Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa
File:                     3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (raw, json)
Hash identifier:          OD3JiPGHDiL7kIqgNDTr6d3lXB+Vqj+hZ7qDs1qxRC4=
Subject key identifier:   05:46:1A:DC:06:91:60:2C:AD:92:90:26:DD:56:60:6D:FC:A8:58:8F
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       257437E01A904F7F381E7397898BB516ED2CFEA4
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa
Signing time:             Wed 24 Jul 2024 14:00:01 +0000
ROA not before:           Wed 24 Jul 2024 13:55:01 +0000
ROA not after:            Wed 23 Jul 2025 14:00:01 +0000
asID:                     38505
IP address blocks:        150.107.104.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:74:37:e0:1a:90:4f:7f:38:1e:73:97:89:8b:b5:16:ed:2c:fe:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Jul 24 13:55:01 2024 GMT
            Not After : Jul 23 14:00:01 2025 GMT
        Subject: CN=05461ADC0691602CAD929026DD56606DFCA8588F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:c2:d7:21:31:f9:65:89:b0:5a:e0:d2:c4:
                    fe:62:c8:2a:62:8f:76:7f:56:6f:39:ce:28:b0:40:
                    39:cc:af:fb:89:f3:95:4b:88:d7:3c:88:b1:ef:a3:
                    47:ae:ab:ea:9c:0f:6b:20:e8:06:03:e8:93:3d:fc:
                    12:12:5d:db:5b:59:eb:f9:8c:c3:e3:86:5e:a3:f6:
                    39:62:6e:6f:82:ab:ca:9b:e0:91:c7:02:d9:a9:8e:
                    a4:8c:a2:b8:cc:34:df:59:b3:2f:9e:97:a0:15:ff:
                    b4:fd:e5:2e:5a:ff:a0:4f:f1:fa:3f:b8:69:78:c9:
                    57:c5:87:4a:f4:89:15:cd:31:66:64:7c:7b:ef:45:
                    70:54:1b:8a:c2:5c:68:58:cd:0b:73:ea:99:8b:30:
                    c7:c1:72:fe:ae:df:d5:65:39:4c:60:79:e6:99:b2:
                    af:56:57:2e:37:79:b0:ce:25:99:37:db:ae:29:b6:
                    11:e1:81:97:0b:4d:9c:c8:ca:99:83:d5:3c:6a:e1:
                    92:6a:a2:9a:9b:75:6c:db:5b:8f:3d:ca:93:99:62:
                    03:63:2a:df:38:ce:b9:f2:42:6a:35:c9:80:3d:ba:
                    59:34:0f:62:b8:aa:0a:e8:14:6e:83:ee:c2:80:2a:
                    90:eb:5d:83:41:12:60:d5:3b:f2:3c:9a:3a:a9:15:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:1A:DC:06:91:60:2C:AD:92:90:26:DD:56:60:6D:FC:A8:58:8F
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:59:45:28:fa:8f:cd:0d:1a:d4:34:53:11:bf:ba:fd:9b:57:
         c0:1c:61:d2:23:13:14:53:ba:59:de:a8:75:91:d5:41:7d:f5:
         f1:8c:03:ae:57:dd:3b:0b:cd:72:ff:ff:35:09:df:5f:d0:e0:
         d2:19:ea:9b:4c:94:41:a7:0b:2f:87:45:1c:07:2a:a0:02:f6:
         1b:d9:46:bb:80:da:6a:65:fd:22:f8:b0:1f:6c:ae:90:a3:f7:
         49:f5:45:ad:d7:33:28:42:11:7c:c9:6f:31:c6:7d:1f:8f:4d:
         56:90:6a:81:e9:00:78:c1:73:fb:0d:6b:ed:65:ea:ea:76:28:
         39:86:82:90:50:1b:31:06:5c:3b:5c:81:fd:4d:16:d4:76:00:
         ef:fe:3b:df:3d:17:d4:5b:b9:8c:39:a3:56:07:58:53:63:a8:
         c4:81:e4:90:35:73:bc:3a:72:68:37:e1:9d:df:f2:b3:24:25:
         61:7b:de:70:12:f8:ee:dd:11:e7:db:dc:98:e9:fd:55:2a:02:
         90:ec:3a:ad:66:b6:86:ce:69:15:73:3a:87:60:1f:2b:6e:59:
         d4:56:a2:39:b0:07:cb:a3:e0:3c:df:1a:8b:20:f6:2a:75:20:
         22:62:b1:3d:b0:67:3e:ca:d7:5d:21:02:7c:60:a1:8e:14:90:
         0e:02:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org