Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa
File:                     3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (raw, json)
Hash identifier:          CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=
Subject key identifier:   0B:57:A9:F4:44:A6:55:68:68:65:8F:2A:D6:D6:21:53:8C:E7:B6:D3
Certificate issuer:       /CN=87EF06CC72EA3A8D57019F6198CA40168384D259
Certificate serial:       3933AD8A9392AC1CE80378B3AE23BFF577537B1A
Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa
Signing time:             Tue 07 Jan 2025 08:01:15 +0000
ROA not before:           Tue 07 Jan 2025 07:56:15 +0000
ROA not after:            Tue 06 Jan 2026 08:01:15 +0000
asID:                     150494
IP address blocks:        157.15.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl
                          rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 10:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:33:ad:8a:93:92:ac:1c:e8:03:78:b3:ae:23:bf:f5:77:53:7b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259
        Validity
            Not Before: Jan  7 07:56:15 2025 GMT
            Not After : Jan  6 08:01:15 2026 GMT
        Subject: CN=0B57A9F444A6556868658F2AD6D621538CE7B6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:8b:61:b0:9f:e0:42:1f:f8:57:2a:03:b1:
                    4c:d2:ec:7d:c5:56:92:a3:73:d2:51:81:93:ae:3b:
                    60:8d:6d:e5:9f:5d:92:b0:67:28:98:41:fb:e3:57:
                    1a:72:81:ea:3a:93:71:8a:83:42:03:fc:52:51:4a:
                    5a:ef:f1:6d:84:6d:54:b3:7e:26:c9:44:61:9d:1e:
                    f0:19:77:83:ce:93:52:dc:48:9a:df:d6:14:0a:46:
                    26:df:b6:02:32:f9:39:8c:46:04:61:06:08:d0:e5:
                    65:ad:f2:6d:ad:48:3d:ca:07:f4:ad:1d:7e:cb:ab:
                    b3:15:cd:fc:69:96:e1:92:fe:87:98:99:99:80:c7:
                    37:31:2d:e2:75:89:cd:dc:93:7a:9d:47:b9:34:4e:
                    d8:1f:98:b1:14:ce:b3:58:80:1c:fb:d5:f2:c0:38:
                    68:ec:b1:28:6d:02:d1:46:40:89:89:64:d9:af:24:
                    f3:5b:0a:6d:84:9f:5a:af:b1:f1:94:82:11:ff:d4:
                    49:c3:59:62:27:3d:f5:11:ca:b2:4a:1c:6f:cf:ec:
                    07:c0:f8:ac:d6:48:a1:ab:ce:a7:3b:b4:2f:7a:13:
                    30:e3:ea:58:53:c3:a2:d9:8f:31:d6:a3:57:6a:8b:
                    98:32:9a:83:ef:a2:af:50:96:3c:d6:e8:ac:62:9b:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:A9:F4:44:A6:55:68:68:65:8F:2A:D6:D6:21:53:8C:E7:B6:D3
            X509v3 Authority Key Identifier:
                keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/3135372e31352e35312e302f32342d3234203d3e20313530343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:12:2d:ce:65:68:e9:b7:af:c2:60:e8:2c:5f:1b:74:45:bb:
         95:8c:c8:aa:fe:31:c1:92:92:04:68:71:0b:d6:f1:10:da:2f:
         73:f5:5b:ab:74:59:e2:4b:40:66:9f:d0:0a:98:fd:dd:41:83:
         26:38:b0:18:15:8b:9c:73:5f:68:58:0c:d2:77:04:1e:81:9b:
         fa:ac:af:af:d2:5f:6f:5b:69:5c:25:dd:32:89:91:c9:84:11:
         38:60:d3:73:28:98:08:3d:49:26:d9:92:6d:44:b9:7c:2a:3d:
         8b:23:74:20:9b:8d:73:27:25:f9:38:09:a5:dd:b9:2f:f9:a5:
         f8:89:e8:f5:04:0b:0b:d3:94:fd:95:84:5c:da:30:30:3a:fd:
         b1:fa:eb:be:27:da:08:7d:8c:80:dd:04:64:c5:fc:ca:da:af:
         0e:8c:ba:fe:a5:cf:54:4a:04:78:f0:8c:dd:7b:ed:75:db:aa:
         45:1a:db:a5:51:3a:96:c8:32:ff:fb:c8:bd:27:5d:90:89:7f:
         b4:2c:2a:4a:94:07:7a:2d:d1:e1:0e:41:45:c4:44:0c:6c:4d:
         ca:61:80:72:b2:9e:9d:c0:0c:e1:7f:60:e5:97:8f:8e:a5:fa:
         38:b1:1d:9e:14:59:17:f8:56:5b:ce:4a:2c:f1:e8:0e:8c:ab:
         31:8f:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:38 2025 by rpki-client