Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
File:                     3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json)
Hash identifier:          gtrxWLTUUK/9cic3LQcG0gm6wWTZPBzQJuTfP2YYzrk=
Subject key identifier:   D7:E5:01:85:DE:82:B1:BE:5B:45:76:2F:24:9E:EC:5B:B3:9D:4B:80
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6DE479262D01EBBA7C4E3B0F6B54E89FA6454746
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
Signing time:             Wed 28 Feb 2024 07:04:38 +0000
ROA not before:           Wed 28 Feb 2024 06:59:38 +0000
ROA not after:            Wed 26 Feb 2025 07:04:38 +0000
asID:                     152389
IP address blocks:        157.15.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e4:79:26:2d:01:eb:ba:7c:4e:3b:0f:6b:54:e8:9f:a6:45:47:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 28 06:59:38 2024 GMT
            Not After : Feb 26 07:04:38 2025 GMT
        Subject: CN=D7E50185DE82B1BE5B45762F249EEC5BB39D4B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:db:f6:ff:3c:b2:7e:1f:f2:fd:be:28:6e:
                    0f:d8:3c:28:19:f9:3e:d9:1d:fb:1b:ba:db:6d:84:
                    63:76:04:32:4f:b1:5c:df:66:c9:0a:9f:d3:eb:ea:
                    8c:40:9e:77:73:65:95:0d:bb:79:57:6e:b0:4c:23:
                    25:47:1e:2f:fa:b2:f1:c1:f7:24:18:88:1c:bf:de:
                    d9:03:e2:3b:d8:71:07:fb:2f:33:10:a9:86:43:29:
                    ac:06:de:27:88:3f:b4:4f:eb:20:5d:17:ff:95:1b:
                    6f:4a:a8:fb:e1:76:54:b8:6c:e5:0b:e0:cd:b2:b6:
                    65:be:ad:28:36:f9:d8:3c:b0:c7:1b:50:27:b8:bc:
                    38:71:c5:3b:7d:5d:79:8e:16:56:93:9b:fe:79:ff:
                    fd:a7:d9:aa:c1:d2:6a:07:7f:e1:9a:18:ca:ed:84:
                    43:8b:13:d8:24:f1:60:e5:fb:a2:ff:2e:ce:3e:7d:
                    3d:51:d4:f1:a3:da:82:e1:1e:9f:13:a4:aa:12:fc:
                    f4:7a:2a:bc:97:be:6c:59:f0:a1:bf:9f:1f:9d:e0:
                    b7:70:fe:6b:13:d3:8d:4e:24:40:5c:df:cf:d4:c3:
                    7f:ba:d6:b0:d3:c9:6f:4c:3b:a1:4e:25:8f:bc:b7:
                    c2:38:f6:f2:1f:c3:7b:2b:2e:5e:77:49:6a:84:41:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:01:85:DE:82:B1:BE:5B:45:76:2F:24:9E:EC:5B:B3:9D:4B:80
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:42:7d:2b:42:8f:d7:81:ea:3e:ba:ee:6d:97:25:6e:38:
         da:1a:f4:e1:fb:84:63:45:c7:9f:d3:5f:fa:29:b8:ff:b6:bb:
         c2:b9:6f:40:1f:87:a7:4e:1a:23:9c:70:74:9c:64:c7:fd:e1:
         0c:7f:ca:7a:2e:e1:a0:4b:8d:c8:56:6c:64:cb:05:ba:44:54:
         04:52:bb:8b:5a:f5:ae:2f:da:02:0c:8c:83:0d:52:86:d5:70:
         08:6e:2f:80:95:5f:f1:e5:b9:49:44:a6:45:4b:7a:bc:57:6f:
         93:39:e1:57:17:ed:81:7d:90:2c:57:96:6a:fc:fe:c5:d6:38:
         29:df:7d:e9:8c:86:36:90:89:52:ce:49:08:62:15:a1:06:b9:
         ab:c1:0a:72:71:b1:79:3e:ec:fb:21:a7:54:49:c1:df:e8:ee:
         a5:7f:b1:a3:d9:24:cd:fc:09:40:27:31:da:22:09:37:0b:9a:
         84:63:c6:2d:9d:db:d3:c1:ea:79:3d:e7:ad:b2:35:f5:18:01:
         f4:94:88:fe:87:41:65:77:77:08:de:33:a3:4b:5d:7c:97:dc:
         1e:c9:7e:de:96:72:69:5e:64:ec:08:d3:0a:aa:b7:7f:4c:ab:
         fe:9b:8f:c5:f4:66:1e:3b:42:17:b7:81:e0:f2:93:9c:b6:c6:
         9c:95:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org