Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
File:                     3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier:          EwNPctz3GEA8b4HEhWJU+9J961tRLY7I9c2qIR6c9pU=
Subject key identifier:   BB:6F:45:5E:7D:A5:AD:C2:B6:BB:49:3E:39:50:3A:77:E1:C8:6D:3A
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       2BD5EFDD35493B177171F1B226B305A873CAC522
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
Signing time:             Mon 01 Jul 2024 01:03:17 +0000
ROA not before:           Mon 01 Jul 2024 00:58:17 +0000
ROA not after:            Mon 30 Jun 2025 01:03:17 +0000
asID:                     45706
IP address blocks:        150.107.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d5:ef:dd:35:49:3b:17:71:71:f1:b2:26:b3:05:a8:73:ca:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Jul  1 00:58:17 2024 GMT
            Not After : Jun 30 01:03:17 2025 GMT
        Subject: CN=BB6F455E7DA5ADC2B6BB493E39503A77E1C86D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:66:ed:b9:ff:24:93:47:f8:a8:af:93:5f:
                    c5:8e:4e:cb:a7:d3:a9:97:1d:f3:72:a3:d0:2d:6f:
                    4b:3e:59:4b:ed:8c:aa:62:d3:da:84:52:76:71:71:
                    13:5b:3c:21:73:38:36:1f:4a:27:fc:c5:7d:c5:3c:
                    c4:d7:57:4c:97:e4:09:f0:36:e7:24:0c:89:08:97:
                    9f:6b:a0:e4:fb:e1:80:62:33:01:fc:2b:41:55:1f:
                    2b:ff:4d:9d:cc:c5:18:31:22:9e:da:76:fa:b3:75:
                    1b:7e:06:92:7c:48:63:2b:1b:82:e0:fb:9c:1e:72:
                    42:8d:84:05:a4:28:df:80:4a:af:c9:8a:d0:93:44:
                    93:ab:71:6a:28:46:71:77:d0:3b:d6:3e:16:cf:91:
                    21:e4:4b:ee:b2:92:e6:cb:2d:80:48:82:16:72:80:
                    dd:d2:99:8b:9a:e8:5b:4e:1b:c0:dc:14:f8:61:07:
                    1c:77:6d:9f:18:db:ad:6e:62:48:f6:a7:8d:15:3a:
                    9f:10:2a:d7:f1:c8:b5:fa:3e:4b:be:47:0c:2e:f2:
                    0d:79:68:f5:ff:67:ce:96:8b:36:c4:ae:4a:a2:4a:
                    57:b8:2f:2b:6b:c1:75:5a:3d:4f:57:68:49:a4:15:
                    ce:cf:30:a6:bd:4b:66:cd:f6:7e:bf:16:0b:43:76:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:45:5E:7D:A5:AD:C2:B6:BB:49:3E:39:50:3A:77:E1:C8:6D:3A
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:34:8b:06:53:09:f7:06:68:f6:97:69:a2:be:50:ad:dc:
         f3:f1:0e:fb:ba:28:9c:d0:98:e2:87:2a:b1:22:c2:9a:38:f6:
         64:81:c4:05:64:d2:28:e5:a2:4b:2e:a4:66:5a:82:93:51:7e:
         b5:0f:c5:00:0e:db:00:da:80:4a:c8:ca:85:fb:8b:7f:6f:19:
         d0:9c:0f:75:db:04:a8:8e:85:dd:b4:da:58:4f:a4:f1:81:6d:
         ae:55:61:76:09:eb:d6:c6:51:8b:da:fd:dd:fa:e6:64:b9:ac:
         8b:bd:b5:fd:2d:71:a5:59:a2:8b:9f:dc:26:4d:2a:4a:fc:37:
         2d:24:34:d1:d4:ef:1c:34:73:6b:cb:d5:95:18:a0:47:4b:3f:
         cc:af:82:73:09:a1:7f:81:e8:5a:1f:a1:e7:d9:50:fd:f2:8a:
         ce:7b:97:f0:f4:a0:1c:14:e6:a3:7f:3e:55:03:65:a1:5d:ad:
         c9:0d:6c:6a:47:67:c7:4a:81:a5:53:ea:03:8a:27:86:20:fc:
         c9:eb:aa:50:ee:d5:5b:d1:3c:8d:8d:7b:a9:0b:f1:a5:3c:73:
         2c:56:28:d8:ae:d5:c8:b0:10:cb:c7:68:3a:43:1d:52:56:97:
         11:ee:aa:26:d8:d2:6c:7b:60:9a:f9:99:15:7e:4e:ac:76:7e:
         08:63:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org