Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa
File:                     3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          uwm/tFhA5OoTTZhkM4YkOlTP/UbwCzBmYsX4YTKiaFM=
Subject key identifier:   E5:96:C0:89:64:5A:3E:70:88:B9:CD:59:68:EE:6F:A1:47:A5:D7:13
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       54FB36FDB214EDC75630DF0616C86BD2ECDCE4F1
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa
Signing time:             Thu 11 Jan 2024 02:27:50 +0000
ROA not before:           Thu 11 Jan 2024 02:22:50 +0000
ROA not after:            Thu 09 Jan 2025 02:27:50 +0000
asID:                     136052
IP address blocks:        157.10.160.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fb:36:fd:b2:14:ed:c7:56:30:df:06:16:c8:6b:d2:ec:dc:e4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 11 02:22:50 2024 GMT
            Not After : Jan  9 02:27:50 2025 GMT
        Subject: CN=E596C089645A3E7088B9CD5968EE6FA147A5D713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:99:99:fd:31:99:0c:5f:8d:63:db:28:98:8b:
                    2a:e8:63:1c:6a:87:8d:9c:2e:76:f1:f1:05:c4:7d:
                    ce:8b:da:4e:80:13:86:3e:10:8f:a5:48:6b:a3:bb:
                    3f:5a:64:80:cf:e7:7a:8c:c9:21:46:ed:25:43:98:
                    03:ac:2e:12:0c:6b:91:9c:19:f6:50:ae:d6:b9:0b:
                    90:66:77:9e:5f:5a:81:b4:98:94:be:64:7c:6e:36:
                    d4:22:d1:cf:58:7f:3f:49:28:3c:8d:c3:91:10:ac:
                    3e:8c:88:a8:86:4a:de:0a:06:f3:e8:02:75:56:a3:
                    6a:80:0a:ef:42:a5:fc:78:8f:29:bb:3f:90:e0:0e:
                    59:92:83:cb:d4:b3:d3:bd:92:aa:5c:9a:cc:99:dd:
                    68:0a:bd:fc:63:34:19:c4:22:80:7b:94:12:08:6e:
                    7f:0a:10:c1:c6:67:ae:25:22:06:a3:ef:88:88:46:
                    ed:e7:f0:c5:90:0e:10:bc:50:1e:73:40:46:1e:f8:
                    de:1f:e2:8a:ac:13:4d:ae:f7:0f:35:71:91:a0:70:
                    fd:2a:aa:ec:88:70:35:e8:bb:2f:fb:0c:20:c8:5e:
                    39:2d:f3:6c:df:2c:18:60:3f:bb:3a:83:7a:2f:d1:
                    5d:89:c0:e3:ae:1b:03:e7:34:10:42:8b:4b:af:9d:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:C0:89:64:5A:3E:70:88:B9:CD:59:68:EE:6F:A1:47:A5:D7:13
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:23:3e:49:36:3a:e2:b4:b8:27:a6:57:f8:34:31:10:20:cf:
         36:f9:b1:ea:87:78:bd:ff:55:a9:73:e8:2f:a2:e8:ad:7b:fb:
         24:12:17:83:34:07:bf:0c:f7:8d:9e:32:45:3f:0d:c3:c4:57:
         71:e5:23:de:de:cd:1c:57:c5:c6:7e:cc:b6:e3:ba:62:37:1d:
         3f:8b:3e:e0:bb:3a:6f:76:ba:03:e1:97:10:d3:e9:8b:7e:4b:
         8b:3c:65:14:ec:d8:a4:1a:3f:ee:ab:41:bc:59:2b:b8:d0:e5:
         9d:68:f4:04:3e:90:ac:21:be:22:a4:a9:38:50:bb:3e:3f:6d:
         0e:96:47:bb:e6:bd:ba:d8:e1:cf:08:2d:06:f2:ca:72:a1:09:
         ca:04:00:e9:aa:8b:2f:79:6e:c7:2c:53:ab:63:7a:2d:54:a6:
         d1:97:13:f2:ad:96:8c:10:fc:ae:41:82:ee:cd:22:0e:01:18:
         b4:ce:e5:00:7f:ea:32:f7:60:a7:2e:52:7e:69:90:49:e5:35:
         84:fd:52:5d:32:04:d8:bc:f7:c1:1a:db:b3:0f:64:28:8f:43:
         5f:15:07:a5:f5:3c:52:14:80:e1:4f:d0:0e:d3:7d:53:41:69:
         06:f1:3f:36:81:9d:f4:80:b2:5c:fc:5d:bd:71:95:55:1a:9c:
         2c:af:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org