Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
File:                     3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (raw, json)
Hash identifier:          x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=
Subject key identifier:   C1:FC:1A:B7:7F:05:C6:FC:3A:A7:76:63:75:85:E9:CA:62:67:11:A1
Certificate issuer:       /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial:       481AEBE49D98E27A2E0D3987947CC6798AA3077B
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
Signing time:             Fri 16 May 2025 06:02:23 +0000
ROA not before:           Fri 16 May 2025 05:57:23 +0000
ROA not after:            Fri 15 May 2026 06:02:23 +0000
asID:                     152788
IP address blocks:        160.19.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
                          rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:eb:e4:9d:98:e2:7a:2e:0d:39:87:94:7c:c6:79:8a:a3:07:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
        Validity
            Not Before: May 16 05:57:23 2025 GMT
            Not After : May 15 06:02:23 2026 GMT
        Subject: CN=C1FC1AB77F05C6FC3AA776637585E9CA626711A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:03:2e:3c:8f:4b:78:97:7e:75:22:2c:0b:
                    0b:7e:93:93:ce:ea:f0:96:14:df:4b:79:98:ba:11:
                    94:00:cc:bd:f0:03:72:8a:80:c6:e4:fd:28:9d:7c:
                    83:a2:e3:07:44:05:56:80:53:0b:56:1a:b0:57:16:
                    ef:36:d7:47:34:af:f8:47:6f:f3:bd:3f:10:7d:dc:
                    b6:e5:19:fb:a9:d2:04:21:f7:53:c1:fc:31:48:56:
                    d2:56:93:16:7e:20:39:1b:6d:12:7e:07:08:a2:c5:
                    01:de:a1:ff:9c:52:b4:21:a5:7d:d3:eb:aa:8c:59:
                    bb:70:f5:a1:ab:25:f2:41:63:57:8e:46:c6:0b:83:
                    38:59:04:40:0c:82:70:03:dd:fc:76:52:e2:d0:f0:
                    71:31:ec:c2:03:9d:dc:27:09:68:9b:dc:00:a2:8a:
                    96:12:72:09:b1:32:4e:17:04:7a:5d:2a:2c:20:6d:
                    0a:e2:32:81:48:ae:11:34:cc:e7:25:2d:17:62:63:
                    6f:0c:b4:b7:50:4e:ea:72:dd:f5:e3:1e:a9:3f:7c:
                    7c:34:8f:76:45:e0:0b:9f:df:64:e9:dd:24:99:59:
                    e5:0d:1e:78:4e:24:7c:4e:78:54:57:83:7c:ff:59:
                    9b:04:32:c4:66:93:a8:48:77:8b:64:79:f2:2c:32:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FC:1A:B7:7F:05:C6:FC:3A:A7:76:63:75:85:E9:CA:62:67:11:A1
            X509v3 Authority Key Identifier:
                keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:a0:93:42:39:00:29:7b:0f:6c:5d:8e:5b:66:da:96:f4:
         92:82:c2:86:e8:18:24:d2:a1:8f:d3:ee:44:ef:95:2a:d1:8b:
         ff:22:00:9a:72:ac:d3:f9:58:99:4e:f5:e0:02:e1:4f:f0:cd:
         b5:14:6e:e9:be:71:a7:56:35:8a:02:12:96:8f:ac:63:16:da:
         4a:a6:db:6c:1b:0c:b6:0f:12:b4:e7:34:2b:7c:0d:66:18:4b:
         fa:e7:28:0d:20:af:d2:95:ec:96:8a:99:28:df:05:9b:9a:84:
         25:84:44:cd:18:f8:ec:d7:e8:4c:38:63:0e:35:a5:7b:95:10:
         7c:eb:35:3b:9a:63:86:28:da:84:70:05:3a:89:1c:05:e4:77:
         9e:d3:1d:b9:87:6f:fd:8e:8e:c9:0f:16:28:e8:19:4d:b8:89:
         47:99:72:ce:48:36:b6:f7:5b:f2:68:2d:38:28:12:90:ca:fd:
         f7:77:f2:07:23:88:38:34:ca:aa:65:dc:56:07:06:3c:34:b6:
         c8:d6:e5:46:bc:95:47:f8:6d:29:67:c8:3f:00:1c:68:23:43:
         76:4e:43:99:29:35:f8:24:c0:fb:fc:93:19:7d:e4:ef:1e:c5:
         7a:5f:a7:2e:9d:b8:a7:d7:dd:7d:51:a9:fc:00:4b:5e:f4:d0:
         83:ae:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:39:18 2025 by rpki-client