Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
File:                     3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (raw, json)
Hash identifier:          lnr1eFTyKT3/IcClpnjgEYV6r1LeIKEtWF2eCPYH2u8=
Subject key identifier:   28:D7:11:B1:44:99:FA:F2:F1:74:3D:41:89:59:91:87:02:01:CF:BF
Certificate issuer:       /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Certificate serial:       2EAFF250A2B2B9582E48623FD66E00F08DCE8FE3
Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
Signing time:             Thu 04 Jul 2024 18:15:01 +0000
ROA not before:           Thu 04 Jul 2024 18:10:01 +0000
ROA not after:            Thu 03 Jul 2025 18:15:01 +0000
asID:                     152825
IP address blocks:        160.22.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl
                          rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:f2:50:a2:b2:b9:58:2e:48:62:3f:d6:6e:00:f0:8d:ce:8f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
        Validity
            Not Before: Jul  4 18:10:01 2024 GMT
            Not After : Jul  3 18:15:01 2025 GMT
        Subject: CN=28D711B14499FAF2F1743D41895991870201CFBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:9e:3f:84:e3:84:35:3c:29:38:b2:1d:67:
                    e3:ec:de:ba:9a:8b:89:d9:27:c3:b6:eb:b2:6a:1b:
                    f0:6f:5e:95:b3:41:f5:7d:19:2e:9e:a2:39:0b:99:
                    0d:d5:ed:a7:a9:44:33:9f:62:05:ed:9b:aa:d5:59:
                    15:c8:47:c3:b3:94:bc:45:34:b9:03:13:d8:9e:1f:
                    3c:15:14:c5:61:63:47:24:ea:e4:15:5c:4d:0d:e4:
                    8a:7b:a0:54:73:d9:b7:11:a8:c1:f4:b2:83:30:73:
                    e4:1f:3b:71:3d:3f:82:e1:2b:61:df:1d:fd:de:7b:
                    96:44:38:11:3a:24:4f:c5:0b:d8:42:62:dc:ff:2c:
                    18:be:2b:fa:ae:55:9c:5a:3f:df:26:c5:99:66:ec:
                    0d:4a:18:55:d4:03:26:46:ff:77:75:32:2b:4a:26:
                    c0:95:48:9b:dc:a7:27:8e:ea:cb:c7:6c:1a:da:f6:
                    05:6e:7d:10:a2:09:11:2a:d4:14:a9:83:9c:16:96:
                    a1:27:98:86:16:96:20:a3:4d:95:1a:6e:67:19:11:
                    83:9e:28:b9:97:cf:ca:3a:0f:ed:31:cb:da:18:b1:
                    45:2b:d9:8d:d2:c5:b0:6e:75:8e:71:dd:0e:c6:5b:
                    07:c6:26:7f:2e:e4:46:aa:f0:b9:bc:43:60:f0:a0:
                    6f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:11:B1:44:99:FA:F2:F1:74:3D:41:89:59:91:87:02:01:CF:BF
            X509v3 Authority Key Identifier:
                keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:39:8b:86:97:27:67:f7:47:d0:04:74:0e:94:9b:ed:47:
         c5:5d:90:c7:c0:37:c6:ba:78:f7:c2:8b:6f:29:e0:db:03:da:
         ba:70:08:98:ab:3b:db:ec:e4:33:d3:4e:3e:8e:e6:68:fc:6c:
         62:62:c4:7c:df:ee:f5:e4:92:d4:53:67:2f:ef:de:66:ae:c1:
         23:d8:c9:0d:da:bc:c3:d1:e4:1c:ec:c5:a0:5f:16:4f:5f:9a:
         d8:f8:2b:fe:c5:b5:89:5b:d6:06:36:cd:cb:ef:9d:38:d0:10:
         7f:ce:83:ca:13:d3:80:b9:fd:80:94:09:e7:69:f6:ee:38:8c:
         9d:de:ae:37:3d:b7:b1:b0:c8:f1:1c:c6:0b:c2:bf:fe:36:d5:
         28:66:2e:d1:d3:35:ec:e0:69:0e:55:8e:21:9b:3e:ca:61:1c:
         5c:95:c2:d8:f7:d9:f1:1b:01:13:0e:ae:69:ae:17:b9:e9:e2:
         46:8e:5e:fa:97:4f:3e:12:2b:3d:57:ee:62:a3:ef:50:67:53:
         5d:c7:e0:dc:7d:5b:7d:89:9b:30:2d:65:3e:13:ee:78:61:b4:
         ae:a5:cb:c8:ce:3b:97:2d:49:77:db:ee:33:67:d3:d0:e0:2c:
         b4:4e:8a:2f:f7:90:53:82:13:af:68:4d:4c:d0:8e:b6:5e:c7:
         c8:97:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org