Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa
File:                     3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          yehVlIli3y20ddw+KBLpnCLks4m/UAVqP7tSQRUr4A8=
Subject key identifier:   C7:07:88:30:1F:8A:81:3D:9F:CB:7F:A5:B6:CD:08:33:A4:18:15:3F
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       49941E6B1C07BFC7E63F1ACA119059A18EA79C49
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:18 +0000
ROA not before:           Mon 31 Jul 2023 00:01:18 +0000
ROA not after:            Mon 29 Jul 2024 00:06:18 +0000
asID:                     55699
IP address blocks:        150.107.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:94:1e:6b:1c:07:bf:c7:e6:3f:1a:ca:11:90:59:a1:8e:a7:9c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:18 2023 GMT
            Not After : Jul 29 00:06:18 2024 GMT
        Subject: CN=C70788301F8A813D9FCB7FA5B6CD0833A418153F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:43:ae:40:a9:ad:a7:95:1c:bd:b3:ac:57:
                    7c:96:a7:50:be:1a:7d:6b:1b:b6:83:46:f3:3f:56:
                    94:51:87:39:33:67:83:94:f2:88:49:13:40:7e:14:
                    b2:3d:e9:18:f3:bd:f7:22:b4:34:b8:e9:0a:57:df:
                    61:8a:6e:cb:be:0f:05:d5:0c:ef:a9:df:3b:70:38:
                    0e:c4:54:6d:71:68:8f:78:8f:8d:56:0d:2c:84:9c:
                    5e:79:fd:fe:c5:4f:9a:f3:3d:cc:9e:1f:a4:3f:0d:
                    ea:c3:58:7a:a8:88:5d:f2:45:8f:e8:a4:02:38:c8:
                    d8:74:7d:bd:26:4d:7f:ef:a3:08:32:56:0e:bb:4b:
                    3e:b2:2a:42:50:19:a3:e8:ba:55:b1:b7:69:0a:67:
                    19:6a:af:b8:5f:94:ae:2c:21:11:ca:c7:1f:e5:ca:
                    22:4a:73:94:c4:8c:5d:c0:6b:26:a4:bc:7a:62:9c:
                    f5:b6:89:5a:49:ec:c3:58:45:dc:ec:c9:f7:74:11:
                    91:18:52:ca:cb:98:f7:4c:42:16:5c:7c:f0:10:dc:
                    08:8b:df:4b:58:cf:a2:28:d2:37:73:c4:94:b1:fe:
                    f3:38:d5:30:fa:52:7a:01:7d:75:e9:97:c6:a6:cf:
                    cf:4a:1b:a7:a8:8c:4c:8f:fa:46:5f:63:35:94:f8:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:88:30:1F:8A:81:3D:9F:CB:7F:A5:B6:CD:08:33:A4:18:15:3F
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e0:2f:32:e3:d9:8c:f5:64:ae:f8:26:8f:ef:30:87:47:8b:
         7f:a4:0e:ca:96:76:22:2f:5d:1e:ef:5b:d5:4c:a1:89:aa:a7:
         32:03:80:20:80:21:1d:e5:d4:e3:ff:68:b6:fd:cb:d3:90:80:
         1b:89:90:01:39:28:f0:21:25:e8:7b:d3:7e:77:ef:3f:92:03:
         32:23:13:42:0f:72:f0:36:3d:97:b3:88:f3:1f:46:eb:71:3e:
         f7:51:6c:0f:af:07:d0:4e:63:a0:91:51:de:83:7c:01:cf:6b:
         ba:b8:97:26:88:08:09:60:56:5b:96:5c:2d:17:14:91:29:f3:
         c2:a9:79:8e:c7:cf:43:86:5f:1f:60:18:73:51:1e:e0:4f:8d:
         33:19:4f:35:43:f5:0a:43:6c:87:e3:38:3b:6b:76:7c:66:13:
         22:91:1e:fe:ae:37:78:1a:97:48:73:03:87:b7:8f:d0:51:1f:
         75:2e:3d:39:7e:10:9a:81:18:de:83:6c:20:e3:1c:c2:5b:3a:
         38:cd:5a:e9:22:cc:ff:7f:c4:55:6b:90:e4:58:01:b6:85:5f:
         cb:79:5e:cb:88:8d:d5:74:ef:91:ff:de:82:93:f1:b0:59:af:
         1a:11:28:f2:7e:13:7e:3a:ef:c9:16:7e:32:13:7a:47:3e:bf:
         78:3f:33:0e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSZQeaxwHv8fmPxrKEZBZoY6nnEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5
RTEwNjg3MjAeFw0yMzA3MzEwMDAxMThaFw0yNDA3MjkwMDA2MThaMDMxMTAvBgNV
BAMTKEM3MDc4ODMwMUY4QTgxM0Q5RkNCN0ZBNUI2Q0QwODMzQTQxODE1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBkOuQKmtp5UcvbOsV3yWp1C+
Gn1rG7aDRvM/VpRRhzkzZ4OU8ohJE0B+FLI96RjzvfcitDS46QpX32GKbsu+DwXV
DO+p3ztwOA7EVG1xaI94j41WDSyEnF55/f7FT5rzPcyeH6Q/DerDWHqoiF3yRY/o
pAI4yNh0fb0mTX/vowgyVg67Sz6yKkJQGaPoulWxt2kKZxlqr7hflK4sIRHKxx/l
yiJKc5TEjF3AayakvHpinPW2iVpJ7MNYRdzsyfd0EZEYUsrLmPdMQhZcfPAQ3AiL
30tYz6Io0jdzxJSx/vM41TD6UnoBfXXpl8amz89KG6eojEyP+kZfYzWU+Es1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxweIMB+KgT2fy3+lts0IM6QYFT8wHwYDVR0j
BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG
QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw
Njg3Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i
ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzUzMDJlMzEzMDM3MmUzMjM0MzQyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzNTM1MzYzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmv0MA0GCSqG
SIb3DQEBCwUAA4IBAQCj4C8y49mM9WSu+CaP7zCHR4t/pA7KlnYiL10e71vVTKGJ
qqcyA4AggCEd5dTj/2i2/cvTkIAbiZABOSjwISXoe9N+d+8/kgMyIxNCD3LwNj2X
s4jzH0brcT73UWwPrwfQTmOgkVHeg3wBz2u6uJcmiAgJYFZbllwtFxSRKfPCqXmO
x89Dhl8fYBhzUR7gT40zGU81Q/UKQ2yH4zg7a3Z8ZhMikR7+rjd4GpdIcwOHt4/Q
UR91Lj05fhCagRjeg2wg4xzCWzo4zVrpIsz/f8RVa5DkWAG2hV/LeV7LiI3VdO+R
/96Ck/GwWa8aESjyfhN+Ou/JFn4yE3pHPr94PzMO
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:15 2024 by rpki-client on console-ams.rpki-client.org