Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e2036393339.roa
File:                     3130332e3132302e36372e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier:          pRXStegGpZ0ZpuzNRuZhho8pVJrv6ukenawJ23k+P7s=
Subject key identifier:   EC:9B:2C:A4:B5:07:3D:77:10:E3:53:CC:6C:19:9E:32:1E:EC:E4:D3
Certificate issuer:       /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial:       1AA9D7C58964009876C86466163B67BEEBFBFB7D
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e2036393339.roa
Signing time:             Tue 05 Mar 2024 17:00:01 +0000
ROA not before:           Tue 05 Mar 2024 16:55:01 +0000
ROA not after:            Tue 04 Mar 2025 17:00:01 +0000
asID:                     6939
IP address blocks:        103.120.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
                          rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 15:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a9:d7:c5:89:64:00:98:76:c8:64:66:16:3b:67:be:eb:fb:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Validity
            Not Before: Mar  5 16:55:01 2024 GMT
            Not After : Mar  4 17:00:01 2025 GMT
        Subject: CN=EC9B2CA4B5073D7710E353CC6C199E321EECE4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:eb:7a:b8:47:97:0d:49:61:ca:ef:58:9f:
                    19:0b:9b:90:a2:11:26:cd:d5:36:74:52:d0:ca:9f:
                    81:f2:e2:2f:f8:f7:32:a6:ac:7d:15:ad:37:66:74:
                    14:c9:e2:f5:31:80:6a:07:c0:6f:01:15:24:e9:26:
                    5b:c7:8b:76:04:a6:33:38:a4:97:8a:c5:10:6e:b2:
                    f8:35:4b:67:9c:c5:73:70:f6:01:c2:38:ad:b9:45:
                    6f:24:52:bc:41:9d:23:c4:6c:7c:7d:c2:14:36:60:
                    b8:a0:8a:f9:2f:72:07:df:28:b7:fd:4c:3b:c7:45:
                    56:58:1d:bf:33:3a:f3:28:05:f4:9f:de:97:85:ca:
                    78:dd:12:08:ae:82:7f:df:84:ef:24:ad:f3:b4:66:
                    fd:1d:c7:ba:8a:90:58:ca:6f:69:48:0e:64:a2:97:
                    6b:cb:1d:51:71:3a:83:c7:d7:7f:ca:ed:e0:23:6f:
                    1e:7f:82:16:4c:fe:68:21:9e:de:6a:f6:32:05:23:
                    cb:06:de:14:e0:2e:e9:ef:1a:55:c0:ad:03:4a:88:
                    06:38:30:b0:6c:e0:4e:ab:92:3c:74:c3:89:68:1c:
                    fe:b8:e6:04:6b:45:c7:e5:f8:a3:ac:9c:12:a0:11:
                    a5:2d:d0:32:8b:59:51:07:64:69:1f:31:9f:e8:7d:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9B:2C:A4:B5:07:3D:77:10:E3:53:CC:6C:19:9E:32:1E:EC:E4:D3
            X509v3 Authority Key Identifier:
                keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36372e302f32342d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:13:b6:a2:f9:0b:41:d7:00:a8:b4:3c:c8:21:70:b8:7f:
         fc:92:eb:9e:5d:a1:26:e7:b0:87:18:8d:d6:08:34:a9:62:ea:
         7b:60:b5:f6:31:52:af:76:2b:ac:d7:26:c4:10:ff:f5:00:c4:
         a1:5c:28:be:53:49:2d:91:6c:6a:e4:6b:b8:8b:2a:92:46:f9:
         fe:21:4a:6a:9b:75:a5:18:e8:e1:bd:2d:75:dc:b4:77:ed:17:
         dd:0b:64:21:5b:c9:4e:23:9d:64:1c:af:97:0f:04:b4:6e:9f:
         12:db:5d:e1:b5:17:1d:82:eb:6d:ef:ce:2c:31:71:f5:c4:4d:
         f3:ca:45:fd:53:cf:b1:ce:5f:c6:dc:bf:f3:3c:62:cc:de:a1:
         7e:ed:48:00:71:17:6d:7e:43:9d:9f:32:47:d1:60:0b:07:dd:
         1b:44:cd:8a:12:a4:90:a5:6f:10:3e:b1:d6:3a:26:27:12:e9:
         79:25:08:4c:b6:78:6f:5e:e5:1e:15:7a:c4:a3:a2:e6:16:af:
         e1:55:33:aa:21:ef:04:6f:23:eb:64:57:9d:4c:21:48:e9:77:
         c7:39:ac:57:dd:2f:e2:6a:b0:dc:48:93:18:16:fa:54:fc:e2:
         8c:86:08:85:cd:21:fb:84:21:59:cd:84:17:1d:6e:cc:06:2d:
         ce:ed:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 10:58:07 2024 by rpki-client on console-ams.rpki-client.org