Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138342e302f32332d3234203d3e20313532373636.roa
File:                     3136302e31392e3138342e302f32332d3234203d3e20313532373636.roa (raw, json)
Hash identifier:          bkmhOUXNDtU9ym1wMU9YSBlOM11yt/oAYG0rUKz/rL8=
Subject key identifier:   F0:FB:E9:A4:12:D6:E5:91:03:99:F8:2D:BF:41:7B:71:B8:BA:DD:B7
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       729FBF583E15A2B1E018EF903B1CD809FB7D8282
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138342e302f32332d3234203d3e20313532373636.roa
Signing time:             Mon 14 Oct 2024 06:26:31 +0000
ROA not before:           Mon 14 Oct 2024 06:21:31 +0000
ROA not after:            Mon 13 Oct 2025 06:26:31 +0000
asID:                     152766
IP address blocks:        160.19.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:bf:58:3e:15:a2:b1:e0:18:ef:90:3b:1c:d8:09:fb:7d:82:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Oct 14 06:21:31 2024 GMT
            Not After : Oct 13 06:26:31 2025 GMT
        Subject: CN=F0FBE9A412D6E5910399F82DBF417B71B8BADDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:59:28:06:ca:0e:7c:5a:2f:a6:34:be:a4:c0:
                    b1:18:fb:2d:3d:df:b7:f8:e6:f4:af:fe:89:a8:e1:
                    cb:dd:78:38:d8:8c:f4:3e:f6:28:4a:54:a0:66:86:
                    3d:38:99:0d:ea:b5:af:99:85:83:e6:14:72:d1:64:
                    24:b2:ee:1b:59:9c:64:a0:60:f9:d1:18:60:13:b7:
                    97:6e:47:91:a0:bc:2f:90:48:b3:a4:b3:83:e8:ac:
                    61:f0:99:12:0e:36:f3:3f:47:85:f5:07:85:48:29:
                    c1:6b:31:e7:cf:09:3c:ad:5d:89:df:1f:24:8e:e3:
                    ab:55:3b:51:ab:3d:02:e3:a2:11:ed:01:1e:49:ae:
                    46:59:f3:ca:c7:82:93:e7:23:a2:2f:7b:59:03:e8:
                    3a:83:ba:0b:b8:5b:dd:49:60:73:08:25:ae:74:1a:
                    7e:77:8e:3e:7f:84:16:10:6d:7d:6c:4f:c7:75:ef:
                    68:4d:18:0c:e8:97:2f:5d:7f:fe:1b:80:80:37:b4:
                    8b:b4:9c:6f:61:35:9c:f7:98:cc:fa:dc:7d:68:da:
                    63:fe:da:0c:4a:41:8b:d8:74:4a:6e:10:24:dd:8d:
                    bf:aa:f1:e8:62:96:50:ea:ba:54:5a:7d:4a:17:75:
                    9e:e9:b5:9d:70:ce:0f:72:9f:aa:68:fd:11:69:3c:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:E9:A4:12:D6:E5:91:03:99:F8:2D:BF:41:7B:71:B8:BA:DD:B7
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138342e302f32332d3234203d3e20313532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:f7:ae:f8:64:cc:9f:11:66:ce:b2:e2:b4:cb:86:1d:ff:
         df:f4:d8:0a:c6:12:be:68:e3:63:94:de:1d:7a:b5:a2:3d:df:
         7a:04:f1:21:9f:6f:64:43:d7:2e:ae:b5:77:49:e0:ca:6b:ae:
         44:d8:e6:8c:a2:71:c5:e8:b8:f3:d5:bc:40:f7:f6:2d:6e:78:
         e2:40:ab:ce:ba:d4:9c:46:8b:e6:b8:6b:25:1a:22:31:7d:13:
         85:90:77:de:be:a3:d4:05:7b:48:00:2c:f5:71:65:eb:d4:97:
         a7:78:0f:5c:f3:a5:39:8a:63:1c:85:a7:39:93:0f:61:8d:c9:
         fc:94:21:fc:52:44:5b:94:78:4f:89:a7:ef:14:c1:3b:bb:7c:
         47:fd:9a:5d:26:be:b9:b1:d6:8c:10:9f:43:21:9f:7a:50:17:
         f7:ed:86:dd:7b:aa:9e:53:5a:aa:56:db:1a:67:95:00:e5:88:
         4a:ff:e4:17:3a:de:2c:f3:7d:5c:6c:d7:76:a4:b2:ee:b2:a1:
         70:12:ea:9a:d6:19:69:fa:fa:63:11:4b:46:f3:76:08:87:57:
         9e:b6:0d:91:d6:0e:e4:68:11:44:95:8b:ca:76:f9:18:12:6b:
         08:9c:a1:11:05:d3:3a:56:14:fd:0f:bb:7b:5f:94:54:87:d5:
         4b:ed:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org