Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa
File:                     3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (raw, json)
Hash identifier:          VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=
Subject key identifier:   2A:79:EB:E7:15:E8:F8:2F:67:96:58:27:A2:D4:6E:7F:78:EA:1E:46
Certificate issuer:       /CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Certificate serial:       43F1002A8B2C6F1F88B83EDFF09F867FB3488175
Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa
Signing time:             Mon 07 Oct 2024 02:09:34 +0000
ROA not before:           Mon 07 Oct 2024 02:04:34 +0000
ROA not after:            Mon 06 Oct 2025 02:09:34 +0000
asID:                     153327
IP address blocks:        160.187.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
                          rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f1:00:2a:8b:2c:6f:1f:88:b8:3e:df:f0:9f:86:7f:b3:48:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671
        Validity
            Not Before: Oct  7 02:04:34 2024 GMT
            Not After : Oct  6 02:09:34 2025 GMT
        Subject: CN=2A79EBE715E8F82F67965827A2D46E7F78EA1E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:f5:9c:c5:ea:a2:02:56:fc:48:94:f7:4a:
                    67:1c:7e:fb:a3:99:d8:2d:02:14:95:27:2a:bf:ae:
                    f0:99:9a:64:33:4d:da:57:be:1d:9d:67:e0:47:ea:
                    7b:99:23:31:73:e1:3b:89:a8:ea:6c:c9:c6:17:f4:
                    90:1d:8a:d5:05:ac:eb:7f:5a:2d:b1:a6:a6:f8:e1:
                    36:f4:d5:bb:c1:0a:ea:10:1d:38:c6:21:b3:41:7e:
                    db:72:31:86:39:fd:d8:13:79:ed:e4:08:7f:dc:66:
                    87:e3:6e:f2:e3:19:e2:ea:9e:06:65:cc:3d:36:31:
                    09:86:5e:ca:0e:bf:d7:76:25:1e:23:a7:a5:7d:c5:
                    b9:d6:9e:45:f6:98:c1:64:5c:df:65:2b:6c:5b:52:
                    21:79:43:c7:7d:5b:1b:bd:8f:e0:9c:10:36:4d:a7:
                    fd:70:95:da:00:18:f9:ce:ab:a3:b9:3d:85:bc:ba:
                    50:b2:3d:f2:21:04:03:6d:f6:4e:b3:7a:5a:8d:cf:
                    a1:9c:5d:90:b1:4e:a5:d6:aa:6e:61:ed:46:91:c4:
                    e4:37:ca:6a:f6:4b:0f:d2:d6:fe:ca:af:ee:08:f4:
                    f6:c1:7e:d5:cc:05:4d:ce:b4:b5:8b:18:53:4d:57:
                    53:73:c7:17:37:9c:36:db:be:66:5a:92:1e:d4:5d:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:79:EB:E7:15:E8:F8:2F:67:96:58:27:A2:D4:6E:7F:78:EA:1E:46
            X509v3 Authority Key Identifier:
                keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:d8:df:11:33:f6:c8:63:ce:d7:0d:24:f0:eb:d7:2b:79:01:
         bb:ee:7a:46:8a:9e:6f:ea:80:3b:83:ec:73:bc:12:e5:4b:bb:
         11:e7:b3:56:04:90:fd:12:98:94:ee:cf:30:40:51:d0:1c:1e:
         c1:e8:e5:29:81:f4:d9:85:20:19:04:36:e8:4c:dc:67:d5:66:
         7e:db:c2:d0:45:25:10:14:b2:70:3a:e1:4b:2c:e5:e5:a0:9f:
         76:e1:75:e2:30:d9:b7:58:49:b7:bb:6f:2d:32:cb:d7:b8:b0:
         47:14:5a:7c:a3:e1:87:4b:e2:c6:01:5f:2c:f2:f0:13:59:c1:
         d5:48:4b:5c:30:01:34:21:6d:0a:90:8f:cd:3a:91:13:ea:b4:
         17:84:63:b0:ef:00:01:f9:9f:6d:ac:86:a8:9e:9b:a9:a9:e6:
         9f:c8:c6:57:7d:32:a8:37:cc:a5:a0:be:ee:86:93:fb:2b:e4:
         1e:9e:42:f0:dc:e2:ce:da:63:ee:1f:c6:ae:04:1f:75:16:6e:
         e9:ba:0c:ba:04:9a:bc:df:68:43:92:21:49:98:91:c9:7d:08:
         8d:81:88:e1:e5:e1:7f:90:fe:8b:98:69:07:8a:c6:85:71:bc:
         17:0d:99:cc:41:69:f5:ae:6d:89:9c:c9:06:8c:63:f1:83:6b:
         6e:13:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org