Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
File:                     3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          4kfw9wxMFbZRD9TSS+gEYFp7gcYlY+8liCP9Le3O5mU=
Subject key identifier:   8A:C5:ED:B4:22:BD:6E:FD:FF:4E:CC:95:C7:BC:F3:2D:34:3A:75:8B
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       49D4494922F89F9FCB0267BAA7F4AB227B9C3B41
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:18 +0000
ROA not before:           Mon 31 Jul 2023 00:01:18 +0000
ROA not after:            Mon 29 Jul 2024 00:06:18 +0000
asID:                     55699
IP address blocks:        160.19.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d4:49:49:22:f8:9f:9f:cb:02:67:ba:a7:f4:ab:22:7b:9c:3b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:18 2023 GMT
            Not After : Jul 29 00:06:18 2024 GMT
        Subject: CN=8AC5EDB422BD6EFDFF4ECC95C7BCF32D343A758B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:4f:d6:f3:66:ab:7b:e2:03:4b:2a:59:4f:
                    1a:25:e4:07:f2:de:f1:2f:cb:98:4e:20:38:a7:3a:
                    62:72:12:a3:1b:79:96:51:66:b0:58:99:bf:78:3a:
                    e2:ce:1a:ee:50:ac:69:63:36:f0:31:55:28:58:85:
                    58:de:51:4a:8e:31:c4:e0:b3:33:6b:39:42:f1:ae:
                    df:2a:46:b6:5a:11:83:20:c2:dc:14:63:44:22:b0:
                    fc:cc:0a:bd:0e:74:7d:35:db:b0:27:15:18:15:d9:
                    b6:38:73:2d:45:b2:6a:bd:29:55:17:96:29:c0:7a:
                    35:73:f7:33:5f:26:af:3f:df:60:9d:56:6b:2b:8b:
                    53:e7:9c:23:11:13:9f:ae:61:a2:79:b5:1d:e1:e4:
                    da:09:7d:0b:26:f3:0e:be:9d:7a:bc:82:6b:d0:1d:
                    86:e0:3d:0c:e2:37:4d:bb:ce:6d:5a:f0:52:68:3b:
                    c2:c4:ef:2b:48:4f:d2:a8:fb:f9:37:fc:0d:cb:8d:
                    12:ed:e3:9e:de:17:21:80:c5:7e:b4:73:74:8a:74:
                    32:00:5c:05:89:21:4a:e7:e5:1c:da:b8:71:ba:4e:
                    66:38:77:6a:e8:d7:d4:3d:9f:25:39:27:24:d4:75:
                    15:bd:7b:da:2a:1d:07:bf:8d:ca:42:60:25:a4:4f:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:ED:B4:22:BD:6E:FD:FF:4E:CC:95:C7:BC:F3:2D:34:3A:75:8B
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:43:7b:82:7f:94:ec:79:82:9f:d4:32:9c:45:a6:1d:6d:
         d8:49:d9:30:80:d8:ef:f0:5a:ca:95:e4:b0:b2:48:de:ae:18:
         b6:a4:72:2e:ac:57:f2:82:f8:76:2b:ac:4c:26:81:14:40:b1:
         2f:5b:0f:ac:85:09:d7:d0:04:be:fe:66:23:8a:6f:c4:4a:9c:
         f7:d9:68:1c:99:99:e8:91:7e:60:9e:dc:33:46:d7:00:67:fb:
         3b:d5:75:c6:44:8c:23:f7:e2:9e:db:5b:a2:14:18:10:dc:13:
         76:7e:cb:ed:be:ef:bd:f9:d7:30:82:37:69:bc:e8:94:e6:f4:
         44:5b:dc:f2:a2:3b:90:f5:d9:02:33:6e:cc:68:80:b3:90:38:
         65:85:52:ed:6a:61:f1:3e:6b:3a:0d:b0:c5:0b:9f:f1:1a:a5:
         a8:55:9b:89:2c:02:11:8e:f9:e7:a7:1b:75:d3:9f:47:0a:2d:
         ca:e6:7c:82:77:05:81:ad:46:b1:47:10:24:c6:6e:67:57:a8:
         e1:29:f5:4f:12:b2:f9:af:1e:e2:6d:35:f1:a7:9f:12:8c:2f:
         1b:25:ed:2f:cc:9e:50:95:8c:03:f4:c4:3c:b9:74:f8:ec:b2:
         4e:e4:15:f5:3d:fa:ff:48:5b:5e:87:19:d1:cc:ae:0e:03:a7:
         97:9b:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:27 2024 by rpki-client on console-fra.rpki-client.org