Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e36342e302f32322d3232203d3e203535363939.roa
File:                     3136302e31392e36342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          yJK4a8K11r+E+tJag+nY+8xsV5fpS89Sq9CzTcNXWcQ=
Subject key identifier:   43:D3:96:B7:37:92:F9:E1:DD:A9:7F:4E:9F:45:71:67:D2:8B:11:BD
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       485448915F2C96CE0BB5F9FA3582849427D8CB87
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e36342e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 02 Jun 2025 02:03:07 +0000
ROA not before:           Mon 02 Jun 2025 01:58:07 +0000
ROA not after:            Mon 01 Jun 2026 02:03:07 +0000
asID:                     55699
IP address blocks:        160.19.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 04:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:48:91:5f:2c:96:ce:0b:b5:f9:fa:35:82:84:94:27:d8:cb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun  2 01:58:07 2025 GMT
            Not After : Jun  1 02:03:07 2026 GMT
        Subject: CN=43D396B73792F9E1DDA97F4E9F457167D28B11BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:c8:59:d9:6d:0a:37:d8:ab:2b:f8:2f:3f:
                    51:4c:5c:ac:bf:6f:04:f4:87:5a:25:55:3a:ea:6c:
                    78:0d:77:34:70:b2:59:98:44:44:07:97:e9:77:9e:
                    cd:b6:ad:96:21:78:15:cb:cc:e1:1c:8c:3c:06:ac:
                    4e:d0:80:3b:d4:7c:7e:2f:9d:bf:2f:1a:1d:65:33:
                    00:8b:d7:f5:cd:bb:77:59:c8:c1:7d:97:65:6f:8d:
                    b2:a7:85:17:83:88:9b:40:16:ba:35:1e:80:b4:33:
                    5b:23:6d:0b:77:fc:e2:3d:91:4c:76:2f:d0:11:ec:
                    ff:9a:d9:96:f3:ae:3c:1f:8f:fd:a7:23:47:2d:7b:
                    71:10:de:3c:b5:7a:a2:49:42:c0:bb:5f:23:4e:e6:
                    c0:fa:fc:f5:b9:cf:ae:0f:19:2e:cf:c8:ca:cf:b0:
                    a2:ab:78:5c:d9:e1:52:e8:f5:f3:5e:5b:5e:bb:9f:
                    ab:d2:cf:12:1a:83:84:59:c9:36:5a:80:de:f1:94:
                    c0:e6:88:a5:74:2c:42:0c:19:65:08:e2:64:1e:99:
                    79:db:90:e5:59:ef:b0:3d:79:be:63:c8:8f:52:50:
                    eb:f7:f6:2e:52:90:a8:25:a8:fb:1e:67:22:b7:0d:
                    3d:9b:ca:d7:19:36:ef:2c:3f:44:b5:f0:8f:af:08:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:96:B7:37:92:F9:E1:DD:A9:7F:4E:9F:45:71:67:D2:8B:11:BD
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e36342e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:96:00:8f:24:d6:6e:ec:b3:6e:bc:32:83:a1:30:7d:24:
         91:ac:db:6f:b4:d6:bd:c2:15:3a:f6:74:38:b0:d4:99:f8:12:
         1a:01:1a:92:d1:31:dc:49:14:67:fc:b3:88:ce:b1:69:bc:28:
         b0:59:08:84:b0:46:21:b7:15:7c:eb:69:e1:95:38:92:b9:ac:
         52:36:35:70:14:54:da:56:87:85:a2:9d:41:68:04:6f:55:62:
         37:f1:ae:3f:45:94:43:aa:35:4c:a7:60:47:40:7a:91:31:0a:
         90:1e:4b:15:98:b5:39:d7:30:15:5a:a0:58:70:a7:a0:21:82:
         74:e5:32:3d:29:83:cf:cc:22:45:17:7c:7e:82:84:26:70:d1:
         6a:cd:0e:7b:2a:98:65:fa:f7:94:d1:a9:80:fd:0f:43:60:7e:
         7d:17:91:da:5e:09:59:57:be:8e:29:53:4f:cd:fa:7d:d8:bf:
         16:55:68:13:9c:7c:4d:69:92:34:e7:e8:32:eb:5c:85:a9:90:
         c1:b6:cb:21:d8:de:78:e3:9f:e7:77:72:fe:cf:d7:94:30:ea:
         35:0d:ca:b6:ad:6d:87:f5:6c:3a:5f:4d:38:e7:71:49:89:56:
         b2:5c:ca:ea:57:6d:77:1b:6d:28:a1:b2:ca:95:56:6a:bd:ff:
         55:8f:a2:e2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSFRIkV8sls4Ltfn6NYKElCfYy4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5
RTEwNjg3MjAeFw0yNTA2MDIwMTU4MDdaFw0yNjA2MDEwMjAzMDdaMDMxMTAvBgNV
BAMTKDQzRDM5NkI3Mzc5MkY5RTFEREE5N0Y0RTlGNDU3MTY3RDI4QjExQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACshZ2W0KN9irK/gvP1FMXKy/
bwT0h1olVTrqbHgNdzRwslmYREQHl+l3ns22rZYheBXLzOEcjDwGrE7QgDvUfH4v
nb8vGh1lMwCL1/XNu3dZyMF9l2VvjbKnhReDiJtAFro1HoC0M1sjbQt3/OI9kUx2
L9AR7P+a2Zbzrjwfj/2nI0cte3EQ3jy1eqJJQsC7XyNO5sD6/PW5z64PGS7PyMrP
sKKreFzZ4VLo9fNeW167n6vSzxIag4RZyTZagN7xlMDmiKV0LEIMGWUI4mQemXnb
kOVZ77A9eb5jyI9SUOv39i5SkKglqPseZyK3DT2bytcZNu8sP0S18I+vCLJRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQ9OWtzeS+eHdqX9On0VxZ9KLEb0wHwYDVR0j
BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG
QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw
Njg3Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i
ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzYzMDJlMzEzOTJlMzYzNDJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDM1MzUzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKgE0AwDQYJKoZIhvcN
AQELBQADggEBAK1DlgCPJNZu7LNuvDKDoTB9JJGs22+01r3CFTr2dDiw1Jn4EhoB
GpLRMdxJFGf8s4jOsWm8KLBZCISwRiG3FXzraeGVOJK5rFI2NXAUVNpWh4WinUFo
BG9VYjfxrj9FlEOqNUynYEdAepExCpAeSxWYtTnXMBVaoFhwp6AhgnTlMj0pg8/M
IkUXfH6ChCZw0WrNDnsqmGX695TRqYD9D0Ngfn0XkdpeCVlXvo4pU0/N+n3YvxZV
aBOcfE1pkjTn6DLrXIWpkMG2yyHY3njjn+d3cv7P15Qw6jUNyratbYf1bDpfTTjn
cUmJVrJcyupXbXcbbSihssqVVmq9/1WPouI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:30:13 2025 by rpki-client