Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa
File:                     3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (raw, json)
Hash identifier:          0OT1N5Rf9ROOY/Zt+fSYDh8hyIpfNlFvEpZdIjJrZrs=
Subject key identifier:   F5:64:62:0B:B0:1E:A0:CD:92:07:4F:1B:C9:53:3A:46:44:30:0A:1B
Certificate issuer:       /CN=3E08DEC2AE0EB41653597023376671331769A43E
Certificate serial:       1A0113191420D0A2F9832FED4E8E651309728054
Authority key identifier: 3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa
Signing time:             Tue 26 Nov 2024 02:29:48 +0000
ROA not before:           Tue 26 Nov 2024 02:24:48 +0000
ROA not after:            Tue 25 Nov 2025 02:29:48 +0000
asID:                     153065
IP address blocks:        160.22.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl
                          rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:13:19:14:20:d0:a2:f9:83:2f:ed:4e:8e:65:13:09:72:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E08DEC2AE0EB41653597023376671331769A43E
        Validity
            Not Before: Nov 26 02:24:48 2024 GMT
            Not After : Nov 25 02:29:48 2025 GMT
        Subject: CN=F564620BB01EA0CD92074F1BC9533A4644300A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:60:a5:57:35:56:b8:ca:89:7e:c6:87:28:
                    4d:97:be:c6:b3:5e:0f:76:3b:4a:dd:5f:ba:94:b8:
                    d1:34:f9:9c:10:b2:a3:2b:eb:4b:e0:fe:e7:01:99:
                    2e:b3:43:e2:3b:b8:bb:00:db:b0:90:9b:95:12:10:
                    1e:5a:a7:f1:c6:92:d9:60:2c:8d:df:e4:e5:22:f0:
                    f1:2d:b2:c0:9f:3c:3f:b9:46:bb:4c:54:44:06:1f:
                    89:7c:13:e1:95:9f:3b:0c:49:5c:91:f6:86:60:3e:
                    70:4d:ca:e7:5e:a5:23:b5:ec:36:80:f5:c8:da:ce:
                    13:9c:c0:2a:81:b2:af:15:fc:fa:31:01:57:67:62:
                    d9:da:88:c9:0c:f8:06:21:d2:a9:57:d4:ee:18:b0:
                    f7:c6:d8:56:84:69:b3:da:fb:92:0d:bc:53:db:e8:
                    81:a8:37:80:89:67:e5:97:b2:82:d4:77:30:ae:0e:
                    e6:9b:0d:47:07:57:51:2e:93:a8:0b:6a:fb:b6:62:
                    4e:80:d9:7e:80:29:53:ba:30:9c:db:2b:ca:42:de:
                    4a:bb:bb:55:42:30:1c:ca:ef:c3:24:b3:91:0a:75:
                    c8:40:43:2b:71:9d:b3:c1:13:52:a1:e0:8f:1d:53:
                    ce:2e:91:84:b6:42:5a:2f:ad:4b:3f:97:90:7c:45:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:62:0B:B0:1E:A0:CD:92:07:4F:1B:C9:53:3A:46:44:30:0A:1B
            X509v3 Authority Key Identifier:
                keyid:3E:08:DE:C2:AE:0E:B4:16:53:59:70:23:37:66:71:33:17:69:A4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3E08DEC2AE0EB41653597023376671331769A43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3E08DEC2AE0EB41653597023376671331769A43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/3136302e32322e39312e302f32342d3234203d3e20313533303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:41:a0:f2:65:37:5c:a5:45:96:ba:19:95:0f:0f:8b:d1:4a:
