Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa
File:                     3136302e32322e362e302f32342d3234203d3e20313532373936.roa (raw, json)
Hash identifier:          cfFwjwKwPSy9Kh5E8D6UCcsgslEuVvz1uyywz0zfoJw=
Subject key identifier:   27:44:3B:2B:A2:22:79:16:D3:44:F5:EC:9F:99:66:1B:68:31:4C:8F
Certificate issuer:       /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial:       5D0A0B16412BC445CED856463D0DC6B5F237307A
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa
Signing time:             Thu 13 Jun 2024 04:45:28 +0000
ROA not before:           Thu 13 Jun 2024 04:40:28 +0000
ROA not after:            Thu 12 Jun 2025 04:45:28 +0000
asID:                     152796
IP address blocks:        160.22.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 06:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0a:0b:16:41:2b:c4:45:ce:d8:56:46:3d:0d:c6:b5:f2:37:30:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
        Validity
            Not Before: Jun 13 04:40:28 2024 GMT
            Not After : Jun 12 04:45:28 2025 GMT
        Subject: CN=27443B2BA2227916D344F5EC9F99661B68314C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:95:49:a0:d0:e1:4f:9e:d1:2e:38:14:94:
                    9e:a4:65:1a:5e:47:76:e8:92:2b:1a:f3:5d:a0:9b:
                    c6:59:41:d7:85:87:71:ab:c3:7a:32:22:05:a8:b0:
                    2b:d0:82:4d:19:2d:10:ec:e0:3a:da:fa:e7:a1:7a:
                    5d:13:9c:56:7e:f1:ee:ba:19:87:f5:d8:92:19:d7:
                    74:07:51:74:51:4a:3c:35:75:1d:dc:77:e8:d4:ab:
                    83:25:79:b9:bd:a2:47:06:12:39:06:66:83:87:90:
                    eb:c0:03:38:d2:51:e7:3c:9a:8b:c1:e3:8a:12:ed:
                    6a:1e:b4:3e:e3:34:62:00:38:39:12:88:33:b7:a7:
                    35:10:f9:49:5a:22:14:19:ea:ac:98:04:59:10:ab:
                    3e:34:d7:de:7c:3c:fa:08:59:d4:ce:a6:c9:3b:0e:
                    18:48:c5:29:c6:d4:04:13:ed:ab:df:c3:ad:0e:a8:
                    d2:50:24:98:15:b0:e7:e0:68:eb:52:55:30:3c:40:
                    58:b7:a6:ab:9c:db:23:71:17:b9:bf:de:00:06:6c:
                    70:b0:50:1c:78:0b:8c:2d:ba:52:1d:7a:46:a5:36:
                    40:8a:82:97:24:b1:e8:b5:5b:95:a1:d8:bc:49:37:
                    ae:ef:26:ab:cf:d5:71:16:93:a0:f5:d7:cc:16:e8:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:3B:2B:A2:22:79:16:D3:44:F5:EC:9F:99:66:1B:68:31:4C:8F
            X509v3 Authority Key Identifier:
                keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:ed:ea:1f:9c:ae:e7:43:c2:d0:44:ce:30:71:3b:74:fd:
         66:11:41:c3:89:6d:42:85:a8:f2:26:7a:d7:17:1c:ca:d8:9f:
         15:e7:92:b2:4d:fc:5e:40:42:f1:c6:31:6b:60:94:1c:10:71:
         32:a5:2a:81:23:c4:3b:8f:df:54:2a:86:91:f7:48:11:90:9d:
         a0:15:ea:90:13:70:33:77:cf:ab:a6:85:ba:a4:03:a6:ec:f5:
         b0:86:95:d8:e2:2b:97:35:ee:2c:c3:64:9c:e9:2c:cf:46:21:
         f2:51:48:d7:f8:fe:b3:d7:82:0d:a3:5b:e2:56:ad:74:63:1e:
         65:3a:73:7b:7f:d1:ca:dd:13:c6:01:fe:df:cb:79:64:85:5e:
         5d:5b:05:fa:6f:33:e2:86:d2:fb:3c:1a:62:00:0c:d4:ac:36:
         8f:93:8f:b9:69:94:84:08:bd:df:6a:aa:e6:b0:65:e9:4d:31:
         95:77:c4:cd:18:b1:7b:a6:7b:e9:57:2e:b8:bd:16:46:ac:89:
         da:7c:d0:78:cc:83:74:e5:37:13:c3:57:9e:e2:68:9c:1d:10:
         46:c7:55:b0:1e:d9:e4:9b:32:0d:24:87:99:64:98:ec:37:f1:
         ac:a6:9e:4e:68:e9:52:fb:62:e0:ee:3a:3f:26:c0:06:76:9b:
         61:6f:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:29 2024 by rpki-client on console-fra.rpki-client.org