Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
File:                     3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (raw, json)
Hash identifier:          X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY=
Subject key identifier:   98:13:5B:F6:F5:22:F7:6E:A5:A4:10:95:12:0B:EA:17:8D:F5:B4:09
Certificate issuer:       /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial:       63BAC940C93BC1D5F542D8F4C6D3639E1AD4FB25
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
Signing time:             Thu 12 Dec 2024 04:06:10 +0000
ROA not before:           Thu 12 Dec 2024 04:01:10 +0000
ROA not after:            Thu 11 Dec 2025 04:06:10 +0000
asID:                     153157
IP address blocks:        160.191.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
                          rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ba:c9:40:c9:3b:c1:d5:f5:42:d8:f4:c6:d3:63:9e:1a:d4:fb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Validity
            Not Before: Dec 12 04:01:10 2024 GMT
            Not After : Dec 11 04:06:10 2025 GMT
        Subject: CN=98135BF6F522F76EA5A41095120BEA178DF5B409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:28:85:fa:51:3a:e7:3b:b0:13:29:f9:b9:
                    23:61:5a:32:1d:7a:06:5b:9f:bd:e2:8d:15:d0:f8:
                    17:90:87:fd:4b:20:28:21:88:2d:b3:2a:b8:c2:b7:
                    85:9b:97:0b:53:77:c6:7b:fc:b5:6b:b5:80:e7:ec:
                    76:fc:72:40:72:72:cb:4b:7e:1a:1f:31:0b:0f:4a:
                    95:b0:08:02:eb:e7:cd:09:38:81:af:6a:8e:7b:77:
                    37:07:97:8f:39:b6:a3:90:5f:42:32:e7:57:a4:57:
                    3b:e6:ad:55:2b:d9:dd:94:8f:e2:36:ec:ad:ba:96:
                    48:13:40:48:07:f3:7f:f7:c3:f3:5b:88:d5:f6:af:
                    ec:d3:b4:9c:c3:30:6c:dd:2d:11:92:7e:34:52:1d:
                    fd:60:6c:1f:1e:54:48:41:c2:53:53:e4:e4:1e:66:
                    e9:a0:00:58:70:49:8e:59:be:a9:6a:7c:46:14:92:
                    eb:0f:5e:f0:77:b7:cb:6c:d6:cb:dd:f9:50:9e:03:
                    a4:54:6a:2f:36:c5:8f:41:67:4d:02:8e:8b:89:be:
                    46:82:40:8e:63:6d:d0:73:e2:f9:6f:fb:fd:b3:1c:
                    1f:fa:17:6e:64:94:54:ac:6f:e4:a1:12:39:32:54:
                    b4:50:06:b3:13:8a:da:31:9b:c5:18:6b:45:7f:f8:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:13:5B:F6:F5:22:F7:6E:A5:A4:10:95:12:0B:EA:17:8D:F5:B4:09
            X509v3 Authority Key Identifier:
                keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:fa:16:b1:38:26:62:f0:af:6b:7b:96:1c:e1:d9:fa:6a:07:
         47:13:df:98:15:ad:24:20:fd:73:b0:63:b1:11:60:85:dc:5e:
         83:ec:a4:7a:24:6c:07:bb:12:89:b6:5c:23:db:bb:87:f6:95:
         61:f8:b6:66:26:b5:a2:1a:58:58:c3:da:be:13:d7:ce:ed:9c:
         c5:9e:10:8c:e7:d8:a7:e7:7e:d6:c8:5e:1e:05:be:0b:4c:04:
         8b:4f:40:0f:e8:3c:3a:4a:69:b4:46:48:72:39:cd:50:d5:48:
         5b:0c:81:83:ec:ce:fa:bf:85:1a:2f:13:eb:5a:66:9b:a7:af:
         20:93:d4:c3:45:5c:b0:69:67:3f:6f:c5:cb:32:b8:bb:76:b2:
         92:11:eb:9d:12:b9:c5:da:fd:8d:7b:0f:7b:21:ce:1b:e9:a6:
         f3:4c:e7:9c:9b:a0:7f:05:ee:46:f7:f8:d5:6f:a3:08:5a:b7:
         35:89:b9:b8:88:e1:2b:42:48:2d:1f:47:29:8c:85:16:41:04:
         41:14:89:77:fa:2c:df:99:4b:7b:cb:25:50:2c:32:1f:d1:38:
         be:99:d9:24:33:b7:ec:3e:6f:e1:cf:6e:b9:e9:7b:d1:75:40:
         0c:34:e3:83:46:ec:99:91:48:3a:c9:89:1c:44:4b:8b:e8:2f:
         c3:30:ba:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUY7rJQMk7wdX1Qtj0xtNjnhrU+yUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0
REY0MTQxNDAeFw0yNDEyMTIwNDAxMTBaFw0yNTEyMTEwNDA2MTBaMDMxMTAvBgNV
BAMTKDk4MTM1QkY2RjUyMkY3NkVBNUE0MTA5NTEyMEJFQTE3OERGNUI0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABCiF+lE65zuwEyn5uSNhWjId
egZbn73ijRXQ+BeQh/1LICghiC2zKrjCt4WblwtTd8Z7/LVrtYDn7Hb8ckBycstL
fhofMQsPSpWwCALr580JOIGvao57dzcHl485tqOQX0Iy51ekVzvmrVUr2d2Uj+I2
7K26lkgTQEgH83/3w/NbiNX2r+zTtJzDMGzdLRGSfjRSHf1gbB8eVEhBwlNT5OQe
ZumgAFhwSY5ZvqlqfEYUkusPXvB3t8ts1svd+VCeA6RUai82xY9BZ00CjouJvkaC
QI5jbdBz4vlv+/2zHB/6F25klFSsb+ShEjkyVLRQBrMTitoxm8UYa0V/+GhNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmBNb9vUi926lpBCVEgvqF431tAkwHwYDVR0j
BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4
MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0
MTQxNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4LTg5NzEtNGU1MS04
YjUxLTgwM2I0OWIzMmE0Zi8wLzMxMzYzMDJlMzEzOTMxMmUzMTM5MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzMzMTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgv8YwDQYJ
KoZIhvcNAQELBQADggEBALj6FrE4JmLwr2t7lhzh2fpqB0cT35gVrSQg/XOwY7ER
YIXcXoPspHokbAe7Eom2XCPbu4f2lWH4tmYmtaIaWFjD2r4T187tnMWeEIzn2Kfn
ftbIXh4FvgtMBItPQA/oPDpKabRGSHI5zVDVSFsMgYPszvq/hRovE+taZpunryCT
1MNFXLBpZz9vxcsyuLt2spIR650SucXa/Y17D3shzhvppvNM55yboH8F7kb3+NVv
owhatzWJubiI4StCSC0fRymMhRZBBEEUiXf6LN+ZS3vLJVAsMh/ROL6Z2SQzt+w+
b+HPbrnpe9F1QAw044NG7JmRSDrJiRxES4voL8MwukE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net