Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa
File:                     3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier:          Y/doWNbWUjrAfR7a7RLOOLbQ7NMKmQyXcM9/LNTkG10=
Subject key identifier:   AC:05:A4:AC:5B:E5:8E:34:69:07:BF:07:6C:1F:E4:75:1A:1E:65:09
Certificate issuer:       /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial:       682B801188DAE436B3CFDAB014B1FA94BA99CC24
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa
Signing time:             Wed 03 Jul 2024 11:27:21 +0000
ROA not before:           Wed 03 Jul 2024 11:22:21 +0000
ROA not after:            Wed 02 Jul 2025 11:27:21 +0000
asID:                     152800
IP address blocks:        160.22.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2b:80:11:88:da:e4:36:b3:cf:da:b0:14:b1:fa:94:ba:99:cc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Validity
            Not Before: Jul  3 11:22:21 2024 GMT
            Not After : Jul  2 11:27:21 2025 GMT
        Subject: CN=AC05A4AC5BE58E346907BF076C1FE4751A1E6509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:90:d3:84:50:d9:79:21:31:c7:91:f1:f7:82:
                    3a:d2:21:fe:f4:a8:2f:da:70:9d:58:2e:89:78:aa:
                    4b:44:18:6e:f9:47:d7:c4:67:5d:fa:73:ab:76:9d:
                    d2:6e:48:cd:2e:76:91:0b:39:56:e4:c7:2f:b1:9a:
                    70:ba:67:40:9f:9e:eb:73:86:78:9d:45:43:a0:1f:
                    43:41:51:c6:c0:5d:f6:a2:02:45:98:a0:7f:b5:8e:
                    3e:f5:fc:e5:60:f0:78:e4:d3:19:0c:02:69:d1:1d:
                    73:d1:31:aa:52:c4:b5:14:24:77:43:fc:b3:e5:03:
                    15:db:27:1a:07:e1:b9:cc:d9:ad:d8:50:0f:bd:0d:
                    53:58:b1:e1:0f:6c:04:e8:56:5b:db:eb:a4:63:d6:
                    93:e2:95:34:5d:ae:d2:26:67:bf:4d:e5:8d:ec:d0:
                    19:7e:8f:44:7f:5c:a5:eb:dc:45:5c:9a:e1:2c:e0:
                    ac:31:b8:a5:0d:64:56:2f:d9:10:3b:c9:17:58:21:
                    9b:33:48:78:05:19:3e:fc:14:9d:1a:e3:37:16:fe:
                    80:41:d3:47:8c:2b:83:41:99:e1:97:59:d1:52:97:
                    7b:86:5a:b5:85:ea:a7:71:c0:7b:6e:b5:a0:f8:3f:
                    4e:39:8a:3b:79:18:bb:f6:9a:78:94:d3:96:b8:76:
                    2e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:A4:AC:5B:E5:8E:34:69:07:BF:07:6C:1F:E4:75:1A:1E:65:09
            X509v3 Authority Key Identifier:
                keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:98:c9:c8:0a:fa:b2:bf:92:48:0d:50:f7:45:15:98:49:19:
         ff:9f:2e:e9:7d:8f:c0:31:6a:01:31:70:92:dd:f5:da:5d:ea:
         a8:21:a3:66:e0:ed:a9:45:57:3b:d3:27:c9:b3:fa:7e:6a:b4:
         20:e6:81:39:ed:3f:2c:7f:c1:2e:b3:9d:c7:0e:83:b6:f3:46:
         77:1d:24:b6:e9:d4:d8:84:09:43:44:53:5f:b2:3c:1f:0b:0a:
         83:ac:50:85:8f:77:b5:c9:b5:6d:df:ca:91:22:be:62:b1:ca:
         5b:23:17:04:37:42:44:7b:87:ab:40:c5:b5:f9:94:d2:c2:92:
         83:df:6b:cd:bd:d2:3e:ef:91:c1:ff:75:dd:34:1b:af:88:ab:
         58:94:f7:5b:98:27:f7:a0:0e:dc:5a:3f:1f:e3:5b:66:37:29:
         79:c5:17:57:d5:33:07:7b:e6:b6:96:4f:93:90:eb:6a:35:1c:
         72:79:cb:38:ec:9c:de:ac:43:57:51:81:7f:af:1e:b7:2d:78:
         42:c3:df:0e:ce:c0:b9:1f:f3:8c:6b:74:d4:62:6c:d7:38:bc:
         29:0f:ca:11:48:52:ad:0f:a3:5f:e0:d8:87:64:ad:58:60:d3:
         24:4c:8a:d9:db:74:7e:27:16:55:6d:06:dc:9a:66:80:96:4d:
         f1:2a:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org