Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31362e302f32342d3234203d3e20313532303733.roa
File:                     3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (raw, json)
Hash identifier:          XzjqgLhjt+KjRzh9gA27Osih9S9xdw8kf+ykQQ4twEE=
Subject key identifier:   3A:8D:00:61:2D:E5:EB:DE:AA:2B:4C:B7:AB:E8:94:1F:F2:0C:9D:1A
Certificate issuer:       /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Certificate serial:       3CACB2AA7FACBC3A6B69D4609C80B79949CB9448
Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31362e302f32342d3234203d3e20313532303733.roa
Signing time:             Fri 05 Jul 2024 06:52:04 +0000
ROA not before:           Fri 05 Jul 2024 06:47:04 +0000
ROA not after:            Fri 04 Jul 2025 06:52:04 +0000
asID:                     152073
IP address blocks:        160.19.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
                          rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:b2:aa:7f:ac:bc:3a:6b:69:d4:60:9c:80:b7:99:49:cb:94:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
        Validity
            Not Before: Jul  5 06:47:04 2024 GMT
            Not After : Jul  4 06:52:04 2025 GMT
        Subject: CN=3A8D00612DE5EBDEAA2B4CB7ABE8941FF20C9D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:d4:e8:15:3a:6c:c0:14:f2:f6:f3:1b:38:
                    ec:d2:2d:50:55:95:9d:30:ff:af:d0:3b:20:61:2b:
                    b7:4b:26:51:85:00:69:94:c7:eb:8c:61:63:f2:bd:
                    76:ed:ca:87:55:d2:19:0d:a9:bc:7d:9e:49:66:dc:
                    c3:ff:a5:29:2f:19:d1:45:0c:b5:dd:e2:21:4f:76:
                    39:57:9f:1e:b1:d8:ad:d4:75:1c:90:a4:4d:f5:6c:
                    36:3b:b2:25:a2:34:75:4f:6c:84:d1:da:d2:6d:fc:
                    b2:d3:46:85:d7:a8:b5:2b:1b:b5:40:e3:78:d1:78:
                    25:31:71:d9:2c:ec:dc:01:a8:c8:60:88:0c:30:09:
                    80:29:92:e3:9d:06:83:4d:a8:b6:8c:f4:10:63:a7:
                    4e:7f:4a:be:6c:a4:29:ee:4e:cd:7c:f5:b3:72:39:
                    fd:29:01:08:3c:32:18:19:e0:e9:1b:c1:f5:38:5f:
                    5e:db:5c:27:44:83:a3:d5:67:9d:e4:0f:eb:62:ae:
                    d8:eb:3e:3b:01:84:10:d2:e5:a9:52:4a:e5:19:d6:
                    3b:03:18:56:66:e2:fd:4a:b2:ce:eb:97:29:8b:ce:
                    1b:26:83:3c:89:db:58:d6:53:75:1b:69:c0:f7:f5:
                    54:5b:e8:a6:9c:fe:ad:7e:ff:94:0c:e2:cb:1f:79:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:00:61:2D:E5:EB:DE:AA:2B:4C:B7:AB:E8:94:1F:F2:0C:9D:1A
            X509v3 Authority Key Identifier:
                keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31362e302f32342d3234203d3e20313532303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:46:cf:85:f2:15:fe:07:75:34:00:11:39:5f:28:ba:e2:d5:
         3a:70:90:0a:38:1d:f6:bb:7a:9a:ca:5d:fd:05:f3:11:14:24:
         7f:19:b6:09:03:f6:b7:2c:99:3c:fa:11:9f:2d:79:05:62:4e:
         65:e7:9a:2b:6d:ff:16:79:36:b0:98:a6:43:b6:84:01:ff:a2:
         7b:dd:ac:9f:b5:e4:22:e7:a5:4b:bd:b8:cf:f3:05:27:9c:8d:
         54:f8:6a:c8:a1:a8:7a:27:bb:b0:7f:6f:8f:2d:79:be:0f:b9:
         6a:03:46:87:bd:6b:15:37:47:9f:48:36:91:ba:99:d1:f4:ed:
         8e:8a:01:15:79:40:bb:ed:59:75:d5:92:a7:00:17:e5:c5:ee:
         92:0f:b0:3c:f2:03:70:06:55:f1:be:ed:d9:50:a1:67:f6:3c:
         c9:98:a0:7b:19:b8:e9:84:35:07:04:f5:df:1e:e8:0a:f3:8d:
         3b:62:6e:db:78:d1:00:97:5e:28:55:e5:5a:4b:f0:65:48:25:
         66:6b:c6:7c:1e:27:94:fa:a7:36:ba:ec:2c:e4:96:73:3e:8a:
         c3:28:28:c1:13:33:2e:5b:81:de:a3:e5:f1:c6:57:66:64:26:
         29:f0:9f:fa:4a:46:ac:c4:56:68:09:bb:76:54:3c:79:fb:0e:
         f8:d2:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:43 2024 by rpki-client on console-fra.rpki-client.org