Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa
File:                     3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (raw, json)
Hash identifier:          i7aYSENMEfGKEvc4Lk7qqNHogOL9IdoberdA+QXB6Ks=
Subject key identifier:   24:47:43:9E:4B:2F:96:76:E4:2E:74:66:EF:D2:23:D1:23:EF:E8:B6
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       4341083B919D83B792502C228C88137E6A1F3877
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa
Signing time:             Wed 04 Dec 2024 04:12:47 +0000
ROA not before:           Wed 04 Dec 2024 04:07:47 +0000
ROA not after:            Wed 03 Dec 2025 04:12:47 +0000
asID:                     139938
IP address blocks:        150.107.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 22:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:41:08:3b:91:9d:83:b7:92:50:2c:22:8c:88:13:7e:6a:1f:38:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Dec  4 04:07:47 2024 GMT
            Not After : Dec  3 04:12:47 2025 GMT
        Subject: CN=2447439E4B2F9676E42E7466EFD223D123EFE8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:01:e4:bd:4a:c6:67:27:47:eb:8e:06:9b:
                    43:8f:86:16:b9:6e:21:ed:e5:6b:89:d4:90:09:01:
                    7c:7d:48:2d:ed:20:0e:fb:f9:31:c2:87:92:85:e3:
                    97:7d:f0:b5:2d:7b:49:14:a8:13:ed:d7:a1:f1:af:
                    b1:92:ba:7d:f8:c2:bc:c3:fd:d3:96:c9:9c:2f:71:
                    81:72:a1:db:a5:4c:74:06:c9:88:11:9e:f1:72:67:
                    43:dd:be:23:70:55:7d:fe:3d:1a:eb:32:5c:ca:d1:
                    2c:6f:12:f3:dc:6d:4f:3f:ff:7c:af:c6:4e:07:36:
                    06:74:16:67:3f:12:d3:15:46:4f:10:c2:1d:b9:25:
                    91:a5:76:e5:cf:c8:54:b9:97:dc:e8:2d:c1:c5:81:
                    84:66:a6:e2:2b:c8:1a:8c:de:a4:85:d2:00:9a:ab:
                    fe:23:6e:bb:da:47:10:35:bf:74:be:4f:0a:7c:e5:
                    b1:37:6e:b4:e6:dd:ea:12:b7:81:16:9d:bf:d1:62:
                    b9:b9:1e:13:e1:25:58:06:d7:1b:9c:55:64:e1:9c:
                    32:67:03:61:1f:1d:c4:61:d0:a2:0b:9c:5c:e2:2f:
                    a6:51:d0:f4:4c:96:12:bd:1f:73:ae:71:5a:a7:ab:
                    b1:2c:5e:76:c5:3b:0f:e9:ec:3b:99:44:13:bb:68:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:43:9E:4B:2F:96:76:E4:2E:74:66:EF:D2:23:D1:23:EF:E8:B6
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:e2:47:34:ae:9d:f1:75:57:94:25:e9:a3:c4:3f:1b:13:bf:
         26:5d:b1:0b:88:19:1a:37:66:e9:58:f9:f3:49:77:5a:d0:b8:
         28:bf:b3:fa:a1:b3:93:b2:ef:7a:de:88:92:89:a8:ba:29:58:
         0b:4d:57:d1:1e:91:d0:c3:2f:01:ca:89:74:a7:62:02:dc:5f:
         09:f2:46:d5:ec:fb:29:4b:48:e2:62:af:fa:ed:b7:31:23:1a:
         dc:ff:cc:28:89:2d:e5:ec:db:cd:15:bf:a7:b8:cd:c1:ae:60:
         3c:40:56:32:92:92:46:54:92:05:b3:ae:af:43:6b:8a:61:39:
         9c:ab:d9:04:ed:8e:63:f2:89:3a:e5:49:8f:dd:4b:b4:cc:d4:
         e0:7a:72:9a:10:07:5f:4f:74:d8:47:e3:92:9b:7e:c4:b8:40:
         09:a2:da:1b:ca:6f:d5:77:b3:ba:01:a5:04:28:ed:50:7b:e4:
         ca:b0:88:36:39:89:0d:a9:14:e6:bb:38:cb:f6:21:76:ba:e4:
         bc:a5:44:c0:30:c1:7c:1b:b3:c4:d1:b0:9a:8e:ef:73:c8:cf:
         22:6e:0b:98:14:72:65:ef:e8:0d:01:a6:c7:71:eb:24:e1:32:
         13:4d:a6:6b:c9:c8:f3:82:72:ef:eb:9a:b6:83:49:46:e1:31:
         f8:5f:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:32:40 2025 by rpki-client