Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa
File:                     3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (raw, json)
Hash identifier:          Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=
Subject key identifier:   50:03:18:81:A6:B6:CC:C8:70:DB:E1:08:5D:BC:48:0B:65:B3:32:7E
Certificate issuer:       /CN=5F4C49641E1677408C44A096E9E7E709A4580B39
Certificate serial:       3D14F60073142A2BB05AE34E16F38F77EFD83D9B
Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa
Signing time:             Tue 27 Aug 2024 04:41:00 +0000
ROA not before:           Tue 27 Aug 2024 04:36:00 +0000
ROA not after:            Tue 26 Aug 2025 04:41:00 +0000
asID:                     152369
IP address blocks:        157.15.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl
                          rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:14:f6:00:73:14:2a:2b:b0:5a:e3:4e:16:f3:8f:77:ef:d8:3d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39
        Validity
            Not Before: Aug 27 04:36:00 2024 GMT
            Not After : Aug 26 04:41:00 2025 GMT
        Subject: CN=50031881A6B6CCC870DBE1085DBC480B65B3327E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:46:5d:ac:37:5d:e6:81:76:81:9e:95:a9:
                    2f:69:e7:c1:b7:b3:80:e1:47:9d:1a:00:d4:05:bd:
                    cc:35:54:77:59:10:15:95:89:4b:ef:2b:55:ca:0e:
                    35:7f:be:ef:bf:57:2c:40:cb:d4:5a:ea:26:0c:96:
                    ec:47:fa:48:01:97:e0:df:94:40:47:c9:0c:85:55:
                    d4:fb:a4:a4:77:31:f9:3f:f7:5b:92:0c:65:23:47:
                    0c:c7:9f:bf:97:28:0e:59:78:46:f1:85:eb:7e:1e:
                    97:90:a8:3a:26:6f:c4:89:41:21:0f:fb:78:1f:d3:
                    97:15:8f:ef:06:f3:76:10:a9:00:94:01:8b:dd:7a:
                    a3:cb:58:e2:fc:ca:ca:ab:43:ec:a8:bb:d7:95:89:
                    b2:7e:45:83:0c:8c:09:02:35:c4:a6:10:81:3c:df:
                    2e:89:d8:cf:b3:d6:74:ec:6f:d6:81:c9:0b:b4:7e:
                    6e:b5:72:6a:0a:7f:d6:01:e4:08:62:fc:21:2c:35:
                    c2:2f:c8:a0:1a:a9:c7:bb:fb:af:c0:ad:ca:e2:e4:
                    39:9c:4e:aa:88:91:d0:5b:5f:e3:19:2b:f0:95:4d:
                    c9:74:9d:2d:1d:63:96:a9:81:ac:16:ff:d3:b9:d8:
                    1d:36:2f:a9:da:10:0a:c5:90:6b:01:c8:86:ee:72:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:18:81:A6:B6:CC:C8:70:DB:E1:08:5D:BC:48:0B:65:B3:32:7E
            X509v3 Authority Key Identifier:
                keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:b6:ad:f9:cd:cd:6b:a0:32:eb:b5:bd:a7:79:7c:39:68:87:
         d6:6f:f5:bf:2b:21:84:9a:e3:d2:4e:f8:41:e8:fc:e4:2b:86:
         d2:d1:6d:ff:81:72:8c:ea:76:ec:68:48:99:7c:ae:93:f7:94:
         a2:da:a2:3c:d8:fa:2e:d2:ed:a5:9e:df:90:f2:21:6c:3e:a8:
         7d:fa:b8:51:ff:ee:16:e1:47:10:73:74:a3:87:48:08:85:1b:
         0f:26:33:ce:43:4e:07:c3:cb:c6:9a:18:f1:c9:be:3f:f9:9a:
         31:a2:a9:93:ac:75:de:e9:86:3a:85:d2:cc:ee:2e:8b:d8:6e:
         c0:29:82:a3:cb:34:22:11:df:b6:18:74:f8:24:25:7f:de:db:
         ed:7a:bd:fa:2f:5a:69:f9:f5:40:c5:fc:e5:31:26:10:cd:a8:
         68:e9:6c:a8:8a:24:33:53:ef:4a:2d:df:8c:40:1b:e2:64:b2:
         31:90:0c:e2:85:25:a2:e7:74:43:f0:21:6c:6e:b2:de:5b:10:
         31:d3:cf:ba:6f:ea:bd:7c:4d:c7:bb:f9:a6:8c:fe:43:24:39:
         32:5a:b8:5f:26:f5:78:96:02:f0:97:6d:4b:39:f8:85:3f:bf:
         bc:c0:27:d4:b6:1e:2f:94:a3:81:eb:95:71:44:1e:74:36:eb:
         db:c7:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org