Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e36322e302f32332d3234203d3e20313532333733.roa
File:                     3135372e31352e36322e302f32332d3234203d3e20313532333733.roa (raw, json)
Hash identifier:          Atg92JzUuqCCVh1qlty9KRxnQRqMksPha7FMDJ7aMHI=
Subject key identifier:   A6:C8:3E:5D:E6:65:89:65:60:07:77:EF:0E:0C:89:75:57:91:8C:06
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4E66D22973AEF7BF4285AB3A2974E9EC110FFAD2
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e36322e302f32332d3234203d3e20313532333733.roa
Signing time:             Wed 20 Mar 2024 04:24:52 +0000
ROA not before:           Wed 20 Mar 2024 04:19:52 +0000
ROA not after:            Wed 19 Mar 2025 04:24:52 +0000
asID:                     152373
IP address blocks:        157.15.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 07:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:d2:29:73:ae:f7:bf:42:85:ab:3a:29:74:e9:ec:11:0f:fa:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Mar 20 04:19:52 2024 GMT
            Not After : Mar 19 04:24:52 2025 GMT
        Subject: CN=A6C83E5DE6658965600777EF0E0C897557918C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:aa:6e:50:d3:b7:7c:21:9e:fa:cc:f0:92:
                    f0:9f:d1:9b:e5:30:0f:17:6e:e0:74:0f:79:1f:bc:
                    c8:51:2c:8c:49:89:46:0f:a0:8e:aa:f9:28:f2:ae:
                    8d:e5:04:ba:1c:1e:1d:a2:2e:6f:8f:e9:54:53:96:
                    68:4b:56:6c:b8:ec:88:b6:06:aa:aa:e6:62:53:8b:
                    4b:b6:e5:c1:99:4a:35:a6:72:a3:f2:27:02:3e:42:
                    0f:3b:2c:73:cb:54:d5:6c:68:0b:91:96:70:2c:22:
                    37:db:4c:e9:1b:a5:ee:f3:51:83:f7:7d:39:b4:b7:
                    e7:5d:a5:17:3e:87:ec:ea:5a:26:87:3d:d1:6a:e1:
                    59:25:08:87:73:20:a1:8f:15:39:77:75:b0:6e:90:
                    74:90:c1:78:51:4b:be:56:d2:dc:62:53:5e:62:4b:
                    e7:9c:eb:80:ca:78:48:a0:21:d9:28:54:9b:16:18:
                    40:aa:5c:67:78:2d:1e:1d:94:e9:3a:31:80:15:4c:
                    24:74:d9:77:bb:3b:82:b7:de:53:cc:8b:62:b5:3b:
                    01:07:44:29:6e:b1:af:81:16:97:55:d5:f9:3d:e9:
                    f2:ac:eb:c5:00:bb:69:45:e2:22:a9:84:b0:de:d2:
                    97:c6:36:b4:cd:da:79:45:c0:59:c0:51:c8:33:d9:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:3E:5D:E6:65:89:65:60:07:77:EF:0E:0C:89:75:57:91:8C:06
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e36322e302f32332d3234203d3e20313532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:4c:82:4b:52:9c:c2:64:fd:5e:d3:3e:99:b2:2e:5f:b6:
         ba:22:e5:49:35:e9:7d:5c:1b:c6:85:e5:17:3c:e7:3e:fc:96:
         2f:b2:23:57:c4:47:19:ce:5f:7a:bf:6b:c0:a4:a1:94:28:34:
         56:ba:33:ac:46:b2:f5:d4:af:c7:21:8f:96:63:e1:34:f0:c5:
         21:86:1b:dc:cd:28:ec:6e:42:7e:10:95:1f:ce:41:ea:2d:c6:
         ab:5d:56:16:7b:69:87:31:60:76:02:35:2f:31:0a:62:e7:34:
         c8:6d:5a:38:ff:5f:78:4a:87:af:03:81:64:ab:12:49:50:cc:
         de:d6:a9:b5:ff:e4:a9:c8:bf:e6:3c:1f:32:64:bb:13:72:5a:
         fc:2c:e1:24:97:78:1c:50:b1:e9:a2:c3:ff:e3:05:54:07:0f:
         e5:61:15:34:45:a1:83:9c:82:8e:18:b3:0e:ee:e8:ad:ab:1c:
         e3:c2:ba:d2:4f:fa:76:5f:87:ce:60:8c:26:d0:3a:1e:a8:e8:
         d7:bf:59:1c:49:31:ea:d6:9a:ff:64:e1:ae:1e:46:60:af:f4:
         d3:63:1b:11:4e:0e:47:42:44:2e:18:e1:ba:d3:bf:0d:1d:55:
         29:a3:fb:2c:49:32:3f:d6:ab:26:94:e2:c0:49:b1:0a:ed:2e:
         af:a9:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:38:24 2024 by rpki-client on console-ams.rpki-client.org