Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa
File:                     3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (raw, json)
Hash identifier:          YHqMNHvnpSYCZaKnTUbpDH/h9MTpHFd53t2f2AY33pA=
Subject key identifier:   AD:C3:68:CD:9D:06:5E:22:60:50:BE:E5:B7:B7:BF:78:16:85:2F:9E
Certificate issuer:       /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F
Certificate serial:       5AE27E60F0774CF7AF56D18C4B63E0E622B09ED0
Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa
Signing time:             Mon 08 Jul 2024 06:34:07 +0000
ROA not before:           Mon 08 Jul 2024 06:29:07 +0000
ROA not after:            Mon 07 Jul 2025 06:34:07 +0000
asID:                     152789
IP address blocks:        160.19.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl
                          rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 23:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e2:7e:60:f0:77:4c:f7:af:56:d1:8c:4b:63:e0:e6:22:b0:9e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F
        Validity
            Not Before: Jul  8 06:29:07 2024 GMT
            Not After : Jul  7 06:34:07 2025 GMT
        Subject: CN=ADC368CD9D065E226050BEE5B7B7BF7816852F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:2a:39:6f:1d:65:c1:82:76:35:fe:af:22:
                    45:45:dc:d4:aa:29:da:43:b1:2a:91:33:06:10:97:
                    65:e9:d0:a3:41:b2:82:49:23:2c:b6:72:a4:1a:34:
                    bf:8e:45:60:21:bb:5a:c5:0d:39:31:11:a8:4e:60:
                    b1:e1:13:f3:93:86:53:7b:63:f2:f2:59:72:29:a9:
                    88:d4:9b:ea:e0:ae:53:14:0e:69:16:ee:92:72:bf:
                    63:f2:f7:02:73:18:fc:99:ee:f0:2b:e5:a2:76:89:
                    4c:7a:23:6c:17:89:7a:39:c8:fe:03:0c:c5:6c:ed:
                    38:8c:ae:22:41:36:8f:8d:d8:f1:65:4b:18:ca:b4:
                    9e:d8:4c:44:b5:86:a3:45:fe:f5:65:a5:dd:58:6f:
                    bc:e5:07:b2:c0:a5:06:dd:2a:72:ed:8a:dc:37:38:
                    33:97:72:e2:b1:62:f6:2b:9e:00:b4:30:9d:b6:62:
                    0a:41:a3:c4:1d:f4:ec:45:3b:d5:24:8f:3a:f0:4d:
                    68:7a:be:4b:6b:7e:e2:e8:d8:bd:31:ba:9d:c3:e3:
                    16:32:5a:e8:a5:aa:00:50:71:33:d9:57:e7:16:cd:
                    67:ba:5c:3c:10:57:c9:69:1c:fb:11:b8:5f:70:85:
                    d8:fb:c9:ef:a0:cd:96:b6:c3:99:bf:d1:e5:3e:82:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:68:CD:9D:06:5E:22:60:50:BE:E5:B7:B7:BF:78:16:85:2F:9E
            X509v3 Authority Key Identifier:
                keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:ba:d2:fe:c5:1e:bb:92:0e:4b:c8:2a:80:07:70:a8:46:
         16:97:80:47:1a:f9:55:6c:b9:a2:dd:3d:46:f1:f3:a8:7b:18:
         eb:86:f0:f5:39:67:6e:fa:46:fd:52:ef:01:8f:74:8c:6e:38:
         c5:38:b3:32:73:eb:35:5a:33:62:15:e2:28:6b:76:38:5c:78:
         46:4b:19:e6:02:7c:ef:08:e0:16:95:36:3b:ec:7a:da:a6:5d:
         6d:2b:88:81:2c:b0:2f:dc:d8:ae:62:9c:44:dc:16:9d:88:e2:
         93:a6:05:3d:37:96:a3:ba:8e:7a:cd:b3:0d:f6:8e:1d:60:f8:
         ff:22:a1:54:f5:3a:90:be:9a:05:67:fb:37:d3:4b:52:d2:2c:
         09:95:67:34:c0:bf:40:9c:c9:f3:cf:46:68:da:59:6b:52:0e:
         13:d1:31:ce:46:cd:0e:6b:f8:a0:77:4d:0e:5f:d3:47:5f:33:
         25:ab:5f:af:9c:da:0e:fd:d2:0e:d3:7d:35:b2:83:54:90:32:
         c7:ed:50:a9:d7:16:92:74:39:ce:27:30:3f:2c:e4:17:94:77:
         35:e5:fc:85:4e:ab:84:3f:1e:b7:94:95:4f:6c:2b:df:e4:7c:
         7f:ec:f8:5c:16:4c:a6:b6:b0:e0:de:07:60:09:3b:35:1c:9f:
         87:7c:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:34 2024 by rpki-client on console-ams.rpki-client.org