Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa
File:                     3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (raw, json)
Hash identifier:          fko1jOuBFtLKmds09e8hEEDpVGQwTcV/tpYHBgYWWus=
Subject key identifier:   E9:E7:C9:ED:B1:BB:67:5C:05:19:8C:63:1B:10:B1:38:B5:80:6F:5C
Certificate issuer:       /CN=E3FB5E3343EC63D705FF51B645113F74C7965236
Certificate serial:       3331A0FB7E2357ED1903A5B3C3469BB601978BD6
Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa
Signing time:             Fri 09 Aug 2024 11:31:15 +0000
ROA not before:           Fri 09 Aug 2024 11:26:15 +0000
ROA not after:            Fri 08 Aug 2025 11:31:15 +0000
asID:                     153087
IP address blocks:        160.25.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:31:a0:fb:7e:23:57:ed:19:03:a5:b3:c3:46:9b:b6:01:97:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236
        Validity
            Not Before: Aug  9 11:26:15 2024 GMT
            Not After : Aug  8 11:31:15 2025 GMT
        Subject: CN=E9E7C9EDB1BB675C05198C631B10B138B5806F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:3d:1b:2e:34:ea:ae:05:a4:9b:08:bd:f6:
                    75:af:7f:f2:77:1e:2d:60:8e:ef:ad:0f:99:5a:a4:
                    fb:0b:4e:b9:f4:5d:cc:36:74:93:56:2e:ea:fb:13:
                    51:42:5a:64:71:09:b3:77:1f:39:6d:18:11:ff:2b:
                    6a:97:36:b7:4d:0f:2d:23:49:15:a4:0e:4a:ee:90:
                    32:14:c9:d4:39:9c:b7:e2:ec:99:30:aa:60:cf:f5:
                    e8:b0:93:e5:6d:85:ee:56:5f:b7:b2:c3:82:b7:ce:
                    05:8c:5b:1e:71:79:b1:78:8d:d5:f9:3a:d1:69:04:
                    81:ab:f7:75:2e:9d:50:01:55:0a:20:c7:9f:71:e4:
                    40:c9:c9:4b:63:20:6c:01:e7:e0:15:99:cb:77:f0:
                    9a:a0:96:84:60:63:3e:d0:79:76:e9:4b:59:b7:c8:
                    24:60:ae:47:1d:fc:73:20:5e:b6:5c:57:d8:55:18:
                    fd:55:9b:0b:c8:30:d9:84:2f:69:c0:05:40:97:83:
                    72:06:f1:28:46:af:23:85:be:e1:bd:66:fb:f6:e1:
                    44:9d:41:09:55:6f:a7:81:d4:83:c3:c3:61:eb:37:
                    d2:a1:3c:23:c5:22:22:5c:53:3b:be:d6:a6:82:01:
                    c9:18:c7:b6:b0:22:56:58:50:ba:0f:84:b3:56:b1:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:C9:ED:B1:BB:67:5C:05:19:8C:63:1B:10:B1:38:B5:80:6F:5C
            X509v3 Authority Key Identifier:
                keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:b0:5d:51:9a:c0:ff:99:40:44:4e:0f:7e:24:d1:e8:ba:
         3c:4f:48:34:46:3f:fe:83:ac:7f:cf:10:9c:4c:62:e6:d6:10:
         55:5e:4b:e5:3b:6c:ab:2e:8e:7f:92:82:fb:5b:b0:62:90:f6:
         90:ce:ef:20:de:e7:e4:fe:0b:22:c8:5d:d2:f9:98:10:f7:d7:
         73:68:81:54:1f:ff:fc:3c:88:60:b2:38:90:b9:66:cb:67:d2:
         9f:de:59:2c:f8:25:2f:ac:02:50:5f:c0:7e:78:8c:a6:4e:be:
         23:88:b4:86:21:7a:28:f9:93:15:71:7a:69:30:8c:7c:82:63:
         82:a0:7d:13:39:da:2e:41:df:d1:a3:78:ac:d6:e8:73:ed:01:
         c3:63:8d:e4:28:66:a1:9a:0a:31:26:96:f9:b7:53:e2:d5:41:
         ff:5e:27:f0:2e:30:03:8a:6a:66:13:4d:c1:1a:df:76:ee:53:
         7d:6c:9f:eb:1c:60:8f:c3:a2:2f:9c:c8:9c:18:dd:e2:e0:d6:
         a4:ec:49:29:c9:f1:a3:78:e5:9a:c4:66:09:c3:d4:64:7f:cd:
         58:8b:a6:10:78:1a:b0:d8:30:57:6e:e6:7c:45:3a:e8:86:11:
         51:49:6d:9c:d3:5b:40:b0:d2:92:f5:d2:37:a2:1f:58:4e:58:
         ea:1a:d0:0e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMzGg+34jV+0ZA6Wzw0abtgGXi9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD
Nzk2NTIzNjAeFw0yNDA4MDkxMTI2MTVaFw0yNTA4MDgxMTMxMTVaMDMxMTAvBgNV
BAMTKEU5RTdDOUVEQjFCQjY3NUMwNTE5OEM2MzFCMTBCMTM4QjU4MDZGNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bz0bLjTqrgWkmwi99nWvf/J3
Hi1gju+tD5lapPsLTrn0Xcw2dJNWLur7E1FCWmRxCbN3HzltGBH/K2qXNrdNDy0j
SRWkDkrukDIUydQ5nLfi7JkwqmDP9eiwk+Vthe5WX7eyw4K3zgWMWx5xebF4jdX5
OtFpBIGr93UunVABVQogx59x5EDJyUtjIGwB5+AVmct38JqgloRgYz7QeXbpS1m3
yCRgrkcd/HMgXrZcV9hVGP1VmwvIMNmEL2nABUCXg3IG8ShGryOFvuG9Zvv24USd
QQlVb6eB1IPDw2HrN9KhPCPFIiJcUzu+1qaCAckYx7awIlZYULoPhLNWsQONAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6efJ7bG7Z1wFGYxjGxCxOLWAb1wwHwYDVR0j
BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz
RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2
NTIzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8wLzMxMzYzMDJlMzIzNTJlMzIzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBneMA0GCSqG
SIb3DQEBCwUAA4IBAQAaNLBdUZrA/5lARE4PfiTR6Lo8T0g0Rj/+g6x/zxCcTGLm
1hBVXkvlO2yrLo5/koL7W7BikPaQzu8g3ufk/gsiyF3S+ZgQ99dzaIFUH//8PIhg
sjiQuWbLZ9Kf3lks+CUvrAJQX8B+eIymTr4jiLSGIXoo+ZMVcXppMIx8gmOCoH0T
OdouQd/Ro3is1uhz7QHDY43kKGahmgoxJpb5t1Pi1UH/XifwLjADimpmE03BGt92
7lN9bJ/rHGCPw6IvnMicGN3i4Nak7EkpyfGjeOWaxGYJw9Rkf81Yi6YQeBqw2DBX
buZ8RTrohhFRSW2c01tAsNKS9dI3oh9YTljqGtAO
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org