Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
File:                     3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (raw, json)
Hash identifier:          sWlaCPAtmIMRr2DxpJ25xh0gx4/gEACaEf8N+AdSR9E=
Subject key identifier:   55:04:FA:0E:55:8F:E7:9C:0D:68:79:85:3D:86:E4:F1:16:B4:6D:1E
Certificate issuer:       /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Certificate serial:       7CED88F6709726ACA5C67DE0FED00E0368F324D0
Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
Signing time:             Sat 31 Aug 2024 02:48:05 +0000
ROA not before:           Sat 31 Aug 2024 02:43:05 +0000
ROA not after:            Sat 30 Aug 2025 02:48:05 +0000
asID:                     152838
IP address blocks:        160.25.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl
                          rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 15:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ed:88:f6:70:97:26:ac:a5:c6:7d:e0:fe:d0:0e:03:68:f3:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
        Validity
            Not Before: Aug 31 02:43:05 2024 GMT
            Not After : Aug 30 02:48:05 2025 GMT
        Subject: CN=5504FA0E558FE79C0D6879853D86E4F116B46D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:3f:f0:82:3a:90:52:48:d4:cf:ab:48:45:
                    a7:59:49:c5:0c:f1:34:f1:53:3a:8e:30:5d:9a:d4:
                    37:d1:d6:2b:83:00:3b:fc:74:c8:88:a6:da:a5:46:
                    05:81:f1:e6:d7:04:dd:8d:62:b6:d6:3a:b4:05:9e:
                    f4:da:75:c5:31:be:09:8b:a6:7e:ca:f4:49:0b:71:
                    84:4a:f1:00:67:61:29:1b:c2:e7:87:a6:58:b5:80:
                    36:3a:2a:f1:57:98:d7:f3:61:bb:79:30:e6:d4:b2:
                    4e:dd:03:98:f1:87:20:68:fd:9e:9b:ed:6d:e1:a5:
                    aa:9d:02:38:02:17:62:c3:26:16:cd:2f:32:63:58:
                    fa:97:c5:fd:86:17:86:d9:a6:f3:64:65:bd:e4:f4:
                    10:63:da:c2:61:26:21:37:de:d7:5b:17:86:f8:4d:
                    4a:a0:af:f4:92:02:24:1e:e2:30:82:1e:ef:ff:dc:
                    a1:f4:7b:4c:4b:27:0f:7a:12:20:2d:ff:58:23:1e:
                    36:c9:f5:fc:0d:27:62:fc:db:17:a3:74:90:af:8f:
                    7b:27:d6:76:34:93:e5:a3:ff:1f:00:9a:06:46:c8:
                    a0:7e:4f:b4:cb:08:77:45:41:38:1e:42:f0:5f:4d:
                    70:13:9e:7c:ab:66:93:65:9d:2a:ad:7d:59:a1:98:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:FA:0E:55:8F:E7:9C:0D:68:79:85:3D:86:E4:F1:16:B4:6D:1E
            X509v3 Authority Key Identifier:
                keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:69:a1:af:4b:01:56:80:79:4a:5b:be:aa:9c:24:c4:61:bc:
         37:13:3e:8a:b3:16:0a:da:9a:8e:29:9c:36:ef:b9:d3:d9:2d:
         c4:c4:a8:be:ba:f9:83:d6:0c:b0:1d:4e:3e:a0:04:d8:d8:10:
         52:63:86:fc:40:9e:4a:f2:bc:c2:91:cb:e4:6a:39:e4:27:02:
         d5:87:00:e2:87:6f:63:b7:aa:8e:53:4e:82:7f:67:13:ff:dc:
         07:e6:f1:df:27:aa:0c:12:4a:93:43:03:f0:38:5f:4d:ef:f5:
         81:30:e8:b9:a5:f6:46:14:b2:43:f5:79:5e:14:da:be:60:4b:
         ec:f5:16:86:68:92:54:b1:90:0a:cf:1e:24:91:7d:9b:c6:0a:
         30:44:57:4d:43:9c:f3:6a:79:2a:48:37:b9:a1:67:7e:ee:40:
         62:46:da:60:4b:89:ce:9f:5d:65:16:73:fc:d3:94:99:7c:38:
         1f:a0:0a:64:4a:8c:08:aa:52:58:fa:c4:51:ca:61:8f:0c:da:
         19:a6:dd:35:18:00:17:11:6f:e1:3d:19:7e:78:ec:52:d3:ff:
         cd:7a:c4:93:d5:58:af:02:fb:b1:6f:4a:36:99:03:25:d1:40:
         88:71:f1:c7:9c:77:b2:c5:a5:c0:df:1b:23:e1:a5:de:42:ec:
         29:39:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:34 2024 by rpki-client on console-fra.rpki-client.org