Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa
File:                     3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          KkE/+/boXEDAYdRHJzavV0nRvpfqeRL5e7S4u4lBui8=
Subject key identifier:   03:43:D9:A5:70:57:EE:C3:90:2B:26:0E:C5:08:48:B7:4F:1B:6D:D7
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       47FF75B8847B8397C257BB284E94598ACF53FB2B
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa
Signing time:             Fri 03 May 2024 08:19:23 +0000
ROA not before:           Fri 03 May 2024 08:14:23 +0000
ROA not after:            Fri 02 May 2025 08:19:23 +0000
asID:                     55685
IP address blocks:        150.107.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ff:75:b8:84:7b:83:97:c2:57:bb:28:4e:94:59:8a:cf:53:fb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: May  3 08:14:23 2024 GMT
            Not After : May  2 08:19:23 2025 GMT
        Subject: CN=0343D9A57057EEC3902B260EC50848B74F1B6DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:23:fe:7d:c8:e3:b1:84:d7:40:0d:6b:3e:
                    08:03:3c:9d:89:6e:cb:be:8c:e7:7e:c4:59:26:39:
                    71:6e:a6:eb:76:e3:ce:80:d8:0a:71:0e:e2:9f:f9:
                    36:e7:25:30:64:24:8e:3d:96:71:f8:44:61:f9:95:
                    f4:04:98:d8:37:69:16:e5:4b:d0:3e:aa:02:ce:77:
                    bb:16:cd:ad:6b:2c:c4:58:70:f7:7a:ee:04:a1:53:
                    3b:01:62:52:3d:d5:ad:8f:bc:bd:75:4f:a2:90:e5:
                    fa:a1:09:15:13:9d:0b:51:24:7e:1f:49:a9:1b:2a:
                    32:17:91:95:5d:4b:2f:71:24:b9:6e:88:46:c4:62:
                    21:4c:9c:85:65:fb:cc:05:0d:a8:79:a6:3f:6f:67:
                    94:02:ee:62:d2:fe:74:42:0c:36:55:49:4d:12:bc:
                    df:d7:56:93:40:65:d1:35:05:7d:3f:d6:f8:01:9b:
                    13:e6:a8:de:c6:91:2e:14:e5:f0:fa:47:0f:a1:c5:
                    86:2e:9e:84:73:a9:a9:40:ec:9a:da:2f:bc:33:bc:
                    43:1e:59:bd:55:06:1a:9f:10:c7:63:a4:8d:6d:a4:
                    62:ae:b2:71:ac:96:b0:e1:fd:44:ce:72:c7:b6:56:
                    7f:1c:3a:e5:9a:ce:22:35:fa:47:b9:30:50:8b:89:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:D9:A5:70:57:EE:C3:90:2B:26:0E:C5:08:48:B7:4F:1B:6D:D7
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134322e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:c9:2f:ec:6b:45:ef:eb:60:6c:89:d9:9d:84:ef:c5:4f:
         95:94:e2:95:7f:53:ec:57:09:31:15:78:1f:5d:68:3b:95:b9:
         29:02:ee:5f:b1:6d:4e:c5:54:f6:34:7e:e0:f3:be:2b:c2:3d:
         18:02:1f:2e:4a:85:04:2d:94:12:07:cd:79:e0:51:2b:53:b1:
         49:ef:7a:2d:4d:f2:49:e4:ce:1f:ac:f2:35:1f:06:4c:1c:ae:
         47:4b:62:1d:b7:a6:ee:0e:be:57:4b:eb:8b:e8:12:68:f1:cf:
         21:33:33:97:aa:ff:96:ec:23:8c:0f:72:00:90:62:af:2a:3b:
         51:bc:0d:e5:ed:2d:09:a2:a8:d7:96:4f:85:c4:d0:2c:a5:3d:
         6e:fb:b7:ac:50:f3:97:4e:ab:96:e1:9b:03:e5:62:a2:4c:c3:
         cc:ac:1a:ee:52:e9:99:fa:be:2e:d3:68:3c:d6:97:39:f6:4a:
         49:d5:62:2a:a6:00:61:8b:09:7c:4b:a3:6f:1b:3b:05:e7:3c:
         22:92:56:2c:50:1e:e2:b7:5d:5f:98:63:7f:16:45:11:68:8d:
         8c:a7:6e:9e:21:a8:68:b0:b0:bc:a6:ad:4f:f4:15:7c:f7:71:
         99:1a:27:0e:7e:54:63:7c:58:16:73:0b:7b:0c:3b:68:83:28:
         54:0d:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org