Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
File:                     3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (raw, json)
Hash identifier:          KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=
Subject key identifier:   D4:9C:31:4C:DF:73:A3:1B:F0:8D:F6:C6:7C:90:C4:78:51:B3:A6:DA
Certificate issuer:       /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial:       17E9264C0162F7EB1411916E8BFFFDD1C741384A
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
Signing time:             Tue 02 Jul 2024 18:47:32 +0000
ROA not before:           Tue 02 Jul 2024 18:42:32 +0000
ROA not after:            Tue 01 Jul 2025 18:47:32 +0000
asID:                     152828
IP address blocks:        160.22.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
                          rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:26:4c:01:62:f7:eb:14:11:91:6e:8b:ff:fd:d1:c7:41:38:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
        Validity
            Not Before: Jul  2 18:42:32 2024 GMT
            Not After : Jul  1 18:47:32 2025 GMT
        Subject: CN=D49C314CDF73A31BF08DF6C67C90C47851B3A6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:1a:dc:b7:f8:54:2b:73:ab:37:bc:73:5b:
                    5a:0b:77:24:2d:54:04:ca:6f:76:d9:e3:33:d8:13:
                    90:34:40:be:5b:86:0b:c1:a4:ab:83:fb:d3:5f:4f:
                    ab:fc:35:63:3c:4a:54:0e:ac:25:18:64:28:c6:4a:
                    13:2f:69:b8:34:cc:b7:99:89:cd:8f:8f:2d:39:c3:
                    c9:04:aa:3d:6d:51:c2:1e:78:77:27:93:a1:e1:b7:
                    72:ab:22:14:b8:9c:bf:93:05:f6:a0:b3:7b:eb:99:
                    cf:98:4d:20:31:06:f7:13:d1:01:d2:75:a4:8b:ce:
                    ce:57:a2:3a:08:72:62:d4:49:dc:66:8c:17:62:1b:
                    f5:a4:4b:c0:2e:5e:1e:52:12:83:5b:d1:13:b3:79:
                    92:af:c3:2e:1f:8e:7a:2f:02:2a:c4:09:e1:21:9a:
                    f8:40:b6:27:37:11:c3:63:db:2e:ae:ed:5a:c9:07:
                    b6:7e:22:9e:5c:87:16:84:d0:6f:b5:75:57:53:88:
                    da:8c:85:34:aa:35:a0:b2:90:50:6b:37:77:f1:30:
                    ae:19:17:23:55:51:15:94:74:35:60:1e:cd:ba:db:
                    d8:6b:ff:ec:80:f1:0e:dc:38:25:24:30:6f:b4:9e:
                    64:ab:c7:97:39:af:e3:ee:54:9a:47:1a:ae:ea:3f:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:31:4C:DF:73:A3:1B:F0:8D:F6:C6:7C:90:C4:78:51:B3:A6:DA
            X509v3 Authority Key Identifier:
                keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:c0:05:a0:92:8b:a1:25:8f:28:5a:c9:45:60:0c:aa:4d:
         fb:c7:b2:eb:d0:b5:a9:27:5d:bd:54:2b:57:4c:bd:f2:2c:5c:
         36:3c:be:35:0d:e1:ac:d2:f6:c9:df:95:a5:c0:9b:b5:e8:c9:
         60:fd:f7:17:2d:51:0e:1d:5f:44:1c:d3:f8:88:74:62:d2:ac:
         4a:d9:70:49:ad:90:cd:0e:0a:be:e0:ff:d3:71:24:1b:ca:5b:
         8b:3e:7f:ce:e9:20:13:83:18:54:6b:e5:ad:02:0f:ac:54:cf:
         2b:ca:8e:f5:02:2f:c8:7c:c2:3b:86:80:16:2e:b4:a9:f9:22:
         4b:46:18:f0:64:1a:76:f0:82:cb:8d:2f:d1:04:1e:fe:84:87:
         f8:f6:1f:19:79:03:f7:65:cb:60:81:49:ee:c3:6a:db:1a:65:
         45:b7:d8:de:de:94:92:bf:60:e8:f4:e5:b8:a2:e1:48:b8:77:
         59:b0:21:0b:a9:86:dd:3a:64:9c:96:60:30:ab:e3:79:c0:90:
         72:01:fb:64:33:47:c6:d9:d0:82:1e:e6:5f:0b:7f:9c:fa:83:
         5d:43:8a:ea:69:b7:15:60:61:c6:ec:05:6a:ab:f4:ef:89:a5:
         78:42:8c:9d:80:0e:10:bf:de:c2:47:f8:b4:23:89:fd:6b:2d:
         72:8d:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org