Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa
File:                     3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (raw, json)
Hash identifier:          KZ8XjXlmr3y4ddQw9UA7bjnY7rBklTs4KejXPtkiBUw=
Subject key identifier:   EF:7A:98:31:7E:54:87:1F:D0:FA:53:5F:43:4C:A1:E8:DF:66:CD:A0
Certificate issuer:       /CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Certificate serial:       43BDE9F54A7194BC4C7F2DAAB318BBDD7BB5EF92
Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa
Signing time:             Tue 06 Feb 2024 07:47:07 +0000
ROA not before:           Tue 06 Feb 2024 07:42:07 +0000
ROA not after:            Tue 04 Feb 2025 07:47:07 +0000
asID:                     150494
IP address blocks:        157.15.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl
                          rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bd:e9:f5:4a:71:94:bc:4c:7f:2d:aa:b3:18:bb:dd:7b:b5:ef:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259
        Validity
            Not Before: Feb  6 07:42:07 2024 GMT
            Not After : Feb  4 07:47:07 2025 GMT
        Subject: CN=EF7A98317E54871FD0FA535F434CA1E8DF66CDA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:b1:e8:9f:96:e5:00:b0:46:94:04:10:6d:
                    50:c3:71:5e:69:7d:11:f1:99:ae:71:c0:af:1c:b7:
                    e1:e1:4a:dd:8f:46:ab:31:9d:59:ba:3e:2c:2d:46:
                    7c:4e:db:f1:5c:5b:ad:68:39:82:75:47:6f:46:a2:
                    c3:c8:a7:23:d1:b6:04:92:39:d2:d6:19:c0:1b:38:
                    31:6b:76:54:57:02:a5:62:35:85:ae:0d:a4:a6:d4:
                    6e:23:19:05:68:38:7f:e2:42:17:d8:87:0b:29:bc:
                    ad:a2:7c:3b:ee:59:73:ba:ea:59:33:da:b6:c4:a7:
                    80:35:31:2e:dc:01:9c:9b:d1:da:75:b1:42:25:87:
                    47:f7:ce:55:41:8e:6d:6c:56:da:8b:47:d7:57:6f:
                    61:20:da:40:f3:91:70:b5:5b:73:5f:c8:21:57:ce:
                    03:3c:ab:51:7e:ff:f6:4d:16:4a:f6:b4:ba:9d:ea:
                    14:f1:2d:4a:2d:48:51:10:f5:8f:62:24:0c:8f:19:
                    79:64:09:d7:14:48:3d:f8:93:8a:89:47:b8:42:4c:
                    50:8d:83:6f:52:f4:d5:8c:a1:ac:07:05:b2:f9:1a:
                    32:a0:81:be:3c:19:a5:f8:e5:8d:38:27:ff:84:2e:
                    27:11:ac:ee:8a:29:8d:c6:28:a5:02:c1:d9:d4:11:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:98:31:7E:54:87:1F:D0:FA:53:5F:43:4C:A1:E8:DF:66:CD:A0
            X509v3 Authority Key Identifier:
                keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:60:e0:13:0b:cb:7f:ba:1b:6c:b1:1c:d4:26:61:ad:78:2f:
         58:6e:84:19:ee:52:15:f4:98:47:c3:b7:55:e7:4b:c3:06:a5:
         1b:26:fe:f5:29:4e:24:d9:cb:d8:c7:02:bb:7a:d9:5a:aa:c6:
         20:30:3d:ca:c0:f4:b3:43:98:2d:b5:98:bd:ce:fc:0f:5d:a3:
         5d:43:7d:97:ff:f9:06:bb:f2:1b:19:f6:cb:08:54:1a:d2:d5:
         25:fd:e0:03:fb:47:2e:75:70:8e:52:f5:51:80:93:09:a3:a3:
         14:52:5c:41:6b:a5:e3:8d:27:1f:ae:6c:d8:47:ca:6d:c2:be:
         48:cd:d8:54:e7:50:dc:41:b8:b4:91:83:b3:17:95:65:17:cb:
         dd:f7:07:37:97:1c:de:c0:e2:a0:a3:be:d2:16:43:34:77:a5:
         2b:08:33:13:44:c1:36:3b:10:0c:30:55:73:ab:5d:08:b4:99:
         b3:0a:96:62:74:ae:cc:1a:48:24:20:4a:c5:9a:87:a7:71:29:
         b3:44:62:00:06:7d:d7:48:91:62:46:5c:1f:f7:34:28:5d:b3:
         f4:9a:2e:c7:d5:0b:1b:55:97:20:c7:33:4a:b5:12:11:78:8f:
         20:0f:9a:40:65:d7:d9:d3:08:46:2a:6f:b8:8b:ac:5a:50:f7:
         78:2f:9e:84
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQ73p9UpxlLxMfy2qsxi73Xu175IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4
Mzg0RDI1OTAeFw0yNDAyMDYwNzQyMDdaFw0yNTAyMDQwNzQ3MDdaMDMxMTAvBgNV
BAMTKEVGN0E5ODMxN0U1NDg3MUZEMEZBNTM1RjQzNENBMUU4REY2NkNEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7LHon5blALBGlAQQbVDDcV5p
fRHxma5xwK8ct+HhSt2PRqsxnVm6PiwtRnxO2/FcW61oOYJ1R29GosPIpyPRtgSS
OdLWGcAbODFrdlRXAqViNYWuDaSm1G4jGQVoOH/iQhfYhwspvK2ifDvuWXO66lkz
2rbEp4A1MS7cAZyb0dp1sUIlh0f3zlVBjm1sVtqLR9dXb2Eg2kDzkXC1W3NfyCFX
zgM8q1F+//ZNFkr2tLqd6hTxLUotSFEQ9Y9iJAyPGXlkCdcUSD34k4qJR7hCTFCN
g29S9NWMoawHBbL5GjKggb48GaX45Y04J/+ELicRrO6KKY3GKKUCwdnUEQ/xAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU73qYMX5Uhx/Q+lNfQ0yh6N9mzaAwHwYDVR0j
BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy
RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0
RDI1OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjhlNjEyLTdiYjMtNDhkZS05
NjlkLTcxYjQ1ZjQ2YTE2MS8wLzMxMzUzNzJlMzEzNTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PMzANBgkqhkiG
9w0BAQsFAAOCAQEAZmDgEwvLf7obbLEc1CZhrXgvWG6EGe5SFfSYR8O3VedLwwal
Gyb+9SlOJNnL2McCu3rZWqrGIDA9ysD0s0OYLbWYvc78D12jXUN9l//5BrvyGxn2
ywhUGtLVJf3gA/tHLnVwjlL1UYCTCaOjFFJcQWul440nH65s2EfKbcK+SM3YVOdQ
3EG4tJGDsxeVZRfL3fcHN5cc3sDioKO+0hZDNHelKwgzE0TBNjsQDDBVc6tdCLSZ
swqWYnSuzBpIJCBKxZqHp3Eps0RiAAZ910iRYkZcH/c0KF2z9Joux9ULG1WXIMcz
SrUSEXiPIA+aQGXX2dMIRipvuIusWlD3eC+ehA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:37 2024 by rpki-client on console-ams.rpki-client.org