Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa
File:                     3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (raw, json)
Hash identifier:          e1/ZISiUaEqFgEoOZNhif4u64Oi3EdH2IOJ0spV1FKE=
Subject key identifier:   D3:9B:F0:94:EB:C9:9B:78:AD:18:EC:99:52:17:3E:65:DB:E2:C0:7C
Certificate issuer:       /CN=020EA2304929066809CA6F723574798639D77438
Certificate serial:       06BEBD3B6BCF7F802C8D6186A5AB135A4A76AFC7
Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa
Signing time:             Mon 22 Jul 2024 13:32:22 +0000
ROA not before:           Mon 22 Jul 2024 13:27:22 +0000
ROA not after:            Mon 21 Jul 2025 13:32:22 +0000
asID:                     153060
IP address blocks:        160.25.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl
                          rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:be:bd:3b:6b:cf:7f:80:2c:8d:61:86:a5:ab:13:5a:4a:76:af:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020EA2304929066809CA6F723574798639D77438
        Validity
            Not Before: Jul 22 13:27:22 2024 GMT
            Not After : Jul 21 13:32:22 2025 GMT
        Subject: CN=D39BF094EBC99B78AD18EC9952173E65DBE2C07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:fa:a9:ce:88:7c:a3:ee:c9:1a:50:47:5f:
                    04:61:27:2c:f0:47:a4:c1:33:8a:62:10:3c:b5:5e:
                    0d:8e:cf:fa:67:b5:4b:80:99:dc:7c:ae:80:ce:66:
                    1f:be:a6:8b:f2:6f:5f:43:e4:97:35:8c:b8:2e:73:
                    99:ff:6a:a6:f2:6c:a7:1c:4c:34:72:5c:d2:c5:7b:
                    9f:bf:6c:d9:3d:90:bf:9b:f1:b8:ea:d3:21:5c:69:
                    f4:89:b8:b6:7c:a2:77:f1:b9:64:c1:5d:11:50:ea:
                    32:44:73:79:6a:ba:ef:76:32:4c:8a:29:c8:5c:bf:
                    f3:2b:59:f2:90:38:c6:93:9b:30:45:00:a1:58:07:
                    2e:8c:a2:35:52:f5:84:78:6d:fb:bf:c9:59:31:41:
                    a8:10:94:b0:41:d2:5f:06:bc:f3:86:5a:29:22:e9:
                    bf:16:9a:e0:82:9b:e1:35:0b:8c:ae:97:b3:46:dd:
                    eb:14:2d:0b:25:02:5e:2a:3c:a1:7b:9c:a0:da:93:
                    56:73:d8:9e:c6:6f:8c:cb:1e:af:6e:a3:88:1d:d2:
                    06:ac:6e:55:00:12:13:f4:04:7f:c8:81:fb:76:b8:
                    05:3b:13:92:28:49:8d:26:fc:b2:30:ed:ab:fc:d0:
                    c3:3d:c6:f4:25:95:7e:0b:ad:05:c6:ff:87:c9:83:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:F0:94:EB:C9:9B:78:AD:18:EC:99:52:17:3E:65:DB:E2:C0:7C
            X509v3 Authority Key Identifier:
                keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:94:2c:93:31:7e:d7:df:d9:0f:74:5c:ef:4d:68:d2:e0:11:
         75:ac:eb:65:07:af:0b:4d:c1:f7:20:ab:2b:2e:28:e0:1d:68:
         3d:94:35:90:3d:e0:01:94:d9:e4:5c:04:a3:be:47:07:5d:cc:
         fb:ba:0d:39:67:c0:10:77:59:a9:b9:c6:50:42:eb:c8:e6:45:
         fe:01:f1:13:32:9d:35:46:b9:86:79:bf:98:11:c2:f7:bf:c2:
         b6:88:4d:e0:c0:07:f1:34:51:5f:ba:9e:e3:eb:0b:c9:99:38:
         34:16:49:e0:f1:b0:b6:08:5b:4f:c9:99:1b:5f:d5:10:dd:4b:
         25:8f:c2:f4:0e:36:d9:ff:ab:ed:67:ea:d1:75:03:ef:21:27:
         bf:c9:14:d1:0d:63:db:42:f9:39:64:ad:fa:c2:5b:48:22:69:
         b4:69:f8:4c:4f:ed:21:ab:cf:b1:1b:39:cb:6c:fc:48:8f:ce:
         b2:6f:3a:05:08:50:58:f7:23:91:f6:29:62:ff:72:7f:6e:a7:
         f2:31:e9:ed:89:96:7f:e0:68:a1:56:61:2d:b7:fa:d7:45:90:
         ed:dd:93:ee:54:f2:f6:e0:28:a3:0c:6e:ce:b5:5e:d4:04:42:
         96:40:7c:a9:06:d3:fa:d1:fa:a6:68:ce:ba:d1:c5:97:83:49:
         8d:fd:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org