Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313532383134.roa
File:                     3136302e32322e36362e302f32332d3233203d3e20313532383134.roa (raw, json)
Hash identifier:          McNi6uIe5Axf6tBtLxMOSaRGdTnkzxQvhnQV75cvKKU=
Subject key identifier:   28:5B:20:53:CC:C1:6A:F1:04:D0:F6:38:9C:A4:68:BA:24:F2:B7:D9
Certificate issuer:       /CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
Certificate serial:       4CB73CD5291D4241645BBFFE016A2C49AD8FCA45
Authority key identifier: 9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313532383134.roa
Signing time:             Tue 16 Jul 2024 08:50:07 +0000
ROA not before:           Tue 16 Jul 2024 08:45:07 +0000
ROA not after:            Tue 15 Jul 2025 08:50:07 +0000
asID:                     152814
IP address blocks:        160.22.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl
                          rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b7:3c:d5:29:1d:42:41:64:5b:bf:fe:01:6a:2c:49:ad:8f:ca:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE9E8715DE7A995273D27BD16FBF33DC09CF652
        Validity
            Not Before: Jul 16 08:45:07 2024 GMT
            Not After : Jul 15 08:50:07 2025 GMT
        Subject: CN=285B2053CCC16AF104D0F6389CA468BA24F2B7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:eb:3d:11:46:e0:92:3a:a2:72:39:07:ee:
                    26:05:65:b9:c7:22:6c:1e:57:b7:22:3b:67:17:64:
                    80:68:c8:3f:dc:f5:e4:e9:19:25:18:b9:52:9a:f1:
                    95:dd:6e:29:82:b5:35:ac:1c:ff:1d:b4:8e:8a:de:
                    3f:b4:fc:65:2b:16:14:c4:b7:b7:ef:b4:c9:43:ac:
                    95:2d:e6:b5:31:25:1d:44:e4:14:2f:ba:48:1e:b1:
                    61:04:9b:e9:d2:e6:39:75:96:53:c7:54:82:15:c6:
                    5b:95:bb:ac:d1:83:75:a0:5f:2a:7b:a2:da:db:70:
                    d5:63:74:a1:7e:08:23:ad:2e:c8:fa:63:c1:db:70:
                    d9:6f:2c:20:74:a9:3e:71:2f:fa:b4:08:ff:e5:22:
                    30:2b:d8:97:d9:72:b7:d8:bd:d8:6d:7f:71:b4:e1:
                    b1:db:e7:fb:b4:32:c2:fd:0c:cc:ac:08:40:37:46:
                    3d:43:25:3c:26:2d:79:c8:4e:2a:48:07:59:90:e3:
                    64:57:cd:57:a3:41:5a:2a:9a:d2:d6:4c:a9:23:05:
                    e5:b4:ff:55:32:2f:a0:99:84:d9:56:d5:04:14:2c:
                    65:e0:04:86:8f:da:d9:3a:a1:4b:f3:50:7c:70:54:
                    bf:23:b2:8e:43:ef:b4:fb:16:65:8a:d7:88:f2:0b:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5B:20:53:CC:C1:6A:F1:04:D0:F6:38:9C:A4:68:BA:24:F2:B7:D9
            X509v3 Authority Key Identifier:
