Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa
File:                     3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (raw, json)
Hash identifier:          z0YgoG/ujpHrwuWoXrEZAv8nwDL/OBeAUxVX0QCVaBM=
Subject key identifier:   BD:04:D9:EC:A7:6A:73:F5:AF:36:84:DF:5B:4E:62:77:92:58:B3:7A
Certificate issuer:       /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
Certificate serial:       27E4BA00D0C29CFE54160FE8E50DE5852597DAB4
Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa
Signing time:             Fri 06 Jun 2025 07:00:00 +0000
ROA not before:           Fri 06 Jun 2025 06:55:00 +0000
ROA not after:            Fri 05 Jun 2026 07:00:00 +0000
asID:                     152073
IP address blocks:        160.19.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl
                          rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e4:ba:00:d0:c2:9c:fe:54:16:0f:e8:e5:0d:e5:85:25:97:da:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061
        Validity
            Not Before: Jun  6 06:55:00 2025 GMT
            Not After : Jun  5 07:00:00 2026 GMT
        Subject: CN=BD04D9ECA76A73F5AF3684DF5B4E62779258B37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:24:08:63:0c:dd:14:28:a6:1c:cc:91:1a:a2:
                    41:5b:1d:83:0e:31:25:0f:de:25:10:ff:3e:f3:b5:
                    5e:b2:df:d2:ee:0b:a0:12:3c:ea:06:6a:49:68:5f:
                    8b:61:c7:b9:60:80:73:6f:5f:3a:6d:15:83:6c:73:
                    77:10:d6:e0:29:40:74:9f:db:5b:b2:c4:48:77:0b:
                    76:99:cb:32:71:36:e9:25:c1:63:3f:87:23:8e:05:
                    7c:df:ce:7f:26:a9:ae:23:5d:f7:a0:3d:c6:05:32:
                    e1:2b:90:63:e9:43:af:02:cd:55:d9:e5:18:ae:1d:
                    7a:0f:82:10:ee:0c:46:51:ca:b1:a9:ae:bd:c9:09:
                    48:2e:72:74:d4:2a:00:46:20:d4:da:29:36:b7:f3:
                    6f:16:52:4e:49:ed:40:6b:d8:13:f9:89:96:fb:78:
                    1d:e1:cd:0b:fa:8c:36:1e:cc:64:df:d9:f7:f9:de:
                    90:94:b1:e3:50:f6:c9:cb:5c:7c:fc:8a:da:41:82:
                    fd:7c:19:02:d3:d6:85:9d:58:12:cb:e8:90:07:d9:
                    d8:a0:ff:28:63:ea:8e:f6:ae:52:0c:cb:aa:e9:57:
                    28:79:3d:b0:06:53:3c:f9:50:f1:2d:81:71:f3:1f:
                    b7:ff:09:71:7e:31:5b:7b:eb:af:b0:e9:be:d8:63:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:04:D9:EC:A7:6A:73:F5:AF:36:84:DF:5B:4E:62:77:92:58:B3:7A
            X509v3 Authority Key Identifier:
                keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/3136302e31392e31372e302f32342d3234203d3e20313532303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:84:36:8c:23:ed:4f:5a:d4:29:a0:db:29:4e:fd:af:f2:b8:
         ee:55:6a:95:2a:2d:af:8e:b8:70:61:c9:69:f4:c3:23:a8:94:
         dc:6e:24:76:f8:6a:34:29:62:60:c8:cc:ed:d7:83:36:c0:d4:
         b6:bc:3c:60:b0:fd:ff:cc:9b:31:e5:18:93:5d:e4:89:8f:9f:
         62:e6:9d:d4:f9:00:d0:73:45:7f:b6:72:f9:32:37:eb:0c:b2:
         be:e9:a9:8a:14:8e:11:6a:96:53:5f:4f:9a:db:25:63:72:9c:
         e4:c7:d5:a5:79:c9:9a:f7:2c:20:6c:ad:a6:70:14:2a:d1:cc:
         b4:53:06:08:8c:20:cb:35:af:f4:63:96:b9:d2:c8:93:19:36:
         ae:e7:00:99:13:1c:b6:f9:19:c8:78:8e:33:08:55:8a:32:5a:
         20:f4:1e:20:9e:4a:e8:89:cc:97:30:6e:2b:c1:74:62:5a:18:
         b3:0e:f3:4d:93:f4:97:08:49:86:66:f6:e1:19:3e:1f:12:8f:
         b2:79:97:6c:e2:01:7f:e3:c8:4c:71:f3:16:a5:85:a2:e2:c0:
         3c:4f:c4:fa:40:f0:22:79:2f:6a:72:24:f9:70:19:d1:ca:b6:
         5a:7d:13:1f:0b:63:44:5e:5a:b5:fd:17:b5:d9:81:87:18:4f:
         f7:8f:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:36 2025 by rpki-client