Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa
File:                     3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (raw, json)
Hash identifier:          eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=
Subject key identifier:   46:08:7F:1F:65:B2:BE:ED:04:CB:05:0F:88:99:DC:0D:5A:E2:E1:D3
Certificate issuer:       /CN=1073C0AF2447C17B85643987B72701D1AE52823D
Certificate serial:       79815816699EB7A12B96F9938996B005B061401E
Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa
Signing time:             Tue 20 May 2025 02:00:04 +0000
ROA not before:           Tue 20 May 2025 01:55:04 +0000
ROA not after:            Tue 19 May 2026 02:00:04 +0000
asID:                     152397
IP address blocks:        157.15.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
                          rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:81:58:16:69:9e:b7:a1:2b:96:f9:93:89:96:b0:05:b0:61:40:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D
        Validity
            Not Before: May 20 01:55:04 2025 GMT
            Not After : May 19 02:00:04 2026 GMT
        Subject: CN=46087F1F65B2BEED04CB050F8899DC0D5AE2E1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:7f:eb:52:39:91:cd:15:1f:9e:d5:e0:7c:
                    75:85:d9:59:86:a8:fb:24:46:54:db:f6:4c:43:bc:
                    37:f0:53:12:84:54:a4:0a:33:03:a8:e6:c7:cd:3c:
                    b8:b0:5a:0b:55:89:47:35:6a:0a:d8:fc:d3:82:01:
                    35:d5:e9:9e:cc:0b:eb:a8:ca:fa:c0:ef:5a:f4:e4:
                    ef:5c:04:b6:82:ad:d8:bd:c9:26:9e:17:27:c7:1e:
                    e3:04:a5:1e:a2:38:58:e8:9f:67:f6:b3:89:06:32:
                    5b:6e:0f:c6:11:83:c6:01:84:a3:6b:07:ba:42:0a:
                    93:28:2a:dd:d6:c9:f6:cd:80:b3:2a:f7:1d:1e:5f:
                    88:e3:9b:4f:3f:e5:33:03:bd:50:f8:4b:36:7f:ee:
                    41:b2:88:b2:34:9a:87:3b:ed:08:90:08:48:46:5a:
                    da:e4:5b:90:a6:6c:3c:07:83:c5:f8:f2:d6:c7:36:
                    5e:e1:e1:7e:27:81:de:39:db:52:dc:2c:23:07:6b:
                    6f:a2:c4:0e:6f:ae:98:bd:c3:df:12:68:8f:c8:bd:
                    fe:d7:cf:c4:b5:bb:89:c8:26:32:7d:54:b2:87:09:
                    f3:98:fd:c4:ba:57:28:cb:90:a6:85:b3:cb:fa:14:
                    aa:44:e9:bb:9e:7b:26:d2:20:c0:82:19:a3:f7:ee:
                    93:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:08:7F:1F:65:B2:BE:ED:04:CB:05:0F:88:99:DC:0D:5A:E2:E1:D3
            X509v3 Authority Key Identifier:
                keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:04:d2:4b:2e:d7:51:14:52:71:cc:df:83:ee:d9:74:34:da:
         7b:9d:81:85:b2:5a:7a:93:62:27:30:12:79:6c:0f:4c:1f:23:
         c7:75:3c:03:72:b7:ec:4f:73:0c:13:3c:49:c2:c5:70:29:da:
         83:ad:ae:61:bf:c9:8f:19:a3:09:cf:a9:67:4c:df:1a:a5:e2:
         72:c5:09:57:ba:ab:b8:e2:99:98:90:a0:7c:28:2a:b7:5e:27:
         47:77:c6:04:d7:2f:2e:e4:26:5f:d2:14:3d:7b:e5:fe:53:9e:
         64:83:c1:3d:f5:43:7f:ce:b1:1b:46:8e:05:19:ed:f3:9b:87:
         8f:47:eb:57:06:ee:a1:9f:a3:16:a6:ad:f2:a9:13:4f:a5:a3:
         4a:b3:e2:8a:b0:25:cc:88:cb:b6:5b:61:5a:ee:dc:29:33:35:
         f7:67:72:e0:20:85:ec:c0:f1:ca:6d:b4:02:02:e5:26:55:8f:
         57:70:58:78:45:87:d5:25:e9:99:74:74:ad:71:dc:9f:c5:47:
         d6:4e:e2:3b:57:c9:ec:02:50:22:4f:87:8e:ee:54:96:2d:2b:
         e9:c3:72:5e:29:8c:c1:c5:51:85:0e:ee:2d:72:95:28:a0:73:
         05:b4:ee:3f:55:06:71:c6:b9:cf:69:1b:b4:05:22:4f:ad:cd:
         98:20:9b:23
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeYFYFmmet6ErlvmTiZawBbBhQB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB
RTUyODIzRDAeFw0yNTA1MjAwMTU1MDRaFw0yNjA1MTkwMjAwMDRaMDMxMTAvBgNV
BAMTKDQ2MDg3RjFGNjVCMkJFRUQwNENCMDUwRjg4OTlEQzBENUFFMkUxRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSin/rUjmRzRUfntXgfHWF2VmG
qPskRlTb9kxDvDfwUxKEVKQKMwOo5sfNPLiwWgtViUc1agrY/NOCATXV6Z7MC+uo
yvrA71r05O9cBLaCrdi9ySaeFyfHHuMEpR6iOFjon2f2s4kGMltuD8YRg8YBhKNr
B7pCCpMoKt3WyfbNgLMq9x0eX4jjm08/5TMDvVD4SzZ/7kGyiLI0moc77QiQCEhG
WtrkW5CmbDwHg8X48tbHNl7h4X4ngd4521LcLCMHa2+ixA5vrpi9w98SaI/Ivf7X
z8S1u4nIJjJ9VLKHCfOY/cS6VyjLkKaFs8v6FKpE6bueeybSIMCCGaP37pOnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQURgh/H2Wyvu0EywUPiJncDVri4dMwHwYDVR0j
BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0
NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy
ODIzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZGQxNWUzLTllZTUtNGQ1Mi05
ZWVlLTcxMmJiM2I3YmZmYi8wLzMxMzUzNzJlMzEzNTJlMzEzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ97MA0GCSqG
SIb3DQEBCwUAA4IBAQA5BNJLLtdRFFJxzN+D7tl0NNp7nYGFslp6k2InMBJ5bA9M
HyPHdTwDcrfsT3MMEzxJwsVwKdqDra5hv8mPGaMJz6lnTN8apeJyxQlXuqu44pmY
kKB8KCq3XidHd8YE1y8u5CZf0hQ9e+X+U55kg8E99UN/zrEbRo4FGe3zm4ePR+tX
Bu6hn6MWpq3yqRNPpaNKs+KKsCXMiMu2W2Fa7twpMzX3Z3LgIIXswPHKbbQCAuUm
VY9XcFh4RYfVJemZdHStcdyfxUfWTuI7V8nsAlAiT4eO7lSWLSvpw3JeKYzBxVGF
Du4tcpUooHMFtO4/VQZxxrnPaRu0BSJPrc2YIJsj
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:08 2025 by rpki-client