Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa
File:                     3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (raw, json)
Hash identifier:          2IYoXtuqmRblUc6YqV57RYGXJRezJZnujnFsc4kUWn0=
Subject key identifier:   FA:47:B5:6E:BD:A0:64:D1:AB:C9:B2:7E:8D:BC:70:79:C8:F3:2A:7E
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       5D7AA9CD112E120115FE882A017920A047759644
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa
Signing time:             Mon 31 Jul 2023 00:02:33 +0000
ROA not before:           Sun 30 Jul 2023 23:57:33 +0000
ROA not after:            Mon 29 Jul 2024 00:02:33 +0000
asID:                     45287
IP address blocks:        150.129.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 11:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7a:a9:cd:11:2e:12:01:15:fe:88:2a:01:79:20:a0:47:75:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jul 30 23:57:33 2023 GMT
            Not After : Jul 29 00:02:33 2024 GMT
        Subject: CN=FA47B56EBDA064D1ABC9B27E8DBC7079C8F32A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:e5:62:82:2e:5e:77:2e:4d:ae:d0:00:ae:
                    15:9c:4a:9b:07:6f:d1:81:77:36:26:8b:5d:aa:37:
                    22:84:70:ff:0d:6b:e7:c1:26:67:a6:66:69:82:bd:
                    02:93:3f:c3:e1:a6:c8:c1:e3:09:4a:32:59:25:46:
                    44:e5:b1:94:54:d9:93:a3:74:4b:87:50:d9:6a:27:
                    b9:16:d5:99:bd:71:65:3e:0c:26:bb:e1:c5:c8:32:
                    01:aa:19:3b:01:38:89:9b:13:d2:b8:5c:47:f9:b5:
                    df:21:f8:0b:d5:b4:f4:8a:fe:87:ed:85:91:8c:a2:
                    86:1e:45:99:b3:86:34:18:58:28:d7:1c:ae:6f:f6:
                    03:c8:33:92:d9:75:67:f2:1c:f3:cf:e7:2e:22:2b:
                    9c:3d:f5:40:78:82:14:f1:62:64:91:bd:c4:43:b3:
                    31:5f:7c:c0:62:cc:81:a0:85:b6:af:d9:e5:c9:1b:
                    df:be:d6:be:f3:81:3f:8a:a0:ac:7e:2c:19:05:30:
                    ce:ce:d5:79:86:c5:94:bf:6e:12:08:6e:bc:f1:51:
                    9d:4f:4a:3f:4e:84:c9:d0:5b:60:5c:fa:b9:80:61:
                    f0:fb:b4:09:8a:15:e3:ef:ca:17:b1:a6:18:f7:d1:
                    61:bf:7a:c6:44:11:a0:cb:09:49:75:ee:8e:54:ce:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:47:B5:6E:BD:A0:64:D1:AB:C9:B2:7E:8D:BC:70:79:C8:F3:2A:7E
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:77:85:9c:5f:46:33:55:2f:4b:b7:45:10:8e:02:69:5e:1d:
         92:57:9b:c4:50:4b:33:b4:9e:bb:76:f4:19:c8:fa:56:b8:bd:
         2e:23:42:e7:1c:78:41:3b:bc:20:ec:99:a9:86:40:d2:93:88:
         70:e0:30:24:b5:8f:dd:a5:63:9b:2b:43:fd:ec:79:1a:5f:ba:
         ed:87:57:c5:a4:e2:05:42:14:33:64:f3:e9:6a:00:77:4a:dc:
         08:65:8e:1e:12:1d:04:5a:c4:5d:c2:0c:dc:d7:65:f0:0a:51:
         76:04:88:5e:a7:5d:6a:67:b3:52:ff:9d:0c:24:11:5b:49:d7:
         08:44:ff:88:b6:9b:f7:4f:c1:bf:74:e8:45:49:ca:b3:a9:bd:
         48:fb:fd:97:49:f4:52:78:6c:f3:ac:a2:25:af:fc:1c:f9:b3:
         78:9d:de:2b:f4:98:b3:60:68:41:67:c5:4b:70:18:30:84:59:
         3b:40:39:0c:5e:ad:2b:17:06:5f:84:fa:78:69:b8:53:7c:1a:
         25:2a:89:23:35:f1:fd:b0:6e:74:c2:19:05:44:2e:c7:7a:79:
         18:a8:9d:0b:4c:bf:f6:ca:27:7d:b2:93:1e:11:e8:c1:04:68:
         ee:6f:b5:54:ce:77:c2:9e:ea:3a:78:9a:86:80:03:a0:0b:0b:
         a7:cf:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 09:38:40 2024 by rpki-client on console-ams.rpki-client.org