Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130392e302f32342d3234203d3e203138303539.roa
File:                     3135302e3130372e3130392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          7DZNArN4udmC/ITacjnx4sG9zlLPBBifZG0MSSzD3cc=
Subject key identifier:   E5:31:5C:18:B1:30:62:36:FA:1C:42:AA:E1:9B:37:9D:61:C3:FA:C9
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7422873FB3D9440CC06EB3A45941062B61084579
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130392e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 05:00:01 +0000
ROA not before:           Fri 25 Oct 2024 04:55:01 +0000
ROA not after:            Fri 24 Oct 2025 05:00:01 +0000
asID:                     18059
IP address blocks:        150.107.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:22:87:3f:b3:d9:44:0c:c0:6e:b3:a4:59:41:06:2b:61:08:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 04:55:01 2024 GMT
            Not After : Oct 24 05:00:01 2025 GMT
        Subject: CN=E5315C18B1306236FA1C42AAE19B379D61C3FAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:eb:b9:8b:17:61:cf:9f:f3:fc:f7:09:0f:
                    6d:62:a7:8c:f6:e0:2b:ad:e0:84:35:3d:38:a7:59:
                    e4:d4:d3:9f:54:a8:ed:44:9f:57:f3:77:61:fc:d6:
                    1c:a0:fa:1f:c7:b5:62:f2:14:c9:4d:08:74:03:ef:
                    07:35:01:f1:04:7a:2b:34:d4:93:2d:75:05:b8:a8:
                    d3:e9:19:21:ac:ed:8d:af:a0:7b:35:fc:e4:9c:2c:
                    ce:88:82:f3:60:1f:06:1b:ae:a4:d7:79:20:94:f5:
                    c6:57:4a:b8:37:25:fb:a7:87:1c:87:71:86:8d:c8:
                    c7:8d:87:70:28:af:51:97:6b:23:18:be:6f:2f:9f:
                    d4:71:dd:03:c8:74:ce:ed:ad:2b:76:bd:e5:5d:e4:
                    33:ff:46:0f:56:bc:c6:65:36:c7:92:95:c8:2e:3c:
                    eb:4c:6a:bc:10:48:7c:4b:53:2e:34:28:ff:5d:d8:
                    2a:ea:0f:d0:76:bf:a8:2e:00:3f:1f:58:00:09:ab:
                    0c:64:e8:5d:0b:01:ca:31:5d:1c:2f:46:6f:06:0d:
                    28:92:5f:6b:ab:3d:ed:85:db:68:d6:7e:41:00:44:
                    67:f8:e2:82:c9:6d:a9:69:1a:cc:80:ba:22:c0:9b:
                    ce:3c:93:7e:7d:64:d7:f9:f5:57:f4:d3:41:76:35:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:31:5C:18:B1:30:62:36:FA:1C:42:AA:E1:9B:37:9D:61:C3:FA:C9
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:13:02:9c:3c:cd:1f:e8:28:1f:54:3f:17:4b:05:f3:b3:
         43:eb:96:c9:3a:82:71:16:10:0d:8d:e7:e2:5f:00:40:b0:7d:
         8e:a0:34:72:70:5e:a5:27:43:e8:33:ac:23:e4:0f:01:86:dc:
         a2:99:26:82:d2:8d:d0:61:b4:d2:9b:9f:b1:5a:b4:4f:a9:e7:
         c2:40:6a:e3:da:25:d0:42:68:89:69:6a:c3:21:14:dc:a5:da:
         4d:1f:83:15:0d:f7:6a:1d:9e:a2:cc:57:5e:94:5e:19:60:81:
         ec:a2:a2:c5:b7:b8:a2:d4:1f:96:82:24:97:ed:e8:a8:7a:62:
         44:4c:da:81:18:a5:0e:b8:30:7b:a0:8b:de:2f:5c:e4:7b:45:
         19:8e:3a:4b:a8:8b:ff:26:7d:78:34:d4:83:d9:82:bd:36:4d:
         13:83:d9:db:8b:80:a7:f5:e4:0c:6d:82:6c:9f:11:a3:a5:98:
         b0:b7:10:16:0d:49:ed:68:39:60:e3:37:04:ce:8d:39:f2:72:
         c3:de:18:d2:22:ab:ea:1e:f3:f9:85:c8:5a:2a:22:ff:5b:78:
         18:4d:97:4f:c7:f7:3e:17:3f:c2:7e:f8:82:1a:a9:bf:e8:8d:
         d0:94:0c:5d:a0:3c:a7:b6:21:a4:a2:d9:ab:07:e6:19:be:ee:
         62:ca:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org