Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa
File:                     3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (raw, json)
Hash identifier:          KwAYS/a7h4fChN6pY7P76dJV21oWKmMZY37E8i7mLHA=
Subject key identifier:   71:86:CF:4B:B2:BC:28:7E:34:61:1F:D2:22:F3:CF:3B:49:F2:67:3A
Certificate issuer:       /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial:       354136C0B9EB81431F1C57567381931345FE253B
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa
Signing time:             Thu 12 Dec 2024 04:06:40 +0000
ROA not before:           Thu 12 Dec 2024 04:01:40 +0000
ROA not after:            Thu 11 Dec 2025 04:06:40 +0000
asID:                     153157
IP address blocks:        160.191.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
                          rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:36:c0:b9:eb:81:43:1f:1c:57:56:73:81:93:13:45:fe:25:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Validity
            Not Before: Dec 12 04:01:40 2024 GMT
            Not After : Dec 11 04:06:40 2025 GMT
        Subject: CN=7186CF4BB2BC287E34611FD222F3CF3B49F2673A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:56:12:37:0b:c1:79:90:d9:9b:44:58:52:
                    53:a1:fb:32:20:47:d2:32:fe:6b:a1:47:99:14:a9:
                    87:f3:74:0f:58:f2:7d:0e:05:67:cd:e6:45:94:5c:
                    69:1c:78:b9:78:9f:b0:45:d0:4d:54:6a:16:1a:52:
                    9d:64:71:45:d1:ee:cf:6b:81:fb:f8:aa:7d:8a:d3:
                    f7:b5:d5:af:9e:be:16:89:a1:7f:a1:de:91:da:b7:
                    85:8a:55:0c:ae:c4:2d:c2:34:76:15:1d:52:ed:52:
                    8c:42:22:d4:7d:cc:94:34:4f:5a:c6:7c:e0:20:40:
                    96:1c:95:e9:fe:43:2d:66:dc:2a:2e:af:53:d1:ba:
                    24:82:d7:6c:67:e9:56:15:22:24:fa:29:e1:9e:4a:
                    e4:b8:91:41:8e:55:67:4a:0e:2a:3c:c4:23:02:9a:
                    49:a3:a5:be:21:b3:cb:15:22:64:02:0f:9a:9c:c2:
                    f2:82:b0:87:1b:58:09:6f:3c:ea:ad:2b:56:56:ca:
                    e8:8a:aa:86:c6:8a:91:dc:9d:50:5b:d2:fb:ad:d3:
                    77:9a:1c:a9:3f:9c:6e:66:e1:a6:be:d7:33:28:5b:
                    83:23:81:a5:3a:af:4c:9a:1e:e2:fa:b2:0f:cd:95:
                    ae:48:7b:c4:22:f7:3a:3d:ae:fc:08:c4:b8:92:4d:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:CF:4B:B2:BC:28:7E:34:61:1F:D2:22:F3:CF:3B:49:F2:67:3A
            X509v3 Authority Key Identifier:
                keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:ea:3a:ad:f5:b2:49:49:78:c2:f9:1e:13:3a:d8:9c:59:
         e5:4a:03:1d:0d:ba:c8:d2:7f:3e:b3:2d:6b:c7:22:95:cb:b5:
         a0:c5:b4:12:4d:92:1f:b7:f9:bb:3e:81:80:c3:8c:44:8e:da:
         a4:45:4e:9c:41:08:51:c5:bb:90:34:07:8e:c2:9d:81:38:3e:
         4a:8e:4e:c5:39:c9:90:0e:e4:ee:d0:08:31:74:24:51:0c:8e:
         1f:4b:ae:ea:cf:a5:32:60:25:6c:bf:9c:ae:f9:ed:9b:ae:c5:
         84:be:90:8a:03:83:f8:d6:c4:f3:52:f9:5f:7a:d3:a8:a9:b2:
         21:c7:70:ba:3b:07:33:68:b3:85:af:c6:39:25:ef:64:3f:90:
         b5:81:7d:90:ae:c5:d8:37:b4:6f:a8:74:53:e7:af:9e:69:c3:
         11:11:f1:b3:ff:ce:e4:82:31:a2:a5:98:18:b0:4a:31:93:26:
         61:47:10:01:ae:45:e6:c7:75:95:f1:fb:ca:86:b1:ec:46:da:
         7d:c1:e9:dd:18:ee:dd:88:66:37:3c:1f:ff:53:60:20:03:9a:
         28:f7:50:c1:bc:95:b5:e3:e7:69:34:81:c0:38:61:de:d1:36:
         ef:d8:0c:5d:d9:bd:8a:a4:dd:fe:37:92:7d:e0:d6:a2:93:74:
         fb:81:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net