Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313439343035.roa
File:                     3135372e31352e3132342e302f32332d3234203d3e20313439343035.roa (raw, json)
Hash identifier:          f90rHsTkFz8i6I1VCpMD9R7obtotQsGIJmcHDw92pk8=
Subject key identifier:   74:C4:E1:21:AD:AE:A1:82:67:94:8E:84:D9:45:A8:AE:8B:6C:79:DF
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4B00CDC75940D63F2EA6BFD062EBB9EDC0D77526
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313439343035.roa
Signing time:             Thu 15 Feb 2024 05:59:06 +0000
ROA not before:           Thu 15 Feb 2024 05:54:06 +0000
ROA not after:            Thu 13 Feb 2025 05:59:06 +0000
asID:                     149405
IP address blocks:        157.15.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:00:cd:c7:59:40:d6:3f:2e:a6:bf:d0:62:eb:b9:ed:c0:d7:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 15 05:54:06 2024 GMT
            Not After : Feb 13 05:59:06 2025 GMT
        Subject: CN=74C4E121ADAEA18267948E84D945A8AE8B6C79DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:d0:d5:a9:9d:2e:6e:a6:20:e1:6f:2f:c4:
                    3e:11:30:9f:53:e1:88:4c:8b:f7:4a:cc:65:86:38:
                    92:b9:b5:2d:b4:87:a0:fa:2d:3b:2e:c2:7f:49:12:
                    34:c8:1c:0f:9d:cc:42:de:ca:8d:f1:ae:6b:be:b4:
                    26:36:52:0d:3a:dc:3f:98:17:19:95:8f:ce:66:03:
                    9a:bd:99:32:6f:57:ba:d3:64:5d:72:96:ad:d2:d0:
                    41:a1:f5:d8:b3:84:d9:8d:c7:bd:35:a9:da:13:52:
                    8c:ad:08:f5:d2:5e:95:c9:41:a9:70:99:9e:33:0d:
                    ba:1c:33:29:a0:24:fb:b4:5f:4b:b3:db:8b:7b:57:
                    2d:41:f7:28:37:9a:b3:01:92:91:4f:b6:b8:fc:1d:
                    3b:5f:4d:a5:9f:93:93:5d:fe:32:bf:e8:5f:a9:89:
                    42:6e:03:c9:fb:8b:bd:28:af:1b:b5:97:56:46:30:
                    34:47:3f:bd:3f:36:42:09:43:50:cd:84:82:92:a9:
                    67:2f:70:8c:61:5e:9d:7f:a8:29:3c:e1:c8:ce:3b:
                    6f:09:b4:88:30:68:a4:7b:48:d3:50:1e:9d:97:4a:
                    53:a8:56:4a:4b:c8:b4:40:a2:4d:f1:0d:a9:a6:80:
                    b6:e2:48:24:8f:96:b4:fb:c1:40:43:d7:2e:56:63:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C4:E1:21:AD:AE:A1:82:67:94:8E:84:D9:45:A8:AE:8B:6C:79:DF
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313439343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:c6:97:48:8b:4e:8f:39:b2:12:bd:44:58:34:9c:60:8a:
         78:07:d7:09:b5:d0:1b:4d:e3:a9:b1:4e:c2:54:71:59:74:9f:
         44:fb:77:b1:f6:fd:4b:f5:a5:df:b3:48:0c:d2:6f:29:e5:6b:
         e6:a8:94:f0:43:9b:01:0d:7f:e1:32:fc:1c:6d:e7:85:f1:d0:
         da:92:8d:1f:32:6c:70:ea:35:01:de:b9:ae:e7:d0:b6:43:82:
         d1:a7:5c:b6:46:a9:3e:2a:f9:bf:08:44:d3:f2:38:bb:4f:59:
         da:7b:e0:d0:f8:8d:71:69:f8:aa:83:7c:c4:fc:92:b3:b5:8a:
         cd:3d:63:33:8d:5e:03:ae:55:d9:5c:7c:0b:03:e1:7b:72:25:
         3d:43:c7:6d:12:25:fd:7e:75:29:b5:44:85:5e:52:fc:30:b2:
         28:a8:3a:81:17:50:36:c7:db:5e:a4:b9:77:1b:4b:9d:39:24:
         01:c1:01:a5:0d:a3:a1:5f:c6:3f:c7:f9:bd:63:20:c9:bb:58:
         e6:bc:bc:5c:65:cf:55:0a:d1:db:88:42:00:3e:f1:31:d4:e7:
         eb:60:b7:0e:5f:01:bd:ca:38:09:b7:6a:ad:3d:12:c3:0d:72:
         41:b2:a4:2f:72:a8:4b:b1:bf:f8:17:f6:33:b8:85:e1:5f:92:
         17:7c:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org