Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3133392e302f32342d3234203d3e20313431363432.roa
File:                     3135372e31352e3133392e302f32342d3234203d3e20313431363432.roa (raw, json)
Hash identifier:          emWROUhAXzn510vxZM6OHcISsOPxKgXv1ei5pTePDhU=
Subject key identifier:   9E:45:8B:D5:8B:03:66:1F:81:53:44:98:65:48:91:2C:0D:0F:A7:96
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       61DEA4CB41A8A4F2A0EBFD2A897EAD72323E52BC
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3133392e302f32342d3234203d3e20313431363432.roa
Signing time:             Thu 15 Feb 2024 02:17:30 +0000
ROA not before:           Thu 15 Feb 2024 02:12:30 +0000
ROA not after:            Thu 13 Feb 2025 02:17:30 +0000
asID:                     141642
IP address blocks:        157.15.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:de:a4:cb:41:a8:a4:f2:a0:eb:fd:2a:89:7e:ad:72:32:3e:52:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 15 02:12:30 2024 GMT
            Not After : Feb 13 02:17:30 2025 GMT
        Subject: CN=9E458BD58B03661F815344986548912C0D0FA796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:32:fb:9b:14:8f:19:ef:ae:39:fd:da:11:
                    97:e0:f6:db:7e:ea:84:58:8f:5d:c7:ff:23:c4:14:
                    23:3d:88:06:28:46:b0:db:41:db:79:96:68:96:e9:
                    d5:ff:eb:c5:82:d9:1c:3c:fb:b5:64:b3:0a:94:5f:
                    4d:57:7c:0e:fa:d1:b9:f1:d9:1c:d5:12:a1:30:41:
                    f7:4d:22:cd:89:b5:34:d7:a2:bb:e0:20:06:19:ec:
                    4b:98:84:8c:cb:29:d4:36:a0:2a:d3:28:fe:7d:dc:
                    a6:8c:52:eb:30:f7:95:be:24:78:65:bf:96:8b:fb:
                    65:3e:c3:b5:a7:0c:44:5d:82:cd:c6:09:e7:71:15:
                    93:7e:17:98:ba:b6:64:dd:76:4e:5f:c5:9d:06:60:
                    72:7b:90:7f:79:47:d9:4a:81:33:60:0f:b2:c5:26:
                    db:82:ee:ec:0b:1a:29:d2:b9:ee:89:6a:1d:a6:76:
                    70:53:3e:9b:81:36:58:13:c5:ab:a8:5b:f8:b7:15:
                    48:8c:4a:fd:76:c8:c6:09:b8:18:ff:35:8c:db:d8:
                    83:ab:f0:aa:e3:93:89:49:82:36:a2:d3:61:6a:fe:
                    37:b8:98:58:f2:0e:96:bf:e4:ff:40:f5:89:e6:98:
                    59:dc:e4:c1:45:cf:79:7e:53:29:e1:e6:e6:7c:b4:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:45:8B:D5:8B:03:66:1F:81:53:44:98:65:48:91:2C:0D:0F:A7:96
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3133392e302f32342d3234203d3e20313431363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:9a:f8:0c:3b:60:19:79:e9:0e:bf:15:8d:88:cc:7d:fc:
         97:43:4c:a8:0f:be:3b:62:db:9d:14:31:ea:24:d2:26:84:55:
         25:2b:40:be:da:73:ed:3b:82:24:6e:b2:cc:2a:5d:84:50:23:
         66:77:c0:0e:c9:8a:8f:7f:5a:ab:30:ea:bc:5a:e8:b5:09:73:
         d4:44:4b:cb:08:14:ac:11:4d:d2:41:68:23:92:5c:c5:e7:43:
         af:fe:28:48:b6:a0:48:f8:4d:bc:d1:1e:d2:e8:e1:cb:66:58:
         07:dc:b4:d2:dd:5a:ca:e5:4b:2c:59:cc:cc:17:4b:65:ef:2a:
         8f:42:10:f1:f1:11:4c:8b:83:df:57:aa:b3:c7:69:8d:d9:8f:
         c5:21:f2:d8:b7:f3:95:17:7d:8a:94:f0:ab:75:b9:97:ae:6a:
         c5:a5:39:0c:54:ee:c5:e6:35:a4:43:8e:ff:64:28:cd:51:e4:
         ec:f0:67:9d:d2:40:72:7c:8b:90:2c:bc:f0:63:b1:41:b2:60:
         da:d9:de:37:64:01:bd:b8:18:05:cd:e0:7d:ea:4b:94:2c:14:
         3a:72:e6:bf:b9:37:02:12:ab:ca:2c:ea:53:10:42:96:b0:cc:
         20:11:aa:14:13:14:bf:b7:5d:c0:a8:8b:ed:0f:90:1c:5a:c8:
         5c:74:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org