Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
File:                     3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier:          xMz0teE1p1kEY5ZQ5XTsbcBvNPdZWzBVIbvjKuWV4qU=
Subject key identifier:   3C:A7:44:CD:39:0D:17:54:BF:40:F6:8A:1B:69:09:5D:F4:EF:A1:8E
Certificate issuer:       /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial:       7DA64FF91CE829E150D3415C5EAB297543624647
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
Signing time:             Wed 03 Jul 2024 11:27:32 +0000
ROA not before:           Wed 03 Jul 2024 11:22:32 +0000
ROA not after:            Wed 02 Jul 2025 11:27:32 +0000
asID:                     152800
IP address blocks:        160.22.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:4f:f9:1c:e8:29:e1:50:d3:41:5c:5e:ab:29:75:43:62:46:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Validity
            Not Before: Jul  3 11:22:32 2024 GMT
            Not After : Jul  2 11:27:32 2025 GMT
        Subject: CN=3CA744CD390D1754BF40F68A1B69095DF4EFA18E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:e5:7c:29:23:c1:33:5e:d9:c3:5e:1a:82:
                    e4:3d:b3:a9:de:c2:7f:b0:f3:8c:25:11:51:ae:c3:
                    8e:9d:cb:0d:6d:d4:89:16:3a:fd:51:e6:1d:ef:1f:
                    0b:18:a6:17:30:86:61:88:36:34:76:4f:d6:d0:0f:
                    82:23:63:fa:d9:5f:fc:e7:b5:9f:ce:05:8b:0b:9f:
                    b2:65:48:c5:69:65:b5:6a:a9:cb:6c:98:f6:e7:83:
                    fc:f9:4e:b3:7a:71:1e:08:cf:d6:ea:10:21:fa:1e:
                    41:c3:8c:b5:89:a1:d7:b8:a9:17:1b:c2:f2:a9:1e:
                    11:f0:4f:9c:5d:60:41:44:5b:53:e1:22:ee:b5:01:
                    07:d4:4d:b9:8b:f2:f6:28:e3:c7:b9:33:c0:fa:3a:
                    f5:4e:6c:e8:09:1d:2a:f8:f9:6f:13:2c:a8:ca:70:
                    9b:27:4c:2b:aa:ec:9c:41:2c:32:60:b9:19:7b:31:
                    0c:30:eb:4c:20:1a:f8:ae:f6:77:7d:63:36:d8:66:
                    6f:a2:10:17:e6:88:b1:57:f6:48:a6:ec:24:c0:de:
                    51:f0:fb:66:9f:e9:ba:71:d7:1f:28:94:0d:b2:69:
                    32:12:d8:b9:1e:de:92:c7:cc:d8:c6:df:52:38:07:
                    6c:15:35:6b:fb:a1:ad:60:e3:67:2e:41:02:0c:4f:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:44:CD:39:0D:17:54:BF:40:F6:8A:1B:69:09:5D:F4:EF:A1:8E
            X509v3 Authority Key Identifier:
                keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:24:29:45:2e:26:2a:62:7a:9a:7c:0c:90:6e:28:89:e4:70:
         3c:6e:29:51:d5:bb:d4:77:bc:2a:2c:52:c2:04:b2:f6:2f:52:
         9e:c6:f4:46:e8:46:c7:9f:88:ed:24:09:f0:44:b5:1d:e3:8e:
         1c:e9:4c:7f:aa:0a:58:22:06:d5:c8:7a:6f:db:f2:22:b2:63:
         ff:22:23:45:be:77:0d:32:77:d7:b8:63:46:86:f5:01:26:60:
         80:ac:f6:b5:de:f5:18:a1:89:ee:7f:b3:6a:b9:87:ac:9f:95:
         df:fc:d8:12:c9:78:ba:cd:1e:db:a2:a2:8b:bc:0b:16:6f:fd:
         4f:29:75:80:5a:aa:24:e2:c2:41:db:f9:42:0a:9b:43:6f:3e:
         cd:24:41:b0:7d:88:b9:e8:1a:ac:e5:4a:b1:d6:49:54:8a:59:
         54:7f:ed:f8:7a:05:2b:bd:01:7a:cc:a0:dc:a3:98:0b:81:a8:
         cd:56:e7:c9:97:85:62:94:36:ff:0f:5e:47:eb:54:31:fc:ce:
         b7:ba:1c:4b:9d:55:92:93:07:ed:97:c5:d8:bd:53:a1:44:2c:
         58:00:24:1d:b6:c7:96:f9:33:82:aa:3c:d1:10:ab:5f:29:66:
         6b:57:13:e4:78:b4:b3:c2:1d:e4:50:71:d4:3a:4e:10:bf:7a:
         03:f5:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org