Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa
File:                     3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (raw, json)
Hash identifier:          bOyeQBsCUPkjEJuoFJfo/gsC9zyThIVXOOR+IQS9abo=
Subject key identifier:   93:C6:F5:FD:38:53:6F:12:F9:88:34:85:93:72:74:23:75:EB:4B:51
Certificate issuer:       /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
Certificate serial:       0EEB2454C034A87969C17ED03D502354FE0A4610
Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa
Signing time:             Sat 31 Aug 2024 02:44:50 +0000
ROA not before:           Sat 31 Aug 2024 02:39:50 +0000
ROA not after:            Sat 30 Aug 2025 02:44:50 +0000
asID:                     152838
IP address blocks:        160.25.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl
                          rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:eb:24:54:c0:34:a8:79:69:c1:7e:d0:3d:50:23:54:fe:0a:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D
        Validity
            Not Before: Aug 31 02:39:50 2024 GMT
            Not After : Aug 30 02:44:50 2025 GMT
        Subject: CN=93C6F5FD38536F12F98834859372742375EB4B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:64:77:11:c2:c6:bb:c4:ea:e1:6e:c6:43:
                    86:66:18:f0:51:6b:25:cd:f2:13:8a:2d:86:91:98:
                    ad:2b:69:44:36:54:90:3f:81:c0:a7:be:10:23:89:
                    28:1b:41:99:19:a5:5c:d4:d2:3d:08:ea:91:51:ed:
                    17:ef:cc:cf:62:2b:6e:b3:09:91:45:9a:9e:66:e8:
                    a6:ce:8c:03:46:76:df:ac:15:18:89:25:a5:d7:e4:
                    ca:80:e6:64:20:5c:a7:c0:a3:8c:f0:d1:96:6f:18:
                    74:6f:f6:53:48:0b:87:5c:f3:9b:50:67:4c:19:d6:
                    d3:6a:cf:da:ab:c9:19:6a:4a:01:32:fc:a2:b5:4f:
                    ff:37:a1:45:64:ee:67:61:4c:d8:0c:11:59:67:50:
                    a1:13:b3:2b:c0:72:0f:8c:3d:48:3e:e5:c6:b1:18:
                    6d:bc:79:5f:79:a1:46:9c:89:ee:a4:2e:9f:e2:b1:
                    6e:5b:e7:1c:4d:4d:bf:b9:b3:8d:f5:24:cd:d2:63:
                    8e:52:5b:b1:f2:b5:a4:f5:b6:bf:8e:5b:21:3c:8b:
                    97:2b:bf:68:35:0e:d9:55:c0:a4:b8:2f:6a:72:fe:
                    fd:63:4c:37:ed:29:d3:c4:0c:d6:54:a0:f0:de:54:
                    10:09:a2:46:85:51:69:3c:14:95:3d:da:f5:5e:ad:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:F5:FD:38:53:6F:12:F9:88:34:85:93:72:74:23:75:EB:4B:51
            X509v3 Authority Key Identifier:
                keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:24:89:b4:69:04:53:a3:70:d7:52:58:b9:df:cc:89:c9:
         ef:fa:9b:ef:4c:43:30:97:fc:59:b7:4c:3a:dd:63:fa:fa:01:
         35:f4:39:87:26:a1:af:99:c6:a0:67:0a:eb:2f:2b:73:b6:43:
         01:56:38:4c:09:e7:b2:c8:07:81:c1:c4:0c:c1:a0:b9:7a:60:
         2f:a4:80:2b:76:ab:19:fd:dd:4f:51:e8:dc:e6:86:6c:5f:b7:
         75:e0:29:8e:33:a4:fe:80:47:e3:e1:1e:f5:8d:4f:7f:56:20:
         62:e6:56:05:bb:0a:49:02:3c:d6:92:22:c3:03:c0:53:a5:13:
         a1:40:a0:e6:fc:1d:13:15:23:fa:12:83:3a:3b:a1:61:ce:d6:
         a8:75:fc:cc:05:9a:10:71:3d:8b:54:8a:d3:93:37:0b:7c:5d:
         70:51:f2:cb:bd:d5:f9:30:69:a3:55:21:ec:37:58:31:c0:1a:
         2f:ce:8e:87:65:58:9f:32:93:80:70:38:7f:44:45:dd:93:6d:
         3e:d4:25:9a:fc:01:d9:3b:7e:99:d3:53:8f:eb:dc:46:df:16:
         fc:41:32:f6:b1:1b:0b:27:9c:b3:d8:c1:b5:1f:75:79:0f:7d:
         d6:73:73:6f:c3:d9:9e:2f:91:89:82:67:6e:c7:5c:a9:09:d4:
         30:e0:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org