Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138362e302f32332d3234203d3e20313336303532.roa
File:                     3136302e31392e3138362e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          2HlINbgr4q7Ji5GprwS0gJFFpBC2+vaRndEZ0m2f0XY=
Subject key identifier:   AD:AD:BF:F0:1F:36:3E:60:3D:71:0B:4B:AA:A5:05:4B:B0:AE:56:29
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       078C9020D18A23E51C73A1DCABBA503ECA9CDDBC
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138362e302f32332d3234203d3e20313336303532.roa
Signing time:             Fri 17 May 2024 08:28:59 +0000
ROA not before:           Fri 17 May 2024 08:23:59 +0000
ROA not after:            Fri 16 May 2025 08:28:59 +0000
asID:                     136052
IP address blocks:        160.19.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8c:90:20:d1:8a:23:e5:1c:73:a1:dc:ab:ba:50:3e:ca:9c:dd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: May 17 08:23:59 2024 GMT
            Not After : May 16 08:28:59 2025 GMT
        Subject: CN=ADADBFF01F363E603D710B4BAAA5054BB0AE5629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:71:4f:93:35:d1:22:55:00:74:4b:34:db:
                    45:8e:d7:c2:45:5b:f1:b0:e9:8c:2b:51:34:6e:e4:
                    aa:2f:7a:fc:0f:9f:f7:cd:3d:4a:33:77:60:f8:f7:
                    62:7c:48:57:02:0c:8a:53:2a:6a:f0:84:b2:44:4f:
                    e7:88:d9:1c:66:e4:a7:e2:f1:3e:30:ee:de:75:ff:
                    db:93:6c:54:bb:94:3e:38:17:83:0c:f5:85:8c:28:
                    54:ee:f4:0b:95:54:f9:a6:6b:71:dd:a0:c5:a1:23:
                    e9:da:16:94:6e:4b:42:08:72:d8:40:46:2c:a9:14:
                    4c:4b:75:91:49:b1:bb:02:3e:a9:ea:89:8b:fb:21:
                    b4:51:30:6d:d0:c5:65:2d:e0:7e:fb:83:1d:3e:2e:
                    84:99:12:ad:bd:e4:4e:f1:92:8f:c7:1a:f6:4b:d5:
                    aa:74:6b:bf:cc:44:1c:f5:a2:35:ba:f7:af:af:a1:
                    47:e4:35:66:5f:13:af:8f:54:a5:20:cb:01:43:ef:
                    e8:63:96:42:8e:d2:b4:00:82:8d:7e:17:e0:00:3b:
                    7b:e1:f9:e4:a4:4e:d1:11:73:bd:93:12:61:59:c5:
                    66:b7:7b:2e:58:bf:f2:fc:fc:4a:d9:e0:49:96:bc:
                    b4:8e:f9:b4:69:c0:ed:16:56:a0:27:e5:94:31:24:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:BF:F0:1F:36:3E:60:3D:71:0B:4B:AA:A5:05:4B:B0:AE:56:29
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e31392e3138362e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:af:f9:f6:d9:46:25:1a:68:39:7e:0b:e3:98:89:d8:83:03:
         14:17:d1:75:59:a0:0d:92:97:f2:05:6a:a0:3f:24:c3:0c:cf:
         b6:8d:e4:93:d9:02:19:ae:01:b1:bc:c1:0a:ef:41:07:f6:3f:
         71:55:2d:d9:e8:b1:52:53:56:30:f7:a8:a4:35:8d:0a:ba:77:
         00:0d:f3:dc:0b:c0:f9:91:d6:40:78:be:26:ab:7b:22:2a:c1:
         48:4d:1a:a6:ef:41:47:54:43:c9:37:75:fc:a0:70:5c:31:62:
         20:5c:78:a1:fe:cd:0e:ae:b6:35:d1:31:6d:50:c3:3e:e7:6d:
         10:c0:1f:b9:6c:52:ce:0f:c6:98:a7:7c:e2:2e:09:f3:6e:b3:
         47:2d:3c:f4:58:55:fc:ab:94:b9:1d:82:a1:39:66:45:67:fc:
         ae:0f:6e:61:ad:da:7b:0e:7f:9d:9c:be:8b:3c:93:c2:6f:31:
         25:91:ba:a5:9c:4e:ab:eb:d1:e0:a4:d8:45:e2:ca:47:98:96:
         c9:73:03:3d:07:fb:18:94:f2:4a:65:99:03:69:d0:a7:01:c9:
         85:49:51:19:f6:ac:e8:9c:a5:a3:d5:74:7b:ed:90:fe:ae:a1:
         7c:da:1b:10:51:85:b5:8e:37:24:0a:03:f3:e6:13:0f:fc:7c:
         9e:54:c4:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUB4yQINGKI+Ucc6Hcq7pQPsqc3bwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDUxNzA4MjM1OVoX
DTI1MDUxNjA4Mjg1OVowMzExMC8GA1UEAxMoQURBREJGRjAxRjM2M0U2MDNENzEw
QjRCQUFBNTA1NEJCMEFFNTYyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMiQcU+TNdEiVQB0SzTbRY7XwkVb8bDpjCtRNG7kqi96/A+f9809SjN3YPj3
YnxIVwIMilMqavCEskRP54jZHGbkp+LxPjDu3nX/25NsVLuUPjgXgwz1hYwoVO70
C5VU+aZrcd2gxaEj6doWlG5LQghy2EBGLKkUTEt1kUmxuwI+qeqJi/shtFEwbdDF
ZS3gfvuDHT4uhJkSrb3kTvGSj8ca9kvVqnRrv8xEHPWiNbr3r6+hR+Q1Zl8Tr49U
pSDLAUPv6GOWQo7StACCjX4X4AA7e+H55KRO0RFzvZMSYVnFZrd7Lli/8vz8Stng
SZa8tI75tGnA7RZWoCfllDEk6wUCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBStrb/w
HzY+YD1xC0uqpQVLsK5WKTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM5MmUzMTM4MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzMDM1MzIu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGgE7owDQYJKoZIhvcNAQELBQADggEBADiv+fbZRiUaaDl+C+OY
idiDAxQX0XVZoA2Sl/IFaqA/JMMMz7aN5JPZAhmuAbG8wQrvQQf2P3FVLdnosVJT
VjD3qKQ1jQq6dwAN89wLwPmR1kB4viareyIqwUhNGqbvQUdUQ8k3dfygcFwxYiBc
eKH+zQ6utjXRMW1Qwz7nbRDAH7lsUs4PxpinfOIuCfNus0ctPPRYVfyrlLkdgqE5
ZkVn/K4PbmGt2nsOf52cvos8k8JvMSWRuqWcTqvr0eCk2EXiykeYlslzAz0H+xiU
8kplmQNp0KcByYVJURn2rOicpaPVdHvtkP6uoXzaGxBRhbWONyQKA/PmEw/8fJ5U
xOg=
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org