Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
File:                     3136302e32322e372e302f32342d3234203d3e20313532373936.roa (raw, json)
Hash identifier:          4VRZi1K7JmUX+mY4PjGbZVJq7hsS2Sqman/3Bm5DdSM=
Subject key identifier:   B2:77:C2:ED:0D:57:F5:25:1F:D4:FA:1E:FB:DC:85:16:1C:3D:08:60
Certificate issuer:       /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial:       04381D1DFE29C02849C3619A001761143941CF19
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
Signing time:             Thu 13 Jun 2024 04:45:54 +0000
ROA not before:           Thu 13 Jun 2024 04:40:54 +0000
ROA not after:            Thu 12 Jun 2025 04:45:54 +0000
asID:                     152796
IP address blocks:        160.22.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 06:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:38:1d:1d:fe:29:c0:28:49:c3:61:9a:00:17:61:14:39:41:cf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
        Validity
            Not Before: Jun 13 04:40:54 2024 GMT
            Not After : Jun 12 04:45:54 2025 GMT
        Subject: CN=B277C2ED0D57F5251FD4FA1EFBDC85161C3D0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:26:a0:a0:44:ad:bc:88:2e:9a:4a:e1:6c:
                    42:78:0e:75:be:00:21:af:a5:23:5d:5b:dc:eb:3c:
                    e6:63:c6:06:79:9e:47:3c:bc:0a:5d:d2:90:97:c3:
                    5b:f5:c7:e8:c8:4e:21:d9:eb:71:b2:02:35:d4:fc:
                    33:b4:aa:ed:9f:e2:51:88:bb:4f:60:21:80:b7:e1:
                    83:75:b1:95:dd:50:61:0b:b9:dd:20:70:4c:9a:74:
                    5a:4d:41:67:4a:60:44:37:43:83:f0:62:78:a3:35:
                    26:d6:d7:43:a6:ff:3a:41:06:0a:0a:ff:79:b4:50:
                    3a:01:37:4e:4e:df:cc:6c:88:1d:00:ee:a9:61:1b:
                    a9:ad:be:e3:b4:38:92:16:c0:fd:0d:1e:3d:1d:b2:
                    90:de:52:05:a4:bd:c5:9a:16:92:bc:84:77:ee:b2:
                    09:ae:11:5b:9c:b6:fa:97:e3:3b:26:0f:b6:b2:66:
                    49:a1:78:da:5d:3f:96:f7:83:7a:a4:19:45:45:90:
                    72:71:33:3e:33:40:36:61:02:3d:98:be:00:4a:32:
                    7a:51:89:f5:34:0b:8c:7f:fe:2d:ff:04:0f:69:e1:
                    ff:04:c0:f1:e5:7c:36:d4:46:ba:8c:ef:7b:d2:ec:
                    fa:25:0b:68:d6:9e:a0:44:a2:3d:5d:1e:5c:e6:88:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:C2:ED:0D:57:F5:25:1F:D4:FA:1E:FB:DC:85:16:1C:3D:08:60
            X509v3 Authority Key Identifier:
                keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:30:96:d6:e6:11:ef:bf:e5:d4:a0:4d:c0:28:d3:d5:ec:63:
         f6:c8:18:10:4f:d7:e9:f5:5a:50:4e:d4:0f:ac:19:52:ab:a4:
         f9:c2:61:aa:0b:9e:e8:9e:f0:9f:2a:00:fe:8e:e2:a1:12:09:
         65:1f:5c:69:e0:0a:8c:1f:71:47:d2:c4:f1:31:15:57:b6:9b:
         03:c4:f8:34:2e:13:ff:33:02:93:3c:a9:5f:06:2e:4c:1a:5e:
         f7:ed:a6:03:fa:e9:12:1a:5f:1d:0b:d3:7e:14:4c:3a:94:51:
         6e:44:a8:a5:23:67:39:d6:39:a0:e0:22:61:ac:7c:e5:aa:cc:
         37:ca:28:3e:ff:8c:24:80:01:a4:8b:45:53:45:7a:a2:ad:f6:
         c1:63:4f:13:5b:fa:ee:fb:39:86:f3:4a:62:7d:3c:eb:14:09:
         63:9b:46:4e:a9:9e:39:ec:2a:27:c8:9d:f5:b3:94:53:1c:77:
         84:e6:1b:57:3a:14:1f:ff:08:27:50:42:cf:65:40:a4:d0:98:
         39:f0:d9:7f:f1:77:65:22:aa:06:8a:12:d9:a5:10:64:02:d6:
         23:fa:26:2b:99:d4:85:62:f9:bd:d0:23:ee:7a:8e:27:85:ae:
         d6:63:ff:c8:ea:b0:89:c0:03:86:53:29:53:6a:37:17:73:32:
         25:5e:72:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:29 2024 by rpki-client on console-fra.rpki-client.org