Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
File:                     3136302e32322e362e302f32332d3233203d3e20313532373936.roa (raw, json)
Hash identifier:          gSJ2Tpcz5FhfuBqS7hiPJe0IxJ/V2JVqcWy8oWyRZN0=
Subject key identifier:   83:BC:39:94:B5:E3:74:9B:52:25:71:9A:C7:DB:A6:A9:B8:68:F1:B3
Certificate issuer:       /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial:       41129EF50737C1523101623B4C1CF864283D7843
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
Signing time:             Thu 13 Jun 2024 04:45:01 +0000
ROA not before:           Thu 13 Jun 2024 04:40:01 +0000
ROA not after:            Thu 12 Jun 2025 04:45:01 +0000
asID:                     152796
IP address blocks:        160.22.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:9e:f5:07:37:c1:52:31:01:62:3b:4c:1c:f8:64:28:3d:78:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
        Validity
            Not Before: Jun 13 04:40:01 2024 GMT
            Not After : Jun 12 04:45:01 2025 GMT
        Subject: CN=83BC3994B5E3749B5225719AC7DBA6A9B868F1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:eb:d7:b5:be:a9:77:9e:18:73:19:4b:2a:
                    9f:d5:9f:38:67:d2:dc:87:a1:82:69:e8:2a:18:09:
                    25:d7:6f:bc:79:86:ee:77:a7:63:b2:d4:74:11:1d:
                    47:b1:76:d0:98:1f:b2:cc:d9:0b:08:ec:53:4b:dc:
                    69:87:1b:4a:44:6b:21:c7:3e:bf:26:e8:f2:a8:d0:
                    04:15:c9:7f:43:b0:00:d6:61:05:7f:74:96:2f:e6:
                    50:6e:8f:39:8b:82:9e:5d:97:c4:74:e1:1e:62:29:
                    cd:15:52:f6:00:f9:24:5d:51:02:59:44:71:e4:13:
                    06:45:0f:ab:42:b5:aa:e4:e2:5d:bf:5a:40:8d:54:
                    a6:78:98:19:97:fe:86:b3:fb:03:ae:b3:4c:00:3d:
                    35:8d:fd:3d:4e:47:ce:59:59:ca:86:7b:e4:55:c0:
                    61:b5:94:4a:bf:ee:f9:98:77:59:bb:bd:3a:db:b2:
                    a3:b4:18:93:92:30:81:81:f4:32:57:a0:c6:d3:a5:
                    99:75:22:5d:93:e8:0e:3f:ba:e7:44:9a:12:16:38:
                    59:4e:24:0e:48:a3:77:bb:73:65:b7:da:2a:e4:a8:
                    23:36:1f:b6:e7:3b:01:30:ba:b0:47:e1:b8:94:af:
                    d0:58:eb:62:c3:96:df:aa:ed:70:6e:8b:83:f1:99:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:39:94:B5:E3:74:9B:52:25:71:9A:C7:DB:A6:A9:B8:68:F1:B3
            X509v3 Authority Key Identifier:
                keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:34:e9:46:a3:84:15:ab:3d:12:63:83:de:6f:fb:3c:28:64:
         2f:e6:27:e7:69:e7:08:17:d3:3c:f2:a6:38:8e:d9:56:de:5a:
         d7:cf:b9:a7:83:f4:e8:f7:4e:3d:86:62:61:70:84:ea:04:6f:
         48:f4:1f:c2:0d:7f:89:5b:fb:88:ed:4f:88:53:cf:19:54:69:
         28:7e:54:dc:63:bf:77:bc:7d:69:93:25:5a:c2:69:25:a7:49:
         36:87:4c:11:4a:05:60:f5:f8:41:55:fc:94:80:f7:87:f9:a7:
         ac:e6:1e:9e:d8:0c:6c:30:b8:db:08:ce:53:e2:6f:9d:a8:1b:
         1b:b9:6b:1c:7c:1d:48:8f:0b:0d:cd:88:a9:fb:37:fa:54:60:
         bd:a0:39:99:d2:f1:25:48:98:cb:b3:0a:ac:a3:eb:61:2b:b7:
         62:88:be:10:34:98:e6:b6:5e:3b:77:e3:ba:06:15:c3:14:68:
         a2:e4:3c:6f:0a:40:1f:f8:9d:d7:ea:56:a8:a1:77:38:4d:99:
         ef:7e:3b:aa:ea:cc:19:45:e5:0c:19:91:a8:6d:ca:c7:d1:27:
         91:fc:ac:2e:9c:4c:4c:d8:a5:f9:2f:74:59:4f:99:46:c1:d9:
         ca:9d:51:18:9a:ea:df:65:94:6b:eb:58:c8:cf:1a:aa:20:31:
         6b:88:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org