Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa
File:                     3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (raw, json)
Hash identifier:          ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=
Subject key identifier:   9E:91:B3:4B:E3:28:61:3B:5E:B6:6C:64:51:ED:15:00:52:06:37:1A
Certificate issuer:       /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial:       093F4A360405F8837B6F69B6843C50D841B33C65
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa
Signing time:             Wed 02 Oct 2024 06:13:49 +0000
ROA not before:           Wed 02 Oct 2024 06:08:49 +0000
ROA not after:            Wed 01 Oct 2025 06:13:49 +0000
asID:                     149746
IP address blocks:        160.25.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
                          rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3f:4a:36:04:05:f8:83:7b:6f:69:b6:84:3c:50:d8:41:b3:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
        Validity
            Not Before: Oct  2 06:08:49 2024 GMT
            Not After : Oct  1 06:13:49 2025 GMT
        Subject: CN=9E91B34BE328613B5EB66C6451ED15005206371A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:8f:6c:f0:78:a4:6d:f6:03:4d:c4:ec:a7:
                    82:fc:3d:ea:af:aa:e9:89:9c:3d:76:e4:3f:ca:8a:
                    52:9a:c4:e7:20:56:77:8a:0e:35:df:9f:f6:66:3c:
                    d4:3a:63:37:b4:5b:b6:3b:6c:0c:b1:5b:48:88:db:
                    2c:8b:b6:59:1e:c1:db:a9:77:86:a8:71:39:7f:96:
                    96:3b:0c:cd:32:82:7d:d2:b5:82:ed:e6:d6:8a:8e:
                    7d:85:09:18:7d:3c:38:5a:7c:99:4a:6b:92:c7:bc:
                    66:44:74:80:86:86:9b:86:61:6f:a5:10:cd:c7:8c:
                    85:17:88:3a:34:7e:bb:4c:77:1c:59:85:9b:5b:a3:
                    4f:3d:8b:cc:d7:80:6c:d5:e8:2d:15:93:7d:35:71:
                    e4:f4:fc:22:b6:3e:02:e3:5d:cb:d4:72:ba:bc:bd:
                    57:85:10:23:d3:52:b4:a1:1e:87:13:e6:13:c6:4c:
                    ba:e3:b2:10:78:98:b1:cc:2b:9f:fc:0d:0d:89:08:
                    a4:3e:29:21:af:65:89:60:0a:0f:bb:6c:2d:d5:34:
                    ee:30:20:2a:de:49:d2:c3:21:38:58:12:7c:79:0d:
                    8f:51:b0:87:f2:e1:c2:1e:e7:69:a7:ab:9e:b4:a4:
                    56:30:20:ce:44:a1:eb:e8:23:92:0d:5e:ba:4c:d0:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:B3:4B:E3:28:61:3B:5E:B6:6C:64:51:ED:15:00:52:06:37:1A
            X509v3 Authority Key Identifier:
                keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:67:e4:f5:91:39:ea:c1:ac:d9:bb:66:cf:5e:84:4e:ef:d8:
         f7:78:ee:06:e3:99:b0:b1:e9:8d:61:37:35:fe:f2:bb:cb:12:
         72:7e:aa:86:bb:9f:28:b3:2d:c9:15:bf:c7:bb:45:db:cc:ba:
         29:02:f9:14:dc:ab:aa:d8:a9:36:e9:90:05:34:f9:a0:ec:4d:
         3a:7c:6b:f6:ff:16:0b:b7:ef:aa:04:10:b5:36:17:3b:3c:8b:
         d1:d3:95:25:b4:bf:44:b0:12:ea:bf:49:51:bd:aa:9b:ca:67:
         1e:28:69:33:af:8e:2f:85:95:6f:48:d3:dc:1a:e4:ad:d7:83:
         dd:d4:a1:b0:c4:d5:34:c5:c2:b9:8c:27:57:19:0e:41:10:02:
         a9:9b:85:6b:fb:cf:4f:af:8f:4d:e0:cd:f5:60:03:94:ff:78:
         61:7c:9e:0d:f6:a3:43:70:9d:24:35:d7:2a:2a:97:70:65:d9:
         1a:56:84:dd:b9:c5:22:e0:f2:dd:5b:dc:0a:a4:f7:ff:fe:03:
         ad:a3:8b:aa:09:76:f2:bf:9a:85:6f:91:6c:1d:f3:ad:36:03:
         07:45:c9:f8:3c:a5:ef:23:19:58:05:f5:ba:cd:de:8e:2e:e6:
         3c:66:c0:9d:9a:3a:df:bb:24:6e:5b:00:69:58:bb:51:58:6f:
         19:17:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:28 2024 by rpki-client on console-fra.rpki-client.org