Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
File:                     3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          /jPihvNxbl0t+HcjcCBqCu+66A97nK2QYzca1evHECo=
Subject key identifier:   1A:42:6E:D6:84:C2:0F:FD:A9:FD:37:E3:15:FA:D9:88:C5:1D:A5:E1
Certificate issuer:       /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial:       058B848F6302A80FDF5E1B9E647A4E7DC3CC7B6B
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
Signing time:             Mon 19 Feb 2024 02:55:14 +0000
ROA not before:           Mon 19 Feb 2024 02:50:14 +0000
ROA not after:            Mon 17 Feb 2025 02:55:14 +0000
asID:                     138131
IP address blocks:        157.15.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
                          rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 11:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8b:84:8f:63:02:a8:0f:df:5e:1b:9e:64:7a:4e:7d:c3:cc:7b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
        Validity
            Not Before: Feb 19 02:50:14 2024 GMT
            Not After : Feb 17 02:55:14 2025 GMT
        Subject: CN=1A426ED684C20FFDA9FD37E315FAD988C51DA5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:b9:a5:dd:32:c8:ce:6e:0f:0c:68:78:bc:
                    b9:84:06:6f:3b:70:95:cf:f9:97:a3:70:3d:3c:91:
                    28:ab:c1:fa:93:91:1f:15:41:16:51:92:4e:31:b2:
                    07:a1:6c:57:e0:fe:ec:d6:18:1f:ba:00:7a:0f:79:
                    78:39:a1:6f:d1:d7:88:10:79:4c:98:8f:4b:4d:fe:
                    5b:84:1b:d1:53:4e:5d:94:f5:1c:c5:cf:12:b3:78:
                    d7:2c:87:83:14:81:a4:2a:1a:b1:1c:54:0a:63:f5:
                    75:80:73:16:e5:15:89:ae:31:3a:03:36:89:bf:97:
                    ca:17:e2:1c:d4:43:e7:a6:1f:80:cd:a7:95:57:c4:
                    77:ca:25:8e:6f:31:97:bf:e4:b6:08:dc:9b:50:44:
                    a0:f2:7f:3a:f5:22:b5:ed:f1:d2:a6:a6:6c:46:6d:
                    8c:93:6d:7d:e7:c9:22:77:a1:24:a9:a3:b0:01:3b:
                    ce:28:3e:04:89:4a:45:e7:cd:90:48:93:9d:e0:2e:
                    e5:d0:5b:13:b0:b8:a1:e5:ed:4c:dd:22:48:5b:9a:
                    16:66:70:74:24:d4:ef:f0:0a:b6:5f:8f:8e:42:3d:
                    25:4a:62:2e:06:e9:be:5d:85:d0:a2:60:10:97:6f:
                    1e:04:cc:69:2d:4a:45:e7:b7:17:09:a4:bb:f6:73:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:42:6E:D6:84:C2:0F:FD:A9:FD:37:E3:15:FA:D9:88:C5:1D:A5:E1
            X509v3 Authority Key Identifier:
                keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6c:da:3a:30:68:72:65:4d:60:83:76:02:c5:ee:16:0c:13:
         15:9f:c6:7a:aa:5d:84:2f:9d:6c:2c:cc:82:79:d1:2f:0f:fa:
         78:ea:4d:5a:2b:75:c0:4f:4c:fd:06:a2:cc:eb:11:2a:57:3b:
         e9:85:a7:49:a8:a6:15:c7:99:32:2d:00:79:92:8d:e1:d1:12:
         10:e5:9c:77:0a:58:2e:37:a3:c7:43:b4:b2:b0:c8:39:7f:87:
         02:39:d2:9e:db:bc:dd:51:db:10:b3:39:e8:4d:22:21:d0:16:
         54:89:8e:52:85:6c:16:f8:f2:a0:92:39:66:a9:2e:22:e7:e3:
         74:4a:82:1a:39:d6:93:4d:35:fc:6a:06:d4:13:ad:36:96:2d:
         7f:c5:11:8b:ce:28:e0:a7:8d:22:78:64:37:39:c1:94:4f:99:
         2a:83:49:51:bd:38:e9:63:8b:3b:5b:ce:b2:5f:f5:81:83:7a:
         73:52:0d:56:29:bc:6d:98:d5:d6:7d:ac:bf:d5:23:1f:a8:4f:
         4d:90:d2:38:8d:4b:c7:ee:9f:fb:42:18:7c:0f:e0:d2:a0:c1:
         2b:9d:73:4c:da:51:bc:32:32:90:28:da:48:62:f0:93:57:a9:
         30:13:67:46:3a:c3:a1:b2:1c:4d:46:66:9e:5b:43:43:cb:92:
         3b:81:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:20:36 2024 by rpki-client on console-ams.rpki-client.org