Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa
File:                     3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (raw, json)
Hash identifier:          yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=
Subject key identifier:   59:92:1A:19:5D:E8:72:CD:90:04:48:20:1F:C4:AE:E0:B3:98:2A:BB
Certificate issuer:       /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
Certificate serial:       7AE32B80CA5A29457317DE7B33857364C891EA2C
Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa
Signing time:             Thu 03 Apr 2025 12:00:01 +0000
ROA not before:           Thu 03 Apr 2025 11:55:01 +0000
ROA not after:            Thu 02 Apr 2026 12:00:01 +0000
asID:                     152409
IP address blocks:        157.20.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl
                          rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e3:2b:80:ca:5a:29:45:73:17:de:7b:33:85:73:64:c8:91:ea:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73
        Validity
            Not Before: Apr  3 11:55:01 2025 GMT
            Not After : Apr  2 12:00:01 2026 GMT
        Subject: CN=59921A195DE872CD900448201FC4AEE0B3982ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:1f:04:b7:7f:da:cc:38:3c:6d:4c:51:53:
                    4d:96:c1:89:84:be:5b:11:4f:14:d4:b8:1c:0e:dc:
                    72:e4:af:a1:b2:f2:55:a5:7b:e1:9d:86:0d:f7:44:
                    e0:17:db:9f:3f:63:b1:51:e2:86:6b:6e:0b:ee:94:
                    ff:95:f3:73:0b:f9:34:71:0f:a6:6e:8e:5a:6d:c3:
                    42:9c:b7:44:22:aa:a1:a0:6d:c7:ed:48:76:2e:b6:
                    1e:28:92:86:e2:2c:1d:8f:ad:65:34:99:b3:58:99:
                    d3:5d:21:fe:f7:33:28:67:50:77:6a:5e:17:07:28:
                    8c:21:96:c0:fd:d3:9c:db:41:46:70:d6:cd:ae:cd:
                    95:71:97:58:8d:62:77:43:4a:8a:14:0d:d6:50:62:
                    ee:33:b3:c6:3e:6b:75:9f:26:0d:3d:fc:93:84:8b:
                    f9:db:00:59:b1:f7:ce:db:11:c8:f2:0e:2e:1b:a9:
                    a9:f8:b9:e5:5b:06:9f:a2:37:b3:ae:b1:cb:7c:59:
                    54:5d:05:37:2f:58:53:57:28:16:33:c7:3c:12:85:
                    d5:32:1e:c4:b4:b8:55:44:29:44:d1:f6:c5:e1:01:
                    c4:f8:d9:9c:57:f7:36:2e:30:d8:58:01:85:21:d5:
                    a3:3d:7f:b1:43:26:4b:ae:c7:5c:b8:f3:75:aa:da:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:92:1A:19:5D:E8:72:CD:90:04:48:20:1F:C4:AE:E0:B3:98:2A:BB
            X509v3 Authority Key Identifier:
                keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:f9:78:19:a4:d7:be:99:c4:76:eb:a2:e7:24:6b:0a:00:ad:
         c6:ef:4d:8b:34:90:e6:6e:ae:dd:b4:09:18:41:e2:aa:be:4b:
         07:8d:27:1a:3f:a2:5a:fc:11:24:df:85:48:77:78:7b:b9:92:
         3c:ba:9d:9e:0c:35:1c:19:2a:3b:a5:42:57:52:bb:c9:18:78:
         27:01:d8:fe:26:dd:13:b1:48:7d:88:d5:6f:1f:b0:11:1e:18:
         24:67:ec:28:23:1d:a2:15:e2:69:9a:e3:d1:96:c7:f1:98:bf:
         0e:db:a7:74:1e:7c:5e:df:df:24:3e:cb:b5:34:7f:2d:89:a1:
         a0:e3:f6:44:2e:9b:e6:e8:5d:6c:bc:01:23:54:00:ec:31:8f:
         bc:ba:9d:53:83:87:6e:57:12:4a:31:d8:40:a7:a5:28:91:3b:
         6e:db:1e:25:bc:ba:86:5e:34:4d:1a:be:ab:c4:70:c5:05:27:
         74:a6:37:71:26:1b:a7:04:ea:6c:05:0f:e1:8a:70:7f:ec:86:
         ba:68:6b:d2:c1:ca:87:02:9b:16:b4:df:4f:a4:b7:37:53:1b:
         26:23:01:d5:9e:1a:4d:4e:92:d4:4f:e3:04:f1:77:dd:88:3f:
         ea:e8:95:d1:ba:7e:74:00:fa:12:57:4d:4f:9f:59:c8:69:b9:
         9e:1c:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net