                keyid:9E:E9:E8:71:5D:E7:A9:95:27:3D:27:BD:16:FB:F3:3D:C0:9C:F6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9EE9E8715DE7A995273D27BD16FBF33DC09CF652.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313532383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:67:e4:d8:22:b3:12:bc:17:8a:bd:dc:53:2d:a1:b3:8c:
         d9:2f:17:d7:d7:5e:ca:23:ed:5e:22:26:0f:08:ed:62:ae:3b:
         da:20:80:9b:23:bd:b0:e5:28:ac:93:fd:31:4a:62:c3:e5:18:
         92:68:7d:e2:3a:04:ea:c0:81:98:44:e5:c7:b2:a3:22:92:46:
         bb:cb:8f:75:bd:6d:9c:25:31:45:4f:99:8e:25:99:80:75:12:
         09:8f:f6:88:08:a7:65:5b:fc:97:c6:21:88:92:16:5b:d3:b6:
         aa:a5:62:97:5d:4e:3c:ce:47:b6:bd:b1:08:6d:96:41:73:e1:
         6c:68:6e:92:1c:ed:46:07:32:62:06:c7:0c:26:ea:ed:8f:fc:
         67:23:60:77:eb:ef:ce:6d:3c:d8:2c:7b:76:b4:86:71:41:fa:
         c4:48:53:24:c2:86:e9:6f:33:26:9e:83:a3:14:e0:9e:43:5c:
         12:2f:70:c9:f0:87:a6:16:4a:03:cd:77:a4:e7:13:05:fd:71:
         ba:82:dc:ca:65:11:1b:0a:d0:6b:dd:6c:43:a4:84:b1:b9:bf:
         49:4f:7f:33:93:0c:f2:d3:1d:45:fc:d7:53:e4:2c:a8:64:60:
         02:4a:6a:5f:d5:c0:2b:8d:19:98:50:5a:1e:34:7b:42:61:8d:
         60:61:8b:a6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTLc81SkdQkFkW7/+AWosSa2PykUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RD
MDlDRjY1MjAeFw0yNDA3MTYwODQ1MDdaFw0yNTA3MTUwODUwMDdaMDMxMTAvBgNV
BAMTKDI4NUIyMDUzQ0NDMTZBRjEwNEQwRjYzODlDQTQ2OEJBMjRGMkI3RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOes9EUbgkjqicjkH7iYFZbnH
ImweV7ciO2cXZIBoyD/c9eTpGSUYuVKa8ZXdbimCtTWsHP8dtI6K3j+0/GUrFhTE
t7fvtMlDrJUt5rUxJR1E5BQvukgesWEEm+nS5jl1llPHVIIVxluVu6zRg3WgXyp7
otrbcNVjdKF+CCOtLsj6Y8HbcNlvLCB0qT5xL/q0CP/lIjAr2JfZcrfYvdhtf3G0
4bHb5/u0MsL9DMysCEA3Rj1DJTwmLXnITipIB1mQ42RXzVejQVoqmtLWTKkjBeW0
/1UyL6CZhNlW1QQULGXgBIaP2tk6oUvzUHxwVL8jso5D77T7FmWK14jyC4PJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUKFsgU8zBavEE0PY4nKRouiTyt9kwHwYDVR0j
BBgwFoAUnunocV3nqZUnPSe9FvvzPcCc9lIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGI5MjdkZi1iYzljLTRiZTYtYTFmYS0yZTEyNWM0NjlmNzEvMC85RUU5RTg3MTVE
RTdBOTk1MjczRDI3QkQxNkZCRjMzREMwOUNGNjUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOUVFOUU4NzE1REU3QTk5NTI3M0QyN0JEMTZGQkYzM0RDMDlD
RjY1Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYjkyN2RmLWJjOWMtNGJlNi1h
MWZhLTJlMTI1YzQ2OWY3MS8wLzMxMzYzMDJlMzIzMjJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMjM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWQjANBgkqhkiG
9w0BAQsFAAOCAQEAAXtn5NgisxK8F4q93FMtobOM2S8X19deyiPtXiImDwjtYq47
2iCAmyO9sOUorJP9MUpiw+UYkmh94joE6sCBmETlx7KjIpJGu8uPdb1tnCUxRU+Z
jiWZgHUSCY/2iAinZVv8l8YhiJIWW9O2qqVil11OPM5Htr2xCG2WQXPhbGhukhzt
RgcyYgbHDCbq7Y/8ZyNgd+vvzm082Cx7drSGcUH6xEhTJMKG6W8zJp6DoxTgnkNc
Ei9wyfCHphZKA813pOcTBf1xuoLcymURGwrQa91sQ6SEsbm/SU9/M5MM8tMdRfzX
U+QsqGRgAkpqX9XAK40ZmFBaHjR7QmGNYGGLpg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org