Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa
File:                     3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (raw, json)
Hash identifier:          I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=
Subject key identifier:   75:31:66:31:F3:BA:A2:CE:E3:5A:8F:20:16:4F:2B:68:95:C6:7F:F1
Certificate issuer:       /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
Certificate serial:       79D2B6AD699EE9BBEFCC214B314838A7DCA0533B
Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa
Signing time:             Thu 25 Jul 2024 09:36:04 +0000
ROA not before:           Thu 25 Jul 2024 09:31:04 +0000
ROA not after:            Thu 24 Jul 2025 09:36:04 +0000
asID:                     153075
IP address blocks:        160.25.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl
                          rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d2:b6:ad:69:9e:e9:bb:ef:cc:21:4b:31:48:38:a7:dc:a0:53:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
        Validity
            Not Before: Jul 25 09:31:04 2024 GMT
            Not After : Jul 24 09:36:04 2025 GMT
        Subject: CN=75316631F3BAA2CEE35A8F20164F2B6895C67FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:86:24:59:c6:3a:a5:56:53:3b:ab:04:d5:
                    26:55:64:77:31:b1:b9:12:e8:5c:81:87:a0:b3:d6:
                    07:28:de:5e:fb:6d:59:3e:03:df:1c:d0:7d:96:a6:
                    1e:ec:23:24:b4:14:10:62:79:36:ff:11:90:b0:92:
                    e9:fa:fc:48:a1:11:d7:07:aa:bb:12:fb:77:04:6e:
                    a8:99:a2:d0:7d:bb:59:9c:83:f9:d2:cf:6f:90:a1:
                    f5:3b:b8:00:00:01:7b:e1:4c:4a:df:78:8a:49:3c:
                    c9:12:2e:f7:42:68:e8:da:a1:2f:17:c4:e8:67:a0:
                    0a:ff:ac:ed:2f:8c:24:84:5e:fb:91:1c:8a:df:e5:
                    c1:01:8c:3b:c3:ff:2e:a2:64:ec:00:d3:d1:de:ef:
                    6c:9a:d4:18:8f:18:1f:cf:f6:7d:a5:7e:71:53:5f:
                    d8:21:28:ef:2d:36:a3:52:16:19:c2:34:5e:aa:52:
                    9a:58:ce:cb:df:87:be:e9:c6:50:56:78:f9:73:c8:
                    7d:46:f8:c3:fb:cd:89:5a:93:84:cf:0a:27:a7:45:
                    e6:1b:93:33:3e:3d:a6:11:f1:64:6f:ab:61:71:b1:
                    31:9e:7b:1c:91:fd:0f:59:dc:49:1e:fb:2a:66:77:
                    77:44:87:26:c5:b5:9f:82:d3:13:b7:a0:1c:3a:5f:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:66:31:F3:BA:A2:CE:E3:5A:8F:20:16:4F:2B:68:95:C6:7F:F1
            X509v3 Authority Key Identifier:
                keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:56:b7:e9:b4:19:1f:61:e8:3f:20:09:d9:a7:ee:df:a1:af:
         d7:b2:4e:37:e7:3d:ec:8a:7a:39:66:e9:0e:c6:6e:07:a1:0c:
         7c:d1:76:4c:d7:8a:53:aa:a9:ca:25:9f:a6:75:8b:e1:27:9d:
         2a:83:4b:f3:ff:cc:fc:50:cc:64:8e:14:07:fe:76:3e:cc:ca:
         2b:53:d3:18:b7:d4:77:ec:4d:79:3c:8d:7d:5f:bc:05:06:78:
         d0:7d:c5:f4:0a:f7:34:82:91:06:2e:53:95:4a:75:a8:ff:94:
         09:d6:88:49:75:c9:eb:88:e1:45:d0:1a:f8:16:d3:02:7f:df:
         5e:3b:ab:20:1e:cf:d9:e2:7f:a4:bd:29:33:8a:b2:2f:f4:c3:
         96:d6:53:af:7d:d1:e8:37:ea:f3:60:07:d7:99:ae:fd:bc:d0:
         15:1f:03:fa:27:e3:58:17:5e:4a:b9:13:dc:e7:04:d8:7b:bb:
         9f:ad:7c:9d:d3:b0:a4:4b:9f:a1:a2:12:c1:c4:b3:75:fe:4a:
         73:bc:ad:7a:ce:ea:42:ba:3f:29:9e:b3:51:bc:2c:8f:8a:38:
         41:32:38:03:52:0a:11:71:6f:bb:11:0e:bd:03:de:77:8b:43:
         af:43:80:ce:52:9c:2f:64:15:fc:17:7e:d0:5b:30:6b:70:3f:
         3b:4b:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org