Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa
File:                     3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (raw, json)
Hash identifier:          peIKUkdAF8QsdPPlcNy9miptDw8vMHR170Q4qaGoAGo=
Subject key identifier:   76:25:5B:B9:06:51:BB:1B:96:0D:8A:79:6B:51:23:65:76:72:8F:AF
Certificate issuer:       /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
Certificate serial:       3A21A66E352038C75D7E685E440218FDC110AC1A
Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa
Signing time:             Thu 11 Jan 2024 04:38:05 +0000
ROA not before:           Thu 11 Jan 2024 04:33:05 +0000
ROA not after:            Thu 09 Jan 2025 04:38:05 +0000
asID:                     152082
IP address blocks:        157.10.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl
                          rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 13:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:21:a6:6e:35:20:38:c7:5d:7e:68:5e:44:02:18:fd:c1:10:ac:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD
        Validity
            Not Before: Jan 11 04:33:05 2024 GMT
            Not After : Jan  9 04:38:05 2025 GMT
        Subject: CN=76255BB90651BB1B960D8A796B51236576728FAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:11:3a:39:f2:07:d7:a7:dc:c0:55:ff:e2:
                    d3:20:a9:31:7a:11:96:2c:9d:db:4b:08:68:fd:92:
                    45:84:4d:fd:58:4b:f1:3a:f4:f3:ae:42:f0:f2:86:
                    fc:1f:1c:6d:b6:d1:91:77:34:03:d2:cc:b6:60:78:
                    78:49:0f:db:ac:9a:52:27:f8:08:37:d5:a1:b0:3d:
                    c3:6c:7e:15:fd:d2:15:9c:51:57:d6:99:fa:97:da:
                    80:8f:82:ff:b5:87:04:a3:f3:c8:cb:29:8f:62:22:
                    97:af:9c:28:ed:ed:94:65:ec:ea:be:b9:f3:37:5c:
                    fc:cd:9c:cb:e7:87:00:36:6a:29:c6:84:23:1e:3b:
                    46:1f:9f:68:43:a9:bd:8c:8f:e7:64:6b:e5:cb:b0:
                    56:81:77:3e:7f:da:96:8b:0c:10:ee:b5:34:3b:29:
                    87:b5:6d:91:68:e7:c6:51:82:89:ce:ff:27:6c:a6:
                    36:8a:50:c1:d2:8f:bb:7d:52:27:ba:a2:b8:8b:fe:
                    5c:78:6e:3c:a4:88:2c:37:ed:65:5e:b4:a9:f9:db:
                    10:91:98:f6:3c:8c:3b:20:80:64:7c:2b:92:3b:28:
                    63:ad:42:30:5d:30:51:9d:f1:c1:3c:02:3f:04:13:
                    50:c2:f4:13:ce:64:be:54:67:13:ac:4d:d4:8d:0a:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:25:5B:B9:06:51:BB:1B:96:0D:8A:79:6B:51:23:65:76:72:8F:AF
            X509v3 Authority Key Identifier:
                keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:ce:03:e0:2b:d1:9f:91:3c:5a:e2:af:28:4f:4b:91:b8:
         06:8a:fb:26:28:4b:37:a0:a5:5b:09:d1:29:18:af:67:cb:62:
         d5:82:7b:c5:9f:da:80:9f:e8:06:eb:64:5a:9a:5e:38:15:15:
         b0:d1:28:d1:2b:c9:fe:f1:92:a3:51:34:37:13:db:ee:7e:43:
         19:32:86:3b:eb:bd:a0:a9:d1:93:6c:64:de:b2:eb:e6:36:6d:
         09:3d:f3:52:02:18:59:84:bc:9b:bb:7c:f0:06:07:1f:34:c3:
         37:0f:e2:b2:77:22:ec:a8:ec:da:f7:05:25:17:b0:26:32:e5:
         12:37:fa:20:1f:05:da:8d:e9:b4:a2:b6:35:d5:0d:15:aa:df:
         33:42:19:98:3d:3e:de:44:25:9c:a4:88:9d:0a:7e:cc:7d:20:
         b8:8d:0f:ca:f3:71:8e:04:25:28:e5:31:d5:3d:a6:90:60:9b:
         27:00:35:b4:3f:2e:86:bb:d1:f6:18:e2:da:78:3f:d9:db:64:
         0a:d7:cd:b4:67:6b:77:a2:d7:84:22:c5:da:c8:4d:0e:19:6a:
         2c:7a:67:3d:6f:c8:69:74:e1:b6:0d:7f:9a:4b:a2:96:fc:e6:
         ef:00:fd:ea:f4:07:33:04:0d:07:08:17:ad:54:a8:7e:75:69:
         5c:40:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:50:47 2024 by rpki-client on console-fra.rpki-client.org