Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa
File:                     3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (raw, json)
Hash identifier:          0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=
Subject key identifier:   B5:15:4F:60:C4:3F:3B:24:2C:1E:28:5B:2A:51:5F:07:09:9A:CC:9F
Certificate issuer:       /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55
Certificate serial:       53E340970A81EA0E9491213594B573B377950EAE
Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa
Signing time:             Tue 29 Oct 2024 03:49:01 +0000
ROA not before:           Tue 29 Oct 2024 03:44:01 +0000
ROA not after:            Tue 28 Oct 2025 03:49:01 +0000
asID:                     152787
IP address blocks:        160.19.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl
                          rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:40:97:0a:81:ea:0e:94:91:21:35:94:b5:73:b3:77:95:0e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55
        Validity
            Not Before: Oct 29 03:44:01 2024 GMT
            Not After : Oct 28 03:49:01 2025 GMT
        Subject: CN=B5154F60C43F3B242C1E285B2A515F07099ACC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:94:3a:80:4d:6a:45:d4:8a:29:15:ff:6d:
                    59:d0:de:aa:69:7e:53:e9:e9:ec:7b:44:3b:e9:05:
                    b6:7f:1f:68:54:7b:a6:02:bc:61:c4:30:3d:93:af:
                    7a:15:6d:c2:24:73:3b:7a:69:bb:e2:f2:da:66:46:
                    5f:d8:c7:91:66:71:82:42:17:72:81:aa:cf:4e:65:
                    bc:2d:1d:a6:e8:57:ab:2d:34:8e:ed:f3:98:f1:76:
                    0c:50:65:7c:83:df:92:f0:e2:ff:06:22:42:a6:55:
                    24:54:c7:12:e5:b3:3e:07:9e:34:6a:87:4d:0d:70:
                    3b:9f:3e:72:9e:64:e8:10:1b:6e:46:ad:7b:90:b0:
                    63:2a:ef:4b:74:90:4b:11:e5:76:75:39:b2:fd:1e:
                    d1:5b:be:95:cf:9a:7f:b4:e5:b1:3d:7e:19:17:62:
                    4d:8d:cc:40:85:5b:6d:10:d9:af:98:fb:d7:b6:bc:
                    ec:3e:ca:7c:e6:f6:a8:0e:07:a7:d1:ad:a6:67:8e:
                    0e:46:67:41:3a:a0:78:cb:3f:d7:28:8c:ac:9d:c5:
                    ee:93:0e:f1:16:b3:0d:57:14:26:97:e4:73:df:48:
                    26:f9:eb:c8:62:dc:43:fd:bf:7c:bc:d3:79:c2:f1:
                    f7:77:23:ed:75:0f:51:bb:50:3e:b5:30:70:9f:18:
                    13:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:4F:60:C4:3F:3B:24:2C:1E:28:5B:2A:51:5F:07:09:9A:CC:9F
            X509v3 Authority Key Identifier:
                keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:f9:95:95:83:4c:e0:e6:ea:3c:00:4b:54:cf:b0:2a:9f:
         ab:74:d2:f3:19:70:69:9d:18:1d:59:2e:c6:9d:5b:03:a1:97:
         21:80:39:87:20:57:06:f8:be:23:f8:c1:f5:4a:97:4a:e7:78:
         3e:8c:ab:87:d6:86:8c:8a:a9:47:16:2c:a4:c3:65:59:24:06:
         66:49:37:57:1a:a1:68:16:28:23:ad:e4:51:89:75:02:32:c2:
         de:f5:5f:54:d2:1b:b4:49:fc:9e:59:85:b8:e4:c3:c2:90:6e:
         cf:60:09:94:20:96:31:ed:00:f0:e0:32:47:17:3c:e1:c5:1d:
         71:41:f3:7f:80:aa:2e:ee:6e:68:36:e6:ad:a8:81:42:a4:3a:
         6d:17:48:cd:67:fb:b1:5c:77:f8:8b:6b:1f:71:38:2b:43:94:
         8f:44:49:ab:a6:bc:b5:1d:52:17:f4:e4:ef:01:ac:07:65:5d:
         d3:0d:81:72:19:ea:40:bd:9c:24:e3:81:ea:11:9b:4f:d9:4f:
         30:85:6a:0b:11:36:9b:ca:96:2d:a1:83:36:a4:8b:af:75:7a:
         02:64:52:b3:e5:b2:15:f6:48:46:b1:e4:58:c3:f2:12:90:ca:
         ac:8f:71:a4:b4:0a:95:83:e8:d6:f2:6e:8a:ff:e4:6b:57:67:
         5a:93:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org