Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
File:                     3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (raw, json)
Hash identifier:          QQiD9dIxt2MrevucjFprRlFAVLt5QOsbf9xPhx+3tNs=
Subject key identifier:   5E:BE:23:F7:2B:61:BC:FA:B3:95:2E:E6:20:C0:98:2A:F8:90:44:75
Certificate issuer:       /CN=92C5086020B686EBA68B31410C984CDC9BB75029
Certificate serial:       4C40A4D40174FBB18B1EA42BDA658639368057CD
Authority key identifier: 92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
Signing time:             Thu 30 May 2024 07:23:10 +0000
ROA not before:           Thu 30 May 2024 07:18:10 +0000
ROA not after:            Thu 29 May 2025 07:23:10 +0000
asID:                     152779
IP address blocks:        160.19.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.crl
                          rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 12:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:a4:d4:01:74:fb:b1:8b:1e:a4:2b:da:65:86:39:36:80:57:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C5086020B686EBA68B31410C984CDC9BB75029
        Validity
            Not Before: May 30 07:18:10 2024 GMT
            Not After : May 29 07:23:10 2025 GMT
        Subject: CN=5EBE23F72B61BCFAB3952EE620C0982AF8904475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:ac:0a:e6:2a:f5:3e:23:10:3a:19:32:8b:
                    c2:45:d7:e8:bd:ff:21:7b:d0:31:bf:48:e6:c7:2b:
                    e9:bc:6b:0a:73:ee:2c:6e:2f:38:eb:c0:d8:dd:82:
                    73:07:1f:2a:3c:ab:52:eb:e2:9f:74:ed:c4:c2:06:
                    19:84:9f:b6:12:06:1e:90:12:c6:b3:70:3b:93:f8:
                    1c:83:ab:2d:73:7f:46:e0:3d:71:8c:df:56:66:83:
                    59:48:dd:d3:7b:9b:a2:da:6f:e6:a3:24:e2:da:93:
                    d0:c9:68:33:e5:73:2a:b2:1a:7a:fa:fd:c8:91:e8:
                    73:82:ba:6e:0c:c5:f8:16:06:d4:54:26:bc:24:0f:
                    ab:90:35:80:0e:f4:d2:c7:57:c8:82:6e:39:36:65:
                    0d:c2:ca:51:00:6c:ac:66:a4:45:b3:91:80:d0:73:
                    f4:7f:d7:93:69:d2:f7:27:ab:b0:04:52:6d:a6:7c:
                    8a:7f:05:2c:1a:34:be:02:bf:eb:75:ce:92:25:6e:
                    6b:96:c3:38:50:ac:36:30:58:df:7e:cd:a4:2e:16:
                    a6:a9:5d:04:c2:89:bf:0a:da:6e:25:75:fd:7d:38:
                    c6:62:97:bf:50:a9:a0:c9:9f:7b:a9:11:c2:76:48:
                    19:07:2b:ab:4a:64:53:e4:57:6d:38:3c:48:7e:79:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BE:23:F7:2B:61:BC:FA:B3:95:2E:E6:20:C0:98:2A:F8:90:44:75
            X509v3 Authority Key Identifier:
                keyid:92:C5:08:60:20:B6:86:EB:A6:8B:31:41:0C:98:4C:DC:9B:B7:50:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/92C5086020B686EBA68B31410C984CDC9BB75029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92C5086020B686EBA68B31410C984CDC9BB75029.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:21:a4:0c:65:b6:ee:f6:76:8e:f1:01:f4:2b:32:15:cd:59:
         ef:11:ae:4f:86:f7:45:18:20:b9:41:8b:93:46:75:22:89:ab:
         c9:09:55:05:66:b6:19:ed:56:17:b8:de:b3:84:27:96:d4:ff:
         d7:56:fe:1b:86:b8:e0:33:16:0f:76:e2:1a:42:8a:bb:21:3a:
         a4:1e:c9:94:9f:55:75:65:9e:0c:9f:62:83:5f:e7:1f:1d:c1:
         8e:bd:10:cb:fc:a6:e5:a4:a0:e1:be:79:dc:59:fc:88:41:f9:
         bd:0a:1f:eb:de:1e:33:df:ee:34:f0:52:c6:df:ec:55:c7:17:
         15:e1:52:ed:96:bf:7e:6f:0d:66:19:79:60:fd:f1:bd:2d:63:
         26:00:d1:60:59:46:ea:e0:9b:52:97:7c:e4:c6:1f:1a:c3:86:
         2e:b2:6f:1b:3e:55:7f:3b:d8:24:37:3f:95:a0:0d:e9:36:11:
         8b:a6:68:ba:7e:e9:69:29:c9:a7:38:9f:e1:a1:21:34:4a:da:
         ab:63:8d:2f:8e:e8:c0:2f:3d:ae:c8:9a:b0:d7:cc:c8:67:c5:
         75:b5:4c:ba:b5:0d:97:be:cf:ab:74:30:55:4c:48:b2:a6:62:
         9f:44:b4:b6:43:e8:b3:67:47:70:28:a0:fa:6a:01:41:70:c1:
         34:3b:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 15:17:40 2024 by rpki-client on console-ams.rpki-client.org