Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa
File:                     3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (raw, json)
Hash identifier:          ED2vOK9zeRK0rdqZ2eLv2tRE69XX1TK/iNLD2rQ69i4=
Subject key identifier:   37:3C:26:AA:DE:75:49:69:56:8D:97:89:D5:71:7E:43:A8:57:AB:A5
Certificate issuer:       /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9
Certificate serial:       12117ED2D3C9E5C40E3BF59215CFBA2602406303
Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa
Signing time:             Sun 09 Jun 2024 11:34:45 +0000
ROA not before:           Sun 09 Jun 2024 11:29:45 +0000
ROA not after:            Sun 08 Jun 2025 11:34:45 +0000
asID:                     152801
IP address blocks:        160.22.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl
                          rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:11:7e:d2:d3:c9:e5:c4:0e:3b:f5:92:15:cf:ba:26:02:40:63:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9
        Validity
            Not Before: Jun  9 11:29:45 2024 GMT
            Not After : Jun  8 11:34:45 2025 GMT
        Subject: CN=373C26AADE754969568D9789D5717E43A857ABA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:d9:17:e3:48:1d:73:bf:d8:88:75:a6:2b:
                    87:7f:3d:55:0b:06:d7:54:5a:e8:2e:3f:8b:82:5b:
                    87:97:75:04:0d:9f:28:1d:e5:0a:3d:23:33:7b:1a:
                    0d:1b:ed:5a:87:ab:5c:10:ba:60:78:7a:97:ee:30:
                    df:f4:fe:25:1b:bb:d3:8c:68:91:ed:03:e2:8a:72:
                    6a:6a:ac:3b:d6:d3:2e:95:0d:56:2a:b6:c1:da:7b:
                    68:43:8c:0f:cd:72:b1:4e:4e:c9:43:0a:0b:e7:03:
                    f5:de:65:10:0d:68:59:86:ef:bf:e4:a8:0c:5c:19:
                    8c:b6:51:0b:62:91:74:6a:24:43:49:bb:69:a2:50:
                    18:7e:c2:19:1c:f0:d7:1e:0f:2e:24:5c:8b:5b:bd:
                    af:0f:37:0c:cb:76:cb:a4:b3:7c:56:12:e2:ea:a3:
                    2f:40:cd:23:4d:32:a1:65:9f:16:e4:d0:af:f3:00:
                    d1:3f:ef:03:41:ba:19:43:26:e2:56:10:e5:19:0b:
                    bd:f4:7f:e3:bc:cf:79:65:b6:35:fb:4f:8d:9d:38:
                    f3:57:0b:a7:e6:05:99:be:4c:61:da:4b:73:ec:cc:
                    3d:cd:7d:c8:ca:9a:a4:7c:dd:fc:00:dc:1f:2b:25:
                    0d:6b:92:a9:ee:b8:5c:fc:ea:20:d2:85:5e:28:42:
                    c8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:26:AA:DE:75:49:69:56:8D:97:89:D5:71:7E:43:A8:57:AB:A5
            X509v3 Authority Key Identifier:
                keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/3136302e32322e32382e302f32332d3234203d3e20313532383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:44:eb:78:d2:49:bd:cb:58:86:c3:63:f0:a2:07:66:35:a3:
         94:81:80:bc:b8:64:23:63:cf:55:a6:eb:bc:6e:a9:bd:54:50:
         a9:d3:7f:be:9d:a5:05:73:c4:39:9d:78:5b:0a:d0:88:7c:f7:
         ca:b5:95:9d:b2:49:e2:6f:0d:12:e6:90:af:ff:72:c1:74:5b:
         d7:56:d9:9b:43:74:71:e4:bb:3b:6b:5e:8b:96:9b:b6:c8:7b:
         44:ec:3e:e5:80:36:4d:34:2d:7a:b6:e0:ea:8d:64:5c:e0:42:
         84:c8:d8:56:94:55:bd:50:93:12:80:a0:e7:0a:b6:78:84:6a:
         d5:da:ed:94:d1:90:2d:b9:69:68:ab:8b:ce:4e:ce:e1:3b:c0:
         67:62:84:b6:8e:3d:bd:43:13:39:46:42:43:2c:45:0c:51:e5:
         04:78:24:6e:0b:a2:fa:2a:03:fc:d4:4e:5f:d7:94:d2:45:8e:
         e1:c1:e4:ef:0b:9c:fa:31:1b:b6:e6:70:c9:dd:d2:fa:fb:a1:
         31:78:9d:5c:dd:7d:f8:25:95:f4:40:f2:11:a4:07:58:7d:76:
         d9:c4:7f:6c:a0:66:5b:3e:2c:60:90:4f:66:df:13:bb:a5:27:
         47:1e:44:1c:6e:2c:d2:fa:14:f8:78:42:d7:88:28:4a:13:b0:
         65:d2:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org