Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa
File:                     3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (raw, json)
Hash identifier:          rlRoREqH3GBWi4gtO2pznE3ezYOKKSTuRmJPe4qM4yY=
Subject key identifier:   73:AD:48:40:8D:33:88:FE:D4:D4:53:A1:F0:D4:7D:5E:75:57:89:3D
Certificate issuer:       /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169
Certificate serial:       2D95F3F0E7E9C1123F62D5681B07B0E51BDC17E3
Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa
Signing time:             Mon 05 Feb 2024 23:27:35 +0000
ROA not before:           Mon 05 Feb 2024 23:22:35 +0000
ROA not after:            Mon 03 Feb 2025 23:27:35 +0000
asID:                     152345
IP address blocks:        157.10.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl
                          rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:f3:f0:e7:e9:c1:12:3f:62:d5:68:1b:07:b0:e5:1b:dc:17:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169
        Validity
            Not Before: Feb  5 23:22:35 2024 GMT
            Not After : Feb  3 23:27:35 2025 GMT
        Subject: CN=73AD48408D3388FED4D453A1F0D47D5E7557893D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:3a:d4:38:0d:4a:78:4a:29:76:14:a8:88:
                    35:ea:d9:fe:b9:91:17:1d:1b:8c:2c:dd:d1:85:fe:
                    e9:e3:12:75:7f:ec:79:0f:dd:a3:fa:41:fb:e5:ac:
                    33:12:76:3a:83:47:61:52:6f:e6:cb:8b:0e:55:10:
                    27:a6:f8:6c:80:8f:b1:e9:d2:78:bd:4b:1c:f4:be:
                    10:cc:cf:f5:f8:31:1e:a0:f3:d8:0f:83:e6:c2:e4:
                    26:dc:91:8e:32:95:75:e0:7f:e6:ca:8b:c9:00:30:
                    cb:87:32:aa:f3:fa:58:32:9a:c7:28:da:b2:5e:9a:
                    ad:3c:4e:d2:1f:49:96:07:f6:c7:5f:e1:cb:bd:f5:
                    d8:bf:b9:2c:eb:8a:1c:64:ae:c0:50:92:86:e6:b5:
                    36:02:d3:e8:f1:b0:54:e8:2a:28:75:2b:73:0c:b3:
                    10:1d:02:9f:1f:bd:e8:8f:be:a4:44:27:fd:65:4d:
                    6e:eb:ac:eb:2d:f0:a7:cb:64:07:9e:6e:38:7e:c6:
                    68:10:a2:8d:26:c5:96:0a:01:22:6c:7b:65:6e:d8:
                    a9:f4:18:b6:f8:b7:85:39:32:a4:6d:43:af:b6:3b:
                    ca:d1:39:94:67:b7:ef:ed:35:7b:85:65:d6:a0:5f:
                    75:8e:1f:b3:fb:6a:39:50:5a:10:a0:7b:f8:e6:07:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:48:40:8D:33:88:FE:D4:D4:53:A1:F0:D4:7D:5E:75:57:89:3D
            X509v3 Authority Key Identifier:
                keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:db:f1:a1:5e:2d:b8:15:8d:d2:4c:99:ee:4c:21:1c:61:34:
         b2:01:97:8b:f4:c4:be:91:ca:c3:6b:3a:e4:f3:cc:bc:a5:20:
         e1:8f:fb:a9:5b:b0:50:d4:76:75:62:c1:2a:59:2c:0d:fe:55:
         59:3d:64:fd:43:f8:c3:0c:89:20:d8:2e:fe:51:d6:1f:48:e2:
         ba:57:87:86:dd:f5:fa:52:15:44:a5:ed:2f:59:52:89:ae:65:
         44:50:fb:42:02:25:95:b5:c7:64:fa:27:9f:fc:95:39:fd:44:
         e3:d1:4c:e8:2b:68:12:9f:db:75:36:54:7b:28:5f:c7:b7:37:
         7a:d4:81:80:8b:e6:5b:a9:4f:a2:c6:1d:56:0a:a4:60:f8:b4:
         73:be:49:99:0b:d8:0f:31:5e:f1:9e:cb:fb:06:e8:14:de:3d:
         d2:46:68:76:ea:f9:79:8c:fe:2a:96:15:bb:f9:3f:e9:09:4f:
         ed:58:18:b0:6e:0e:ad:a4:13:a0:dd:33:be:43:4c:0c:68:e2:
         d1:1f:52:7b:4e:35:df:86:63:14:97:d1:60:f6:80:7d:29:39:
         15:4c:ad:49:a2:4f:03:4a:0c:42:f2:e3:3e:9f:59:4b:2b:7d:
         4f:bc:9f:ba:4a:bc:79:5d:20:db:31:c5:1f:91:79:de:22:c8:
         d1:53:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org