Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa
File:                     3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (raw, json)
Hash identifier:          3A3Z0D80vaKcjahg6oBtGWemad/uyUL0IsMAXpxzRL8=
Subject key identifier:   30:2C:9D:04:D1:89:78:39:C5:F2:E5:11:BA:60:00:6A:37:D8:A2:5F
Certificate issuer:       /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F
Certificate serial:       61183F0F951ACAF7C63EF46FDA391B546E629E01
Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa
Signing time:             Thu 16 May 2024 09:21:54 +0000
ROA not before:           Thu 16 May 2024 09:16:54 +0000
ROA not after:            Thu 15 May 2025 09:21:54 +0000
asID:                     136846
IP address blocks:        157.15.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl
                          rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:18:3f:0f:95:1a:ca:f7:c6:3e:f4:6f:da:39:1b:54:6e:62:9e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F
        Validity
            Not Before: May 16 09:16:54 2024 GMT
            Not After : May 15 09:21:54 2025 GMT
        Subject: CN=302C9D04D1897839C5F2E511BA60006A37D8A25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:e9:e6:43:34:a3:b8:94:a8:59:79:ae:84:
                    38:be:87:85:a2:78:df:65:9b:e5:a6:7c:93:ac:76:
                    33:e1:21:ff:f0:b2:68:97:ad:07:a7:2f:0b:03:c6:
                    23:fa:d1:7e:2f:17:9c:7e:62:8a:56:32:7a:12:d9:
                    a0:dd:93:84:98:f0:d1:5b:dc:f0:aa:e5:5b:43:f3:
                    8b:4f:b2:67:f2:38:fd:76:0f:f7:4e:30:62:bb:79:
                    77:72:41:56:97:09:a4:57:69:e2:0a:52:12:ad:48:
                    88:07:5c:d3:53:46:0b:69:fd:88:54:19:43:da:4e:
                    c7:c5:00:3a:e8:87:48:bd:ca:1f:65:26:07:94:53:
                    f7:d8:c0:4d:3f:a2:3a:1b:5f:29:d8:2d:15:d1:f2:
                    3c:3f:e0:bf:66:74:90:8c:3d:23:3b:88:dd:1b:9d:
                    c6:69:5d:d2:ea:ce:9a:2b:ed:40:68:75:48:b1:dc:
                    13:7c:c9:84:75:19:8a:4e:03:45:b9:62:f3:bf:52:
                    f7:bb:6f:fb:26:a9:8a:52:8f:ac:c5:7e:42:65:0b:
                    d2:99:1b:a2:65:51:16:f5:4b:56:c4:7c:b2:6a:18:
                    7e:54:e3:60:bd:05:2f:f6:51:3b:17:2a:d9:16:f0:
                    9e:e9:51:95:f9:65:ad:1b:ed:96:4b:51:30:c8:d9:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:9D:04:D1:89:78:39:C5:F2:E5:11:BA:60:00:6A:37:D8:A2:5F
            X509v3 Authority Key Identifier:
                keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9e:76:2b:9d:13:4a:79:49:f0:aa:29:aa:ad:c1:a3:e5:26:
         55:3d:cf:85:35:78:ed:a2:36:55:72:e0:1f:a4:e0:9d:a1:4d:
         ad:82:59:68:a9:90:cd:d3:7d:66:74:4c:36:ff:29:c8:97:01:
         9b:1f:4e:2a:0e:9b:ea:4a:69:38:41:19:34:a2:98:b8:cb:d4:
         b5:b7:5d:51:be:fe:7e:23:db:80:cc:9b:0e:81:54:3c:88:85:
         91:89:a2:fc:17:40:7d:f9:80:e7:f5:50:5a:f6:d2:8e:8f:58:
         b8:2e:00:ce:45:42:14:3b:7b:c3:e7:bf:28:0f:0b:6d:53:17:
         92:41:9f:1b:52:55:68:46:14:6b:39:44:e8:33:e0:e0:9b:43:
         9f:23:a0:0e:b1:01:d4:ce:94:f1:2e:3b:41:85:6e:64:2c:62:
         19:8a:ae:72:8c:b4:73:9b:5c:b2:3c:20:f0:55:3a:d8:2f:a9:
         d9:35:cf:cf:61:9a:9e:65:9f:55:61:4b:9b:ae:31:38:5e:82:
         a7:a3:7a:19:ee:b6:6f:f7:57:f6:b9:f9:98:0e:00:11:28:60:
         47:b3:f1:4d:42:56:9a:86:58:98:bd:5f:34:5a:e2:62:6a:c2:
         cd:73:0d:3d:17:df:e3:e7:8c:e2:09:fa:63:4a:51:19:c4:5a:
         04:0a:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org