Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e39392e302f32342d3234203d3e20313533313138.roa
File:                     3136302e3138372e39392e302f32342d3234203d3e20313533313138.roa (raw, json)
Hash identifier:          Z9C21jYXBxb4Rw4XxSYEdSsi0OANaGoA93lOX+v/AP0=
Subject key identifier:   FC:8A:BB:97:DC:2C:10:37:6A:CB:81:20:F8:97:86:99:B7:23:3B:16
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       40BF24337AA4F18ECA86B821D04F82F236E725FC
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e39392e302f32342d3234203d3e20313533313138.roa
Signing time:             Mon 30 Sep 2024 08:25:37 +0000
ROA not before:           Mon 30 Sep 2024 08:20:37 +0000
ROA not after:            Mon 29 Sep 2025 08:25:37 +0000
asID:                     153118
IP address blocks:        160.187.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bf:24:33:7a:a4:f1:8e:ca:86:b8:21:d0:4f:82:f2:36:e7:25:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Sep 30 08:20:37 2024 GMT
            Not After : Sep 29 08:25:37 2025 GMT
        Subject: CN=FC8ABB97DC2C10376ACB8120F8978699B7233B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:fd:13:6a:c5:37:8a:c1:24:41:fe:53:b0:
                    82:99:7a:8b:b0:aa:e9:de:68:3f:08:49:69:87:47:
                    a9:90:77:84:9e:0d:2e:27:01:d9:36:8b:f0:99:b4:
                    54:1a:ed:c3:5e:f5:bc:a1:bf:14:0c:bf:11:d5:fa:
                    11:85:51:e3:02:f4:fd:1b:a5:9b:83:5a:dd:e0:bb:
                    25:57:ef:98:27:17:08:2d:9f:15:ae:d6:70:94:a9:
                    04:1b:87:db:88:1b:bc:19:ab:95:b6:16:af:7c:1d:
                    60:fe:10:4d:eb:f2:8b:ee:88:de:e5:df:8c:be:7e:
                    1e:d8:70:f2:1b:63:24:3d:42:b8:4c:b2:63:eb:8d:
                    0e:7c:41:db:85:73:7d:b8:fd:7d:75:41:02:4a:e8:
                    19:1a:b7:be:fa:17:d0:fc:dc:f5:83:a5:5b:86:41:
                    83:6b:8b:29:f7:99:eb:8a:4a:95:11:45:86:63:f6:
                    b5:2d:71:d7:d0:0c:16:c8:0a:e4:7a:53:12:f3:c9:
                    e8:d8:15:7f:03:69:f3:c2:2d:c8:74:ea:6a:93:c4:
                    38:34:fd:b3:85:32:24:03:06:44:ac:f4:34:90:67:
                    29:94:2d:d0:e0:ee:53:53:e1:49:45:b1:f7:92:49:
                    9a:9a:dd:53:62:dc:27:79:4e:f8:90:95:3d:4e:4a:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:BB:97:DC:2C:10:37:6A:CB:81:20:F8:97:86:99:B7:23:3B:16
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e39392e302f32342d3234203d3e20313533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:62:62:47:c2:6d:8e:c1:0c:05:90:0e:08:25:2b:b4:b0:
         d6:97:a6:0e:38:af:b7:69:8a:d7:80:6b:4d:13:3d:4e:c5:14:
         2a:55:a7:0d:55:78:ab:6f:b5:d5:cc:4f:2e:32:26:6d:a6:9b:
         26:3a:ba:24:d5:97:5f:5d:22:8d:fc:a7:76:73:5d:e0:43:b9:
         1d:8b:96:b6:79:e8:d5:7b:81:cf:d7:80:4c:5b:5c:0f:2d:6a:
         60:7d:e0:84:d9:cb:cc:02:0b:f2:c4:7b:d4:08:7f:7d:fc:25:
         f9:1c:5b:0c:75:99:18:cf:b1:9c:07:06:4d:aa:62:eb:fb:48:
         c9:a5:d5:19:96:00:ee:f6:c6:0b:06:7e:eb:1c:07:10:83:c1:
         38:85:10:d2:b3:80:65:81:23:47:a0:a0:ec:e1:b3:a4:e7:37:
         0a:24:81:16:65:46:e2:3e:96:f9:d0:1d:fa:e5:9a:38:5b:60:
         13:11:0d:12:dc:cc:b3:9f:83:58:38:75:58:6d:9a:60:7f:c8:
         a9:45:02:e6:87:a0:f9:ee:7b:dc:8a:64:3a:2c:31:89:a2:89:
         d4:9c:69:0f:ae:ac:13:69:f9:ec:2a:1e:9b:41:63:38:7f:34:
         6a:8a:ca:9c:01:b3:c5:11:6f:8a:35:e0:8a:36:0e:4e:b0:5c:
         77:ca:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org