Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e20313532333738.roa
File:                     3135372e31352e3231342e302f32332d3234203d3e20313532333738.roa (raw, json)
Hash identifier:          liHa6XbONXNaoIz07RRTxaRk5Iv4uUwcxAT6wdeyS3I=
Subject key identifier:   96:9E:0B:F4:2F:D9:14:93:7C:EE:61:00:D7:5A:CD:90:93:69:D4:E9
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       1637C2623B5D970D3B12A33B8DFE45C298F78FF6
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e20313532333738.roa
Signing time:             Fri 23 Feb 2024 07:24:00 +0000
ROA not before:           Fri 23 Feb 2024 07:19:00 +0000
ROA not after:            Fri 21 Feb 2025 07:24:00 +0000
asID:                     152378
IP address blocks:        157.15.214.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:c2:62:3b:5d:97:0d:3b:12:a3:3b:8d:fe:45:c2:98:f7:8f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 23 07:19:00 2024 GMT
            Not After : Feb 21 07:24:00 2025 GMT
        Subject: CN=969E0BF42FD914937CEE6100D75ACD909369D4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:f6:5e:07:8b:e8:9e:15:47:34:a0:4f:69:
                    6a:43:c7:9c:8b:9d:7a:53:09:6c:83:71:4a:6c:57:
                    4b:0a:02:27:e0:11:80:f9:00:60:29:aa:a0:9e:a8:
                    3c:6f:ed:0d:80:8b:4b:82:d4:be:04:e5:7f:ac:1f:
                    a5:9b:eb:06:d3:f5:ce:09:11:0b:17:9e:1a:22:f4:
                    1c:d7:48:d3:e4:05:9c:4a:55:7a:5b:84:ff:00:6e:
                    f6:ff:e5:6e:0d:e3:75:63:84:1c:12:84:af:09:29:
                    7c:e5:22:e3:56:99:94:7a:dd:46:7c:f9:d5:34:80:
                    da:4d:0a:5b:ef:f2:60:98:f5:96:70:3f:3f:b8:de:
                    8b:a0:73:db:6c:31:2a:f3:5a:c7:55:64:96:ff:21:
                    73:b7:55:b8:f1:a2:84:c9:b7:65:0e:4d:b0:1e:f8:
                    c1:95:e6:da:e7:68:a4:20:b4:0d:58:69:a9:d3:89:
                    23:da:09:cf:40:c3:4f:54:67:7f:9d:50:e1:0d:11:
                    d7:f8:c7:9b:b1:29:a4:44:55:c7:6f:d8:7e:d6:9c:
                    0b:1d:06:b5:fb:f5:f9:74:41:8d:24:51:2c:ff:60:
                    96:9f:9b:ff:be:7d:85:ff:f6:ee:4a:17:8e:88:f2:
                    4e:0d:9b:3a:12:64:06:79:8a:a4:b9:fe:07:cb:62:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9E:0B:F4:2F:D9:14:93:7C:EE:61:00:D7:5A:CD:90:93:69:D4:E9
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e20313532333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:62:e3:bc:3a:30:ac:34:0b:d3:91:10:09:1c:2e:2b:3f:
         da:85:cb:7f:74:92:76:7e:8b:06:57:b7:6f:12:d1:cf:62:84:
         a8:45:12:9a:60:de:57:0f:09:68:b0:67:cd:93:6f:d5:d7:16:
         55:a8:e3:5a:62:f3:fd:4a:59:12:8f:22:39:ae:b4:d9:f4:41:
         16:a4:ee:29:bb:ce:fe:51:b5:28:d6:34:d7:2d:c5:e9:54:57:
         8d:58:2e:98:b0:b4:4b:15:37:93:00:01:5d:64:8e:24:b5:ca:
         d3:61:ff:e9:7d:07:ee:02:a8:24:ab:b8:37:5b:2d:e6:ef:d8:
         eb:d2:18:19:9c:db:33:35:fe:83:30:97:70:44:73:1f:32:9e:
         70:80:ab:a0:1f:3d:bb:3a:7b:7b:ab:43:a9:d7:44:c9:69:61:
         12:c2:b8:63:8a:08:10:c1:59:77:6b:17:16:a6:d8:30:52:25:
         23:6b:6a:e3:26:20:d6:cc:2b:2f:85:52:f7:0d:24:5b:09:d8:
         7f:3b:02:a5:87:53:6d:e4:69:b2:16:3b:5f:27:0e:5e:3d:0d:
         7a:69:e1:39:dc:67:3d:00:b4:23:a5:ef:7d:92:28:bd:4c:1b:
         87:39:d6:7c:1e:9b:7f:c0:a6:8d:c1:91:6e:1a:b4:cf:ba:96:
         8f:91:be:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUFjfCYjtdlw07EqM7jf5Fwpj3j/YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDIyMzA3MTkwMFoX
DTI1MDIyMTA3MjQwMFowMzExMC8GA1UEAxMoOTY5RTBCRjQyRkQ5MTQ5MzdDRUU2
MTAwRDc1QUNEOTA5MzY5RDRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhe9l4Hi+ieFUc0oE9pakPHnIudelMJbINxSmxXSwoCJ+ARgPkAYCmqoJ6o
PG/tDYCLS4LUvgTlf6wfpZvrBtP1zgkRCxeeGiL0HNdI0+QFnEpVeluE/wBu9v/l
bg3jdWOEHBKErwkpfOUi41aZlHrdRnz51TSA2k0KW+/yYJj1lnA/P7jei6Bz22wx
KvNax1Vklv8hc7dVuPGihMm3ZQ5NsB74wZXm2udopCC0DVhpqdOJI9oJz0DDT1Rn
f51Q4Q0R1/jHm7EppERVx2/YftacCx0Gtfv1+XRBjSRRLP9glp+b/759hf/27koX
jojyTg2bOhJkBnmKpLn+B8ticnkCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBSWngv0
L9kUk3zuYQDXWs2Qk2nU6TAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz
MTM1MmUzMjMxMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM3Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGdD9YwDQYJKoZIhvcNAQELBQADggEBABUtYuO8OjCsNAvTkRAJ
HC4rP9qFy390knZ+iwZXt28S0c9ihKhFEppg3lcPCWiwZ82Tb9XXFlWo41pi8/1K
WRKPIjmutNn0QRak7im7zv5RtSjWNNctxelUV41YLpiwtEsVN5MAAV1kjiS1ytNh
/+l9B+4CqCSruDdbLebv2OvSGBmc2zM1/oMwl3BEcx8ynnCAq6AfPbs6e3urQ6nX
RMlpYRLCuGOKCBDBWXdrFxam2DBSJSNrauMmINbMKy+FUvcNJFsJ2H87AqWHU23k
abIWO18nDl49DXpp4TncZz0AtCOl732SKL1MG4c51nwem3/Apo3BkW4atM+6lo+R
vi8=
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org