Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/3136302e32322e37322e302f32342d3234203d3e20313532383033.roa
File:                     3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (raw, json)
Hash identifier:          gfm0OdXx52I0indogLOMYnpNUVL0otXBVtfhSrywVas=
Subject key identifier:   BF:C9:AC:71:FB:CC:E1:D8:DC:28:A8:58:FC:F9:4C:5C:CA:67:2A:AD
Certificate issuer:       /CN=E380A055DD3B1E364672B9F0DD6852AE31F93906
Certificate serial:       54279392E1C1EA38D82844E69AAFE50A79F73C67
Authority key identifier: E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/3136302e32322e37322e302f32342d3234203d3e20313532383033.roa
Signing time:             Sun 23 Jun 2024 16:46:15 +0000
ROA not before:           Sun 23 Jun 2024 16:41:15 +0000
ROA not after:            Sun 22 Jun 2025 16:46:15 +0000
asID:                     152803
IP address blocks:        160.22.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl
                          rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:27:93:92:e1:c1:ea:38:d8:28:44:e6:9a:af:e5:0a:79:f7:3c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E380A055DD3B1E364672B9F0DD6852AE31F93906
        Validity
            Not Before: Jun 23 16:41:15 2024 GMT
            Not After : Jun 22 16:46:15 2025 GMT
        Subject: CN=BFC9AC71FBCCE1D8DC28A858FCF94C5CCA672AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:52:ce:b2:a2:02:15:0b:0a:02:ff:40:eb:
                    f5:15:01:20:54:3d:d0:fa:cd:57:81:3b:3e:12:cd:
                    3b:55:30:bd:1d:27:83:14:66:5f:ed:d5:68:58:7d:
                    42:b5:a6:07:3b:9f:61:0b:c3:f6:4a:8a:17:b6:8b:
                    5b:30:18:7e:6b:a8:49:d6:c3:cb:3a:c9:73:44:ad:
                    fe:50:14:a2:0a:0d:c8:48:bc:24:07:1e:4a:f1:ff:
                    b8:d2:ed:1d:1b:e0:3d:4d:94:76:b0:66:32:4a:7f:
                    1c:0b:3e:1d:f0:14:28:57:22:aa:37:4a:8d:cd:56:
                    15:a4:ac:8f:37:1c:c5:aa:d6:55:9f:70:f0:4a:9b:
                    5e:42:e9:ff:8b:40:53:0e:4e:9a:db:b9:7e:8a:2d:
                    c3:02:81:d7:34:a1:8c:c0:b4:86:57:74:b9:fa:45:
                    24:f4:c5:ff:b3:e8:f2:e8:3b:41:89:f8:bd:c8:7b:
                    68:4f:0c:4f:ae:cc:60:17:cc:77:41:3e:8b:cc:69:
                    94:49:17:0d:16:87:0d:23:5e:1a:e3:5f:a4:f6:85:
                    a2:e9:0a:71:25:7b:82:c5:e0:50:55:97:1c:92:19:
                    ea:a9:cc:bb:b3:3a:2b:f0:e5:3a:10:35:7f:2c:ae:
                    65:a7:20:ec:5d:65:cf:fd:dc:53:8b:00:9f:16:c3:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C9:AC:71:FB:CC:E1:D8:DC:28:A8:58:FC:F9:4C:5C:CA:67:2A:AD
            X509v3 Authority Key Identifier:
                keyid:E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/3136302e32322e37322e302f32342d3234203d3e20313532383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:82:7b:58:8d:72:f3:a2:1d:6e:bb:92:f1:df:34:d6:ed:a3:
         fc:30:06:74:a4:e5:7a:52:0c:b9:6d:76:4d:af:a2:ec:62:84:
         50:72:51:7d:23:1a:f4:5c:6a:d5:ba:0f:68:22:8c:60:3d:29:
         75:4a:32:09:1b:a9:7f:61:79:6c:c7:02:a8:3f:61:a8:13:db:
         3f:ce:be:d6:39:e9:82:de:c0:35:8c:d7:5e:c9:64:6a:2c:32:
         f0:ca:6b:f1:c8:77:f8:d8:d9:8d:d8:74:99:11:2f:a1:a8:8e:
         3e:08:fa:be:0a:24:58:5f:06:7a:bf:71:e3:ba:1f:0d:d7:b2:
         0f:09:bd:c6:5b:47:b2:22:d3:e1:d0:d3:f6:e9:1a:f7:17:5d:
         ad:5c:0c:b9:fd:83:5e:51:dc:ed:c8:65:3e:fd:8e:b0:3f:d7:
         36:12:96:b8:5a:45:b3:68:86:c6:18:90:9f:7f:24:5d:1d:c7:
         ae:39:29:b2:ee:10:e7:82:22:6c:70:ec:48:27:ed:60:64:70:
         4b:23:16:33:b3:9b:e2:ea:56:da:0c:ee:34:27:35:c9:62:03:
         04:11:67:13:b6:b0:87:18:30:fd:bb:91:67:d7:30:63:df:0a:
         0b:4b:c8:40:05:f5:2d:ee:5f:32:fa:c7:74:de:1c:21:35:da:
         1d:d9:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org