Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa
File:                     3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (raw, json)
Hash identifier:          TQYvew4a918dkXbQmghAnG3D/BGB9JTVAzjo9Xx8OFQ=
Subject key identifier:   89:03:27:CA:25:CE:B4:69:AB:9C:0E:07:A4:C3:93:F4:E6:0E:B1:A1
Certificate issuer:       /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567
Certificate serial:       2759BD22CAD4B78BE565EB5AD3389C66AED1BC5D
Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa
Signing time:             Fri 27 Dec 2024 03:55:05 +0000
ROA not before:           Fri 27 Dec 2024 03:50:05 +0000
ROA not after:            Fri 26 Dec 2025 03:55:05 +0000
asID:                     153124
IP address blocks:        160.187.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl
                          rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:59:bd:22:ca:d4:b7:8b:e5:65:eb:5a:d3:38:9c:66:ae:d1:bc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567
        Validity
            Not Before: Dec 27 03:50:05 2024 GMT
            Not After : Dec 26 03:55:05 2025 GMT
        Subject: CN=890327CA25CEB469AB9C0E07A4C393F4E60EB1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:f9:7d:80:2b:97:4e:2c:29:c4:9e:d9:de:
                    0b:4c:f6:4c:53:e0:4d:02:86:2f:64:3b:ad:fc:27:
                    3a:0f:50:49:3b:2f:38:08:85:57:f2:7a:95:cc:5d:
                    0e:a3:16:61:14:ac:d7:44:7e:f8:0f:5c:bd:8c:6f:
                    c7:d5:03:93:87:f3:42:5c:00:fb:da:75:40:c7:11:
                    ed:59:86:a7:79:b2:af:cd:65:2e:fa:fe:0e:bf:dc:
                    01:6e:a8:82:0d:dc:e0:16:bd:b7:fd:f4:15:1c:d0:
                    64:a8:38:65:72:2b:87:08:9d:e3:6e:98:6c:3f:7e:
                    88:41:38:d3:d4:4e:fc:e8:1b:27:6f:c3:fe:71:fa:
                    b9:70:f4:f7:40:d3:46:04:ac:9b:4e:18:b4:e3:e8:
                    de:e0:4d:bc:ac:8d:86:79:36:60:0e:07:5a:58:ce:
                    e9:65:44:00:dc:91:1b:2b:78:76:cf:2a:45:68:f5:
                    c9:14:9c:87:40:07:8d:fb:fe:f6:9b:9f:23:82:2c:
                    59:4d:cf:31:5c:db:52:7a:d1:a4:a6:4b:19:57:5b:
                    19:f0:3d:8f:22:fd:cf:b1:45:34:b2:48:8c:9d:95:
                    09:a9:8c:c1:21:3f:78:03:51:95:df:d4:9a:ad:f8:
                    c8:4d:bd:f3:c9:90:eb:ab:1a:81:86:80:d1:1f:30:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:03:27:CA:25:CE:B4:69:AB:9C:0E:07:A4:C3:93:F4:E6:0E:B1:A1
            X509v3 Authority Key Identifier:
                keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c5:a7:dc:e3:24:db:ed:ac:17:34:12:cb:b4:44:58:0f:6f:
         eb:ec:9b:b6:cf:bb:6a:e5:1e:a3:3d:8c:33:c4:8c:96:f6:75:
         03:94:8e:3b:5d:bc:e3:26:21:61:3c:57:a7:2b:8a:47:99:94:
         b0:b3:34:24:46:71:1a:51:77:5e:1f:94:8a:a7:75:07:c5:5a:
         54:ef:9f:fe:ab:e4:67:5b:45:20:d8:c4:01:ec:7f:35:66:a6:
         e8:4f:64:7f:a7:d9:c2:91:ff:8e:61:0f:e5:d7:dc:4a:6e:57:
         3f:02:38:02:7f:53:f8:4d:c7:86:8a:bf:a9:55:be:49:33:aa:
         b5:54:c3:89:50:5e:88:61:20:07:95:87:88:07:d3:6e:bc:40:
         5a:ad:05:8f:c9:8e:aa:3f:54:d9:6a:7a:ac:77:99:fd:59:1a:
         33:30:a8:e4:be:54:45:75:6f:44:33:d0:1f:41:be:7c:3c:6c:
         fa:8b:96:05:9e:cd:9f:79:79:b0:44:2f:d0:47:69:c1:8c:b2:
         21:8e:80:b3:1f:0a:c7:b5:a6:4e:6c:60:e5:30:4a:21:e3:2e:
         0c:a5:ad:dd:ff:d5:e7:8d:08:f6:e3:80:e6:d6:a7:38:91:92:
         b4:04:ab:f1:ee:c6:09:77:a3:d0:df:01:8d:e4:73:e9:11:d0:
         e5:ff:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net