Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa
File:                     3135372e31352e37332e302f32342d3234203d3e20313530313837.roa (raw, json)
Hash identifier:          sGVBAdnzyLj5GC8cKb4QDAPqmHPoZ6UiruJYDXLlwpU=
Subject key identifier:   4B:02:42:8B:6F:F6:6E:A7:A6:8B:15:4D:71:C0:C0:84:F0:27:98:F7
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6D0D3DF62056A7FA7EDDCB25BB2CA738B6E4BA55
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa
Signing time:             Mon 12 Feb 2024 03:22:15 +0000
ROA not before:           Mon 12 Feb 2024 03:17:15 +0000
ROA not after:            Mon 10 Feb 2025 03:22:15 +0000
asID:                     150187
IP address blocks:        157.15.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:3d:f6:20:56:a7:fa:7e:dd:cb:25:bb:2c:a7:38:b6:e4:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 12 03:17:15 2024 GMT
            Not After : Feb 10 03:22:15 2025 GMT
        Subject: CN=4B02428B6FF66EA7A68B154D71C0C084F02798F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:c0:67:b0:ac:3e:2b:99:3a:13:95:db:a5:
                    cb:54:d8:0e:53:f8:c1:60:b1:6e:07:2a:1c:9a:dd:
                    c0:4a:c1:b4:2c:42:16:03:61:2e:e2:78:ac:2a:7c:
                    0d:88:f4:6b:3e:ce:e2:60:f8:98:e0:38:db:48:fc:
                    51:c7:86:be:e6:37:2c:11:d4:33:89:30:6d:d4:23:
                    6d:7c:fd:66:cd:a6:f4:22:20:a2:5e:e4:16:c5:50:
                    e9:2e:5f:b2:8b:4f:a3:ba:28:9c:fd:95:52:f5:70:
                    67:41:90:09:07:ee:1b:8f:ff:ec:b4:25:b3:51:72:
                    01:b5:5b:10:d0:6a:c9:61:6b:63:a2:85:c2:b0:df:
                    7f:06:18:c4:e7:41:67:a9:a9:01:0a:f8:8b:60:a7:
                    cc:d7:7f:3c:32:e8:64:ba:ca:cc:4d:f2:68:0a:35:
                    d6:64:ac:8a:97:dc:a1:83:40:bb:6e:98:af:40:4c:
                    5e:0f:79:42:8d:5f:9e:8a:3d:73:e3:83:19:be:44:
                    c1:8b:cf:f5:f1:c5:c5:33:32:33:f8:71:ed:c4:e8:
                    5d:75:ab:d4:84:9d:d4:ce:31:ad:a9:70:e4:45:6f:
                    5d:13:e4:51:8c:e5:ec:fa:84:72:df:2d:90:e8:a9:
                    a5:c5:59:f9:0c:80:37:18:e6:15:7a:bb:49:27:a6:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:02:42:8B:6F:F6:6E:A7:A6:8B:15:4D:71:C0:C0:84:F0:27:98:F7
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e37332e302f32342d3234203d3e20313530313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:79:d0:22:8b:03:18:24:97:70:6d:03:9c:b0:34:36:c2:
         4b:fa:d8:b3:cc:8e:c5:c1:8b:22:53:f2:4d:75:e3:b3:37:ba:
         70:29:98:6b:1a:f4:84:8d:27:60:92:68:c5:62:a0:31:3d:cd:
         f3:77:b4:fe:f2:0f:33:c0:65:6b:71:00:a3:fc:b5:8d:b7:0a:
         bd:c9:74:2d:43:3c:4c:69:a0:f9:2f:04:a5:21:b4:9a:20:b5:
         c3:ef:47:66:51:18:6d:eb:b5:ad:1d:73:e1:c8:69:4d:8e:01:
         8a:1a:b4:e8:ca:36:d6:f1:d4:45:52:e1:02:fd:4f:01:0e:ac:
         e2:ca:6c:86:3a:95:03:39:ae:14:0a:44:df:24:dc:ac:c3:f0:
         c1:59:ce:bc:96:ee:15:97:75:9d:a9:45:0a:b1:ca:6e:4a:5a:
         c5:ca:7a:c9:9c:d3:f4:66:5d:ee:96:a6:b3:97:36:97:83:a0:
         b2:21:75:05:4d:a3:39:fc:47:65:60:57:b0:c8:4d:4a:04:94:
         f6:f0:65:46:11:04:a0:89:b0:1d:3b:99:89:8e:fa:dc:19:d2:
         97:0f:ef:ee:dc:9b:7e:a0:44:db:e4:c3:4e:49:b6:59:a9:5f:
         87:d7:71:78:64:83:12:28:ea:18:9a:f7:d1:c7:58:d8:28:8a:
         ed:ae:03:a4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUbQ099iBWp/p+3csluyynOLbkulUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDIxMjAzMTcxNVoX
DTI1MDIxMDAzMjIxNVowMzExMC8GA1UEAxMoNEIwMjQyOEI2RkY2NkVBN0E2OEIx
NTRENzFDMEMwODRGMDI3OThGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ6JwGewrD4rmToTlduly1TYDlP4wWCxbgcqHJrdwErBtCxCFgNhLuJ4rCp8
DYj0az7O4mD4mOA420j8UceGvuY3LBHUM4kwbdQjbXz9Zs2m9CIgol7kFsVQ6S5f
sotPo7oonP2VUvVwZ0GQCQfuG4//7LQls1FyAbVbENBqyWFrY6KFwrDffwYYxOdB
Z6mpAQr4i2CnzNd/PDLoZLrKzE3yaAo11mSsipfcoYNAu26Yr0BMXg95Qo1fnoo9
c+ODGb5EwYvP9fHFxTMyM/hx7cToXXWr1ISd1M4xralw5EVvXRPkUYzl7PqEct8t
kOippcVZ+QyANxjmFXq7SSemlPECAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRLAkKL
b/Zup6aLFU1xwMCE8CeY9zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz
MTM1MmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ9JMA0GCSqGSIb3DQEBCwUAA4IBAQBF6nnQIosDGCSXcG0DnLA0
NsJL+tizzI7FwYsiU/JNdeOzN7pwKZhrGvSEjSdgkmjFYqAxPc3zd7T+8g8zwGVr
cQCj/LWNtwq9yXQtQzxMaaD5LwSlIbSaILXD70dmURht67WtHXPhyGlNjgGKGrTo
yjbW8dRFUuEC/U8BDqziymyGOpUDOa4UCkTfJNysw/DBWc68lu4Vl3WdqUUKscpu
SlrFynrJnNP0Zl3ulqazlzaXg6CyIXUFTaM5/EdlYFewyE1KBJT28GVGEQSgibAd
O5mJjvrcGdKXD+/u3Jt+oETb5MNOSbZZqV+H13F4ZIMSKOoYmvfRx1jYKIrtrgOk
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org