Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa
File:                     3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (raw, json)
Hash identifier:          wfBLV7crHpRvOvrkP8sO7cSqml5P6MQ5e6U//U3tlqI=
Subject key identifier:   58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40
Certificate issuer:       /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial:       484E4E05B269174100E99558520B2650188EB1B6
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa
Signing time:             Wed 03 Apr 2024 02:52:21 +0000
ROA not before:           Wed 03 Apr 2024 02:47:21 +0000
ROA not after:            Wed 02 Apr 2025 02:52:21 +0000
asID:                     141120
IP address blocks:        157.20.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
                          rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 13:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4e:4e:05:b2:69:17:41:00:e9:95:58:52:0b:26:50:18:8e:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
        Validity
            Not Before: Apr  3 02:47:21 2024 GMT
            Not After : Apr  2 02:52:21 2025 GMT
        Subject: CN=584A95EF407181C0C8755D0E36E826B17D4B8840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:ed:3e:70:0c:7f:7e:8b:56:7c:bd:a9:3e:
                    fb:02:4c:d7:8e:67:39:c8:19:17:09:a5:10:f1:b5:
                    19:0b:57:29:ff:77:d0:a4:62:07:ef:ac:84:31:59:
                    f1:e9:31:74:36:fb:53:40:5f:23:98:45:80:40:42:
                    65:d9:fd:6f:8e:c6:97:d9:f1:7a:04:ec:ab:18:38:
                    e6:e7:04:39:0d:ef:08:a8:8b:4e:b5:04:fe:4b:e9:
                    bd:0b:8c:fa:c0:58:b5:9d:38:ed:2d:89:29:71:e9:
                    81:cb:29:93:1b:c3:f1:5a:7a:5e:ce:a4:84:5e:85:
                    23:cb:8d:6b:9c:d4:36:5c:f5:e1:2e:ab:3b:bc:51:
                    8e:5a:01:11:b9:9f:1a:d3:2a:0f:05:0a:a3:f2:bd:
                    e0:2b:d2:c0:98:4c:eb:39:20:bd:80:b6:3e:ba:62:
                    d0:64:cc:b0:db:01:6e:27:86:1f:d0:19:e8:56:ea:
                    9e:b9:d2:55:85:30:4c:95:48:b1:09:30:1d:16:e5:
                    83:60:60:de:7c:09:ba:47:ff:94:b1:81:be:d9:9a:
                    3e:fa:ee:8e:ad:86:f9:b5:85:a9:6f:d6:e9:15:fe:
                    04:d1:0d:61:d3:51:b5:cb:b0:cd:db:b7:99:f3:d5:
                    f4:bf:90:02:04:75:6c:cd:5c:00:8d:8f:39:07:a8:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4A:95:EF:40:71:81:C0:C8:75:5D:0E:36:E8:26:B1:7D:4B:88:40
            X509v3 Authority Key Identifier:
                keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:a8:ac:46:0b:1f:ed:f4:4c:48:f2:5e:c9:d1:dd:2f:fa:
         82:53:3b:74:b7:49:b7:10:0f:9e:6d:dd:b3:b7:3f:47:80:3b:
         56:74:e9:ae:eb:35:da:29:8e:f0:5c:14:27:96:2e:ae:45:cf:
         67:68:54:98:3f:70:d3:ba:27:79:bb:e4:ba:f1:80:11:ab:1e:
         d1:82:c1:19:90:f6:8f:be:3e:80:3b:96:da:a4:b2:1a:dc:22:
         4f:16:5f:38:24:d5:2b:9d:f4:6d:11:2c:f8:f4:1e:13:a9:c3:
         14:4c:e5:32:a4:69:6f:b4:66:36:f5:ef:b9:56:19:38:35:e5:
         39:32:5d:43:fb:46:11:66:d5:cd:ad:f6:57:78:6a:24:13:5a:
         d3:b8:e8:b4:b1:0c:99:9f:ae:9a:c7:98:b9:86:fc:f1:85:e9:
         3d:88:cb:22:b7:c6:b9:56:0a:a2:ca:30:43:e4:af:f7:1d:3c:
         b8:0a:d5:1f:c4:97:c4:21:97:67:33:62:81:15:8d:c5:09:8e:
         99:31:31:3f:d5:ea:20:c0:31:9c:52:ae:75:e0:2d:e6:c2:9a:
         87:98:02:29:d2:43:36:8f:7d:17:ff:e8:1c:42:4a:de:39:19:
         63:40:30:a1:bc:22:16:1a:93:2d:05:38:e0:0f:e1:62:bc:d9:
         82:e5:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:16 2024 by rpki-client on console-fra.rpki-client.org