         7e:bd:d8:81:be:31:d7:15:82:e5:f0:9d:13:9b:86:19:b1:a9:
         4a:3a:cc:58:ef:bc:27:97:5e:79:60:01:1f:d8:6f:4e:c6:88:
         3b:16:f9:97:ac:a8:95:96:48:af:c5:78:81:58:ee:f1:12:75:
         7d:04:17:2f:53:ba:17:1b:7b:9a:f7:22:3c:9a:8e:21:97:31:
         8c:3f:f2:74:76:b3:e6:5b:52:f0:50:c5:ac:57:c2:0f:ad:f2:
         6d:37:c6:eb:a3:3d:50:36:0c:8a:ef:5e:e7:22:e4:26:ac:b9:
         53:59:22:99:59:ce:88:26:53:81:d0:26:18:c8:2d:39:8c:bb:
         2a:8e:7b:0e:5f:cb:6d:69:8b:1e:15:94:4e:fa:16:cf:f4:6b:
         b4:a7:fd:4d:c2:76:8c:7d:d6:cd:92:22:47:b9:40:b6:fd:dd:
         e0:dd:f3:db:1f:1b:b1:e3:25:f0:b6:b0:34:ce:4f:5d:07:2c:
         26:8b:1e:a5:7f:c0:65:5a:3c:82:d2:21:e6:7f:85:ca:ec:dc:
         9e:3f:93:55:4a:dc:a3:af:43:59:b4:3c:2c:73:08:14:f3:6c:
         fa:93:91:7b:f0:e8:61:6d:75:eb:09:d8:f6:ea:86:e8:4e:34:
         a2:00:18:25
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGgETGRQg0KL5gy/tTo5lEwlygFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMx
NzY5QTQzRTAeFw0yNDExMjYwMjI0NDhaFw0yNTExMjUwMjI5NDhaMDMxMTAvBgNV
BAMTKEY1NjQ2MjBCQjAxRUEwQ0Q5MjA3NEYxQkM5NTMzQTQ2NDQzMDBBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrG2ClVzVWuMqJfsaHKE2Xvsaz
Xg92O0rdX7qUuNE0+ZwQsqMr60vg/ucBmS6zQ+I7uLsA27CQm5USEB5ap/HGktlg
LI3f5OUi8PEtssCfPD+5RrtMVEQGH4l8E+GVnzsMSVyR9oZgPnBNyudepSO17DaA
9cjazhOcwCqBsq8V/PoxAVdnYtnaiMkM+AYh0qlX1O4YsPfG2FaEabPa+5INvFPb
6IGoN4CJZ+WXsoLUdzCuDuabDUcHV1Euk6gLavu2Yk6A2X6AKVO6MJzbK8pC3kq7
u1VCMBzK78Mks5EKdchAQytxnbPBE1Kh4I8dU84ukYS2QlovrUs/l5B8RddDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9WRiC7AeoM2SB08byVM6RkQwChswHwYDVR0j
BBgwFoAUPgjewq4OtBZTWXAjN2ZxMxdppD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MjgxOWJhOS01ZjQ0LTQxMjUtOGI4Yy1mYzE2NGI1NGQ3M2EvMC8zRTA4REVDMkFF
MEVCNDE2NTM1OTcwMjMzNzY2NzEzMzE3NjlBNDNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvM0UwOERFQzJBRTBFQjQxNjUzNTk3MDIzMzc2NjcxMzMxNzY5
QTQzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyODE5YmE5LTVmNDQtNDEyNS04
YjhjLWZjMTY0YjU0ZDczYS8wLzMxMzYzMDJlMzIzMjJlMzkzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMzMwMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWWzANBgkqhkiG
9w0BAQsFAAOCAQEANEGg8mU3XKVFlroZlQ8Pi9FKfr3Ygb4x1xWC5fCdE5uGGbGp
SjrMWO+8J5deeWABH9hvTsaIOxb5l6yolZZIr8V4gVju8RJ1fQQXL1O6Fxt7mvci
PJqOIZcxjD/ydHaz5ltS8FDFrFfCD63ybTfG66M9UDYMiu9e5yLkJqy5U1kimVnO
iCZTgdAmGMgtOYy7Ko57Dl/LbWmLHhWUTvoWz/RrtKf9TcJ2jH3WzZIiR7lAtv3d
4N3z2x8bseMl8LawNM5PXQcsJosepX/AZVo8gtIh5n+Fyuzcnj+TVUrco69DWbQ8
LHMIFPNs+pORe/DoYW116wnY9uqG6E40ogAYJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net