Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa
File:                     3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (raw, json)
Hash identifier:          gUosjAgXVzbDSO3SLIPnQM2jycHvd3EtJFyhi4PT5RM=
Subject key identifier:   A9:3D:41:29:97:56:20:33:30:DF:B3:59:BB:13:CC:03:E2:BF:72:EE
Certificate issuer:       /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Certificate serial:       5520DCB2A6A5CEB7F50DD13CF4107AAC4CB5F6
Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa
Signing time:             Thu 17 Oct 2024 01:39:16 +0000
ROA not before:           Thu 17 Oct 2024 01:34:16 +0000
ROA not after:            Thu 16 Oct 2025 01:39:16 +0000
asID:                     152069
IP address blocks:        150.242.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
                          rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:20:dc:b2:a6:a5:ce:b7:f5:0d:d1:3c:f4:10:7a:ac:4c:b5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
        Validity
            Not Before: Oct 17 01:34:16 2024 GMT
            Not After : Oct 16 01:39:16 2025 GMT
        Subject: CN=A93D41299756203330DFB359BB13CC03E2BF72EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:5d:d8:17:06:06:47:c6:28:c5:9f:8c:c7:
                    90:58:dc:88:70:a1:0b:74:2b:46:78:f5:62:20:9a:
                    c2:11:4f:82:24:e6:28:84:d9:d0:4f:83:1a:e0:5a:
                    17:0d:ad:30:b6:10:6a:a8:4c:3a:ee:3b:d9:33:71:
                    23:79:c8:6e:b7:28:b1:ad:cc:37:fd:8a:3e:c2:9f:
                    48:78:85:bf:13:5d:a8:1a:59:89:a4:c7:fa:e8:30:
                    3d:a0:86:e9:b6:ec:5b:23:8e:3e:1d:43:37:2f:c6:
                    13:29:81:df:49:d9:16:6d:b2:da:b4:38:de:e4:5b:
                    e9:56:f4:4d:5b:7a:84:ad:fe:ff:1f:e7:14:47:17:
                    ee:07:de:d9:6f:c7:32:d1:99:a0:d4:c8:3a:20:a3:
                    ae:54:bf:8a:a1:70:ab:06:8c:4e:0c:03:49:7f:0c:
                    7d:15:3e:95:51:c7:8e:a4:04:55:3e:1d:64:07:0a:
                    5f:95:64:90:dc:b5:97:f0:b2:4f:f4:4e:92:9b:a8:
                    96:b7:03:ba:ea:41:37:1f:2c:8b:a0:26:43:61:76:
                    ea:98:18:b0:35:2e:42:e8:81:88:9b:16:64:93:fc:
                    ef:ef:6c:6b:d7:b3:ee:8e:19:69:c5:2b:d5:77:fb:
                    8f:40:48:9a:df:3f:37:d9:6f:8a:da:f1:13:5c:38:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:41:29:97:56:20:33:30:DF:B3:59:BB:13:CC:03:E2:BF:72:EE
            X509v3 Authority Key Identifier:
                keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:77:22:8f:66:31:81:ef:39:6b:a2:06:66:74:03:bd:31:
         5a:ad:88:02:f5:24:0c:05:57:74:74:01:4a:d2:f3:6d:ec:1b:
         05:68:2a:a5:5b:90:21:8d:ba:75:21:48:3a:f5:63:2c:23:69:
         0f:ec:d9:8b:29:c1:6a:a2:67:0b:6e:e3:3e:b4:f4:6b:e9:bb:
         85:02:4e:2e:ac:d4:3b:97:8d:9a:57:80:bc:42:8e:0e:aa:c0:
         20:a4:b3:ac:c3:d2:b0:43:04:35:37:2d:73:4b:a9:e7:75:88:
         6e:7c:df:7c:b9:f0:d3:4e:7a:be:cb:ef:77:cd:46:48:7b:17:
         ea:1a:a6:cf:ca:51:67:82:64:78:16:a2:e2:82:c3:0a:ba:fd:
         37:ce:93:47:67:bb:8a:c1:89:f7:71:e0:13:89:ef:77:44:77:
         89:26:42:fb:58:7c:34:b4:72:61:f6:49:fc:48:98:96:08:ba:
         90:bb:1f:12:e3:b9:3b:60:34:09:8f:d6:bf:dd:83:bf:6e:c0:
         c3:45:c6:a2:03:28:08:28:ac:04:6a:33:4f:db:0c:3d:45:c1:
         6a:0d:4d:c7:b8:80:87:15:8d:b2:c2:62:28:f4:d6:46:7e:d1:
         5a:41:5f:33:8f:24:f7:19:a8:cb:78:c8:5d:95:ae:fc:7e:ca:
         7d:91:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org