Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
File:                     3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (raw, json)
Hash identifier:          AQ/XbNtQ/usULfQJtLCL3mFKNbrAAIw3wfJcq0cJVZw=
Subject key identifier:   12:3D:17:3E:51:46:D5:CB:3B:C4:DE:FA:CA:C7:42:72:23:23:6D:87
Certificate issuer:       /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial:       3186BBED94E48106CFB07E5B4287552DB01707D4
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
Signing time:             Wed 03 Jul 2024 11:27:39 +0000
ROA not before:           Wed 03 Jul 2024 11:22:39 +0000
ROA not after:            Wed 02 Jul 2025 11:27:39 +0000
asID:                     152800
IP address blocks:        160.22.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:86:bb:ed:94:e4:81:06:cf:b0:7e:5b:42:87:55:2d:b0:17:07:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Validity
            Not Before: Jul  3 11:22:39 2024 GMT
            Not After : Jul  2 11:27:39 2025 GMT
        Subject: CN=123D173E5146D5CB3BC4DEFACAC7427223236D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:9e:37:4e:32:05:67:a3:0c:12:44:a8:ac:
                    e9:be:59:01:51:da:82:a2:89:da:a6:35:e7:41:0c:
                    54:60:c5:f6:57:9c:41:8c:18:bd:56:6c:2b:77:49:
                    af:12:6c:0d:25:cc:5d:f5:3b:eb:70:23:49:c3:f8:
                    30:48:cd:8a:77:d3:db:7e:0e:e0:63:07:21:f3:bd:
                    14:51:b7:53:c1:61:b3:d3:46:07:88:1f:9a:73:bd:
                    ca:ab:4e:9d:f9:35:b5:14:21:a3:09:60:a9:e2:20:
                    ad:fe:17:7c:81:c6:87:f4:d5:8c:5a:a1:e9:e0:cd:
                    28:a9:4e:06:5c:de:a9:a2:7b:3b:2f:44:11:5b:29:
                    e6:d4:0b:d6:ca:51:b1:ae:21:23:84:5c:b4:24:97:
                    c6:d5:85:18:63:f4:7d:c2:aa:20:23:e6:16:da:8f:
                    05:98:1d:7a:7b:3c:c7:10:84:27:25:15:2f:e2:d3:
                    6b:ae:03:d4:60:73:d8:bc:ee:89:2d:e0:ee:d9:45:
                    6d:12:61:a2:f6:57:b1:01:f7:74:20:60:fa:6e:87:
                    fc:6b:a9:01:b2:09:91:50:ba:b0:51:f0:39:72:f1:
                    ef:f2:80:e8:06:8e:9b:ec:8f:bd:ee:64:dc:f9:69:
                    34:f7:d3:14:53:1b:01:1a:4f:03:e7:b4:2c:0a:1b:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:17:3E:51:46:D5:CB:3B:C4:DE:FA:CA:C7:42:72:23:23:6D:87
            X509v3 Authority Key Identifier:
                keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:dc:2b:21:10:9f:8a:70:23:cb:96:ef:52:3c:72:d9:f4:
         a5:80:6f:56:35:94:15:ab:f5:85:99:72:26:14:74:c0:0e:95:
         c3:e3:85:90:92:ff:b5:5d:d5:4f:b0:7d:67:e3:87:0d:db:b6:
         b3:c3:f9:8b:1b:7d:6b:cc:96:81:98:87:d8:f8:3d:91:c6:71:
         2d:94:1d:5b:8f:31:3b:01:e7:4b:60:2e:83:29:84:29:a3:ef:
         50:1c:69:66:21:f5:59:ae:36:7e:a9:92:d5:ea:e8:51:d3:2f:
         6d:f8:d6:03:59:af:66:41:5f:91:81:b0:75:2d:ab:cb:b7:55:
         9f:1e:93:a1:33:4f:11:9e:ac:17:3d:18:d3:c4:d2:d9:a7:9c:
         a3:15:98:65:89:be:f9:ef:69:ca:9a:ec:e7:11:08:38:2e:ef:
         10:90:8a:61:0b:43:9d:62:7f:41:f6:34:ff:5e:c4:c4:bd:ae:
         d8:b6:dc:dd:3c:99:d6:5e:2f:b2:5d:30:36:9b:6a:4a:67:2a:
         af:fb:15:2f:d6:62:f5:71:ce:cb:6f:17:6d:ac:9b:c9:52:7f:
         d5:64:bd:cf:d8:e2:24:11:a8:9a:dd:45:67:5f:d0:3c:03:7a:
         b6:56:d6:43:11:e7:38:72:11:2b:44:25:0d:f4:0b:8e:51:7b:
         6b:80:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org