Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa
File:                     3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (raw, json)
Hash identifier:          WOZ5xs9U4F3KLpRDLfcgz83XleKTMEe9VnWS6HdwLsw=
Subject key identifier:   97:5E:B8:E4:88:3B:F4:71:23:95:1C:99:74:24:CC:07:B5:36:73:78
Certificate issuer:       /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
Certificate serial:       39ADED501FC7561F521AC1E6CC15713E1CF7046D
Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa
Signing time:             Mon 09 Sep 2024 06:59:47 +0000
ROA not before:           Mon 09 Sep 2024 06:54:47 +0000
ROA not after:            Mon 08 Sep 2025 06:59:47 +0000
asID:                     153098
IP address blocks:        160.25.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl
                          rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ad:ed:50:1f:c7:56:1f:52:1a:c1:e6:cc:15:71:3e:1c:f7:04:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81
        Validity
            Not Before: Sep  9 06:54:47 2024 GMT
            Not After : Sep  8 06:59:47 2025 GMT
        Subject: CN=975EB8E4883BF47123951C997424CC07B5367378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:a0:23:f8:f9:96:64:0a:51:79:62:8d:b3:
                    20:c3:67:a1:f0:89:39:0a:a0:16:57:05:9b:15:cf:
                    74:d6:fd:e2:aa:b9:dc:ac:02:b1:c3:e2:80:e7:96:
                    0b:ad:96:b5:63:27:16:c6:e5:19:43:ea:25:e8:0d:
                    68:1e:48:8a:cb:67:89:67:93:10:5f:b3:aa:21:e1:
                    56:ef:42:a9:d8:67:85:92:f7:2f:47:47:96:34:2a:
                    74:07:89:0d:ac:ce:4c:77:cd:d5:a9:94:9d:3c:7d:
                    14:7a:bf:bd:bb:39:ff:59:60:00:00:ec:45:37:7c:
                    2e:01:5a:4c:e4:2e:0c:e9:75:cc:a1:88:be:75:0b:
                    66:85:ac:c7:60:82:3f:fd:c7:10:1a:55:84:d3:7a:
                    84:33:af:54:b0:b1:67:cb:02:25:28:cd:98:e6:b9:
                    55:4f:1f:52:92:e5:94:f0:1b:9c:27:e4:73:dd:f4:
                    a7:7a:39:6b:9a:82:be:eb:4e:99:b5:34:64:82:2d:
                    01:9d:a7:50:6b:34:ef:1f:3b:ad:48:e6:58:a2:36:
                    cb:91:09:25:ff:05:4e:74:13:c3:0c:9f:22:7e:3d:
                    12:c3:fb:ef:7c:e2:a8:0e:e8:76:bf:af:66:7a:45:
                    d8:2c:ba:e4:e1:8e:ba:8a:7f:d8:0a:4a:ad:95:58:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5E:B8:E4:88:3B:F4:71:23:95:1C:99:74:24:CC:07:B5:36:73:78
            X509v3 Authority Key Identifier:
                keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:13:03:88:30:1e:ea:2a:4d:61:70:18:29:35:95:a0:79:a7:
         dc:be:2b:98:c4:55:53:6b:e6:ac:3e:b8:46:1b:2c:92:5b:59:
         64:ea:f1:72:23:d1:cd:f8:ef:b0:21:79:8b:af:0d:21:6d:43:
         b0:b5:77:37:ae:4f:77:68:7a:d6:55:28:14:a0:0d:11:83:73:
         bd:6d:4e:b5:43:dd:a4:f0:db:13:0e:fd:5d:66:1a:df:c5:b6:
         10:94:b5:eb:2a:d8:d5:0d:93:4a:b1:8e:fc:ce:ae:7e:a0:42:
         87:e0:b2:6f:94:aa:dc:a5:6b:e4:30:94:59:9e:88:7f:d6:bc:
         8b:65:58:50:71:40:79:05:2c:07:e2:93:b9:7e:29:5e:ed:24:
         26:fe:b0:bb:80:5e:91:0a:0e:ea:20:c0:b3:e2:a4:22:b3:70:
         f5:11:04:08:df:08:9a:9c:73:b2:ba:4f:78:7b:b0:3e:df:18:
         6f:df:6c:5a:2e:23:a3:b5:3e:5a:ac:3b:02:5e:b7:bc:f9:bc:
         95:8f:61:98:75:00:4d:05:36:76:22:92:2c:a5:12:af:6c:1d:
         1f:c9:59:81:fd:20:7a:36:d0:1a:d3:e9:36:1e:79:15:0d:55:
         06:8d:0b:12:2a:ce:2e:88:2a:52:0f:06:83:a5:4a:98:d3:15:
         f2:03:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org