Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e39362e302f32332d3234203d3e20313532333634.roa
File:                     3135372e31352e39362e302f32332d3234203d3e20313532333634.roa (raw, json)
Hash identifier:          s8JfWHeD4Qq84YQ/J3Rf5K0HnuHpJLfNgR1gyKmGEd0=
Subject key identifier:   02:5E:4F:79:7D:80:64:B5:AE:07:B5:2D:B8:74:FA:B8:51:A9:5D:69
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       542FC4F7AC7C3A62B3B98E11D23301B1E7183611
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e39362e302f32332d3234203d3e20313532333634.roa
Signing time:             Mon 05 Feb 2024 04:58:43 +0000
ROA not before:           Mon 05 Feb 2024 04:53:43 +0000
ROA not after:            Mon 03 Feb 2025 04:58:43 +0000
asID:                     152364
IP address blocks:        157.15.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2f:c4:f7:ac:7c:3a:62:b3:b9:8e:11:d2:33:01:b1:e7:18:36:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb  5 04:53:43 2024 GMT
            Not After : Feb  3 04:58:43 2025 GMT
        Subject: CN=025E4F797D8064B5AE07B52DB874FAB851A95D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:30:cb:f1:ed:7a:53:77:b1:13:60:b2:73:
                    ff:90:06:0b:69:99:82:05:c2:74:95:ee:4e:d2:f8:
                    8d:7e:f2:12:0b:3d:4e:4f:69:60:ed:a6:c1:d6:8b:
                    7c:95:85:a7:f2:84:fd:dc:46:e3:bc:95:23:e5:45:
                    3c:40:c3:dc:d0:7f:8c:69:4b:02:1e:49:d7:62:f8:
                    06:c5:c5:e9:ec:57:07:01:d0:fd:72:8a:21:76:b1:
                    e1:5d:22:0d:b6:a8:80:a7:cc:2a:08:97:62:f4:71:
                    66:04:0b:21:6d:9a:9d:e7:8c:b3:f1:ef:08:85:e8:
                    eb:da:c1:bc:82:0d:4a:84:09:56:b8:8e:58:05:b7:
                    02:1e:b5:99:de:8e:d6:3b:ce:e1:b6:31:47:0c:1f:
                    6d:41:19:fe:cd:53:f5:58:41:ad:66:6a:45:12:8f:
                    bb:d2:87:ab:06:0c:5d:f5:30:30:90:d7:c7:23:7d:
                    45:95:07:3f:6c:e0:d6:0b:bc:6d:f0:3d:ec:bb:51:
                    88:4a:39:ad:3f:a4:ce:3f:21:bb:95:d2:eb:94:44:
                    58:28:cf:45:b7:f7:56:51:e8:e0:b7:1d:e7:18:a9:
                    ae:6a:6a:de:74:b2:ca:d6:b6:e0:74:d4:1f:34:8e:
                    e8:c9:59:2e:60:80:46:b0:72:e3:6a:c4:0a:fd:36:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5E:4F:79:7D:80:64:B5:AE:07:B5:2D:B8:74:FA:B8:51:A9:5D:69
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e39362e302f32332d3234203d3e20313532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:de:fc:54:d2:b0:23:2d:91:b2:54:af:5c:57:a6:69:06:fa:
         1a:e7:fd:44:04:20:4e:a5:76:24:fd:a6:69:a9:a6:1c:8b:d1:
         8b:47:8e:25:ce:19:17:93:a0:b4:b5:b0:cc:af:df:e5:50:bd:
         de:45:13:3e:30:b9:58:3d:dd:4f:39:16:05:38:19:5b:20:89:
         23:8d:47:69:55:58:08:4a:40:33:80:65:0f:d9:ea:24:49:11:
         42:18:ef:97:54:52:48:54:46:02:aa:07:06:3a:29:7c:06:79:
         f4:00:9b:48:e2:bd:ea:d3:7d:5f:f1:13:e3:fa:8c:c0:ab:df:
         aa:d6:7b:d4:af:bb:97:a0:15:27:9c:a4:ec:0e:0f:47:63:34:
         d7:4b:70:8c:a6:ce:11:67:e8:6a:56:e3:3c:9c:12:44:e4:10:
         92:16:1e:d9:10:0b:ca:38:d1:97:0a:4e:dd:0d:e2:d3:ee:d6:
         6c:63:15:43:13:4c:91:8b:15:1d:6a:34:7a:f5:10:e7:15:5b:
         a4:67:e3:7b:81:be:fc:02:c1:5e:a6:2b:9f:b8:96:01:5a:84:
         97:ec:22:33:3b:d0:0a:21:dd:73:84:7e:02:5a:00:c7:d2:a9:
         34:ea:88:f4:b1:13:c5:4c:9d:09:d2:7a:6c:b3:90:ba:79:6c:
         68:cf:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org