Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa
File:                     3136302e32322e36342e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          fJguMOyM4p5CcAXd1J981pIsSCtwEBkb7MIWfq6UoJQ=
Subject key identifier:   D4:0E:4B:91:20:4E:37:D8:B6:9A:BC:CC:18:60:C2:79:0B:27:04:F9
Certificate issuer:       /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
Certificate serial:       7D493154A1DA5B2160FB0C4C688EF006F3EB0AAD
Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa
Signing time:             Tue 16 Jul 2024 04:37:39 +0000
ROA not before:           Tue 16 Jul 2024 04:32:39 +0000
ROA not after:            Tue 15 Jul 2025 04:37:39 +0000
asID:                     45305
IP address blocks:        160.22.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl
                          rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:49:31:54:a1:da:5b:21:60:fb:0c:4c:68:8e:f0:06:f3:eb:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1
        Validity
            Not Before: Jul 16 04:32:39 2024 GMT
            Not After : Jul 15 04:37:39 2025 GMT
        Subject: CN=D40E4B91204E37D8B69ABCCC1860C2790B2704F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:5b:9a:7f:ce:92:06:a5:fe:00:0e:a2:9b:
                    6e:99:9d:4e:4c:2f:c7:f8:b7:f3:3f:f1:b0:ff:9a:
                    08:cd:97:c5:c1:6b:2f:c0:91:04:5f:eb:b5:af:44:
                    95:81:c3:c6:b8:8a:e9:12:0c:5f:86:1e:87:aa:f3:
                    ac:2b:e3:a3:e4:21:26:2e:2e:11:b1:ed:f8:9a:ae:
                    cd:8e:71:23:df:8d:22:38:de:6a:83:11:02:6b:1a:
                    5e:49:87:c0:00:bc:6e:49:a5:98:34:9c:3b:f9:2c:
                    aa:19:58:f5:2e:91:f4:00:61:5b:ef:ab:31:b1:31:
                    68:a4:01:47:a7:92:b9:dd:ad:d5:8f:83:06:62:f7:
                    7b:1b:c7:fa:c3:45:4a:b5:d8:e4:ff:96:c8:01:4a:
                    c9:75:9d:eb:35:30:ae:c7:9f:6b:2c:44:66:cc:f8:
                    75:91:8c:39:1f:b1:fe:32:82:4a:a9:df:a8:20:99:
                    34:11:37:b5:3f:ec:4e:fc:83:09:23:82:ee:a8:6c:
                    14:6b:10:2b:64:53:27:fe:ec:5b:16:62:4f:65:2a:
                    4a:5b:b9:7f:ab:30:60:19:b0:fc:1c:18:d5:e4:31:
                    a2:0f:b2:9f:95:e8:6d:ca:08:a3:13:59:9d:18:d7:
                    9a:75:cc:bb:e3:52:f5:90:ce:cc:28:3d:df:25:34:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:4B:91:20:4E:37:D8:B6:9A:BC:CC:18:60:C2:79:0B:27:04:F9
            X509v3 Authority Key Identifier:
                keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:11:60:79:8d:4a:5b:82:6f:95:d5:ee:87:04:0f:09:9c:79:
         6c:03:6b:41:4c:1f:0f:18:47:07:a2:e5:b2:f8:b8:a8:e5:6f:
         cc:7b:27:a8:d0:fb:d4:d5:12:dc:ce:61:1e:9f:9a:e0:39:e8:
         79:5b:35:e9:7f:41:97:b0:64:49:e3:04:0c:8c:92:49:fd:c8:
         ec:e8:da:33:2a:b1:cb:66:63:31:0e:1d:04:cc:f2:10:dd:9f:
         e6:43:2d:73:2b:6a:a4:ba:fd:7d:99:17:cc:8b:a4:f6:b4:30:
         63:8a:0e:16:8a:40:56:4c:1c:89:cf:01:2d:54:97:44:01:85:
         69:02:95:1e:83:f7:bb:e7:18:80:03:5c:5a:b2:42:d7:2b:6d:
         59:72:b3:32:e4:f9:a0:e4:ee:e0:45:de:6a:85:ab:43:ed:e0:
         0c:59:3c:bc:a0:2d:4f:20:f2:1d:e7:d0:11:86:20:e5:d6:3a:
         2c:c0:af:f4:d4:3e:1c:0c:38:e2:0a:59:91:f3:42:31:20:ea:
         18:1f:17:2c:4b:d7:8e:0f:02:a2:9c:ce:6b:34:c7:69:b3:44:
         3e:13:b9:c6:58:d4:9d:68:27:46:23:be:a8:94:d7:4d:c7:20:
         bd:e2:58:4f:e1:94:3e:8f:38:37:65:eb:ae:48:ba:00:d0:3a:
         28:82:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org