3DXw/GWh2pERECHDX1IwHrMBFFYUP0lRkhLIZegCOwM
qjNPXWKN6U+lYAA+OVZGtx14W5AnMigkMiAhw42Hg1wuWy7V0fuUS49GVHSmVT/p
qNNuDTtgVq8Hlis6hN1bMPW66l27ANU8CFX4zvVBdKM4QTfRtUj/y+YY4HH9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZdBkDJJJ0Z63XUTPG55GUT4R6B0wHwYDVR0j
BBgwFoAUa2R/aWqbtccYYF6JIr7xvuVm+U4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODZlNDZlYy1kZjVjLTRiNGQtYTMwZS0xMGIyYzY4OGMyZmMvMC82QjY0N0Y2OTZB
OUJCNUM3MTg2MDVFODkyMkJFRjFCRUU1NjZGOTRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkI2NDdGNjk2QTlCQjVDNzE4NjA1RTg5MjJCRUYxQkVFNTY2
Rjk0RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NmU0NmVjLWRmNWMtNGI0ZC1h
MzBlLTEwYjJjNjg4YzJmYy8wLzMxMzAzMzJlMzEzMjMwMmUzNjM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ3hAMA0GCSqG
SIb3DQEBCwUAA4IBAQCD17MW0L+E+I5l027ttskkqqLXnHeOgBXotrXEYq/9F2Rj
PenBkHbKe/bCFY+t4kHoMcZ8ApUyVar7h5UUIVleInMMQfJRK2MnIQcGmLXHYAJW
ry0WcsRZezPIlzQVAELzOuFmP1VUzOzzpusxjfATsL6wlZjLwxeefiGBTVfwGTuV
jR+Oxo/COowCPFmC6yW8lLMJ6jDDT3D3AamK+v+8b1luyBkaRw61qYfi5GZdbL/4
Bu4mcEyDHhBHziffB4TxrlZDpPrK+6Jz00ACCGSuofnFFVrlUvnsBqJmwawCv1R1
+vU4NPMXkmvgPaIuef3K7oBZv7olsM3bG0PQNkwG
-----END CERTIFICATE-----
Generated at Fri Jun 21 11:44:11 2024 by rpki-client on console-fra.rpki-client.org