Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa
File:                     3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (raw, json)
Hash identifier:          PVzIS0ESkEZ67q03gwRLnYkqKCd0joMIjci7Y3exMbQ=
Subject key identifier:   B8:C7:E3:E4:53:9E:A7:59:5B:D3:CD:94:FF:EB:98:C5:35:18:E1:4F
Certificate issuer:       /CN=1073C0AF2447C17B85643987B72701D1AE52823D
Certificate serial:       663F02266B4CA5C20AE798B31D86BFA28AE8AC1B
Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa
Signing time:             Tue 18 Jun 2024 01:54:58 +0000
ROA not before:           Tue 18 Jun 2024 01:49:58 +0000
ROA not after:            Tue 17 Jun 2025 01:54:58 +0000
asID:                     152397
IP address blocks:        157.15.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
                          rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3f:02:26:6b:4c:a5:c2:0a:e7:98:b3:1d:86:bf:a2:8a:e8:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D
        Validity
            Not Before: Jun 18 01:49:58 2024 GMT
            Not After : Jun 17 01:54:58 2025 GMT
        Subject: CN=B8C7E3E4539EA7595BD3CD94FFEB98C53518E14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:6b:b9:c5:73:34:e0:02:eb:bd:fb:5e:05:
                    c5:b8:5e:81:c7:b0:fb:8a:9f:87:05:f8:de:f1:85:
                    d6:76:0e:72:32:a0:05:2d:6c:4f:d7:15:77:f0:61:
                    db:76:9c:71:1c:00:f9:32:f0:d6:cb:b7:37:64:1a:
                    de:ce:f6:7b:9f:da:04:2f:e7:e5:47:75:54:69:cb:
                    20:94:18:87:83:29:15:74:fe:4e:34:12:e3:72:6f:
                    f1:45:cb:da:ca:a2:66:9e:1e:7b:df:a8:de:c3:4e:
                    a1:15:81:74:39:48:ad:1b:69:20:8d:03:2a:c4:b2:
                    18:d1:70:12:47:75:bd:7c:c1:57:fd:81:69:e2:5c:
                    53:b6:99:19:6f:5b:31:a5:c6:50:14:9e:58:6c:11:
                    00:29:0f:17:75:11:60:6f:30:52:ad:03:1b:75:8a:
                    63:ac:ba:34:68:ee:4c:5c:25:b2:d7:ad:0f:14:22:
                    1f:c9:4c:53:fc:b3:23:74:a2:7b:8e:85:82:af:94:
                    f1:c7:a1:e7:50:dd:f5:eb:98:2e:c0:ed:27:6b:c2:
                    24:f4:90:28:ff:0e:75:ba:35:31:d7:4a:75:23:88:
                    dd:22:c0:a7:24:8d:1b:86:c2:f9:9e:1b:8a:ff:39:
                    bb:a0:de:40:37:6f:3a:e3:cb:31:ef:e4:b7:25:2e:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C7:E3:E4:53:9E:A7:59:5B:D3:CD:94:FF:EB:98:C5:35:18:E1:4F
            X509v3 Authority Key Identifier:
                keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:a8:9c:49:92:dc:12:f7:45:e5:de:24:0c:50:d4:78:72:
         4a:61:08:79:d8:a1:49:df:17:9e:e3:ea:2d:9b:a4:6f:72:23:
         f4:fc:d4:3a:3f:77:69:8a:64:05:83:2d:29:60:c5:ce:77:81:
         0c:a6:10:8c:a3:cc:5e:b8:54:e8:6c:dd:85:94:bc:05:cc:86:
         9d:d2:3d:a4:eb:c4:9c:62:01:07:68:1d:2b:b0:c2:b5:d9:78:
         96:87:77:e2:e9:4b:68:25:f3:b9:9d:8b:95:5e:b2:e6:d0:98:
         ab:58:4d:47:e9:1a:20:2a:23:24:0a:f3:64:6c:95:ca:da:fc:
         f8:81:a0:e3:84:22:8f:e5:74:ff:53:c4:a2:ce:09:55:34:df:
         61:f5:b0:b7:ed:6d:a5:05:84:da:28:21:fc:46:9b:ab:af:ef:
         15:07:ea:7e:d8:45:e1:d7:2c:b4:4c:d7:a9:92:d0:a1:8d:cb:
         5a:c4:0c:0b:1b:25:34:35:0e:b5:82:9b:31:2e:06:64:ec:52:
         9f:35:89:1e:dc:d5:bf:25:38:13:aa:f4:ed:8d:6a:a0:57:6b:
         d1:ea:d2:e4:31:85:20:fa:8a:b0:79:05:f4:79:fa:67:0e:e0:
         3f:e8:16:8c:d7:12:ef:8a:db:c9:4c:4a:6e:a8:b2:d7:7e:4d:
         bf:ba:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org