Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa
File:                     3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (raw, json)
Hash identifier:          Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=
Subject key identifier:   B9:6F:92:DD:5F:FE:65:29:1C:DD:BC:37:58:CE:82:88:06:48:F6:52
Certificate issuer:       /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Certificate serial:       74E8D99329D9765B8300299E83BA7449DD23C8BF
Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa
Signing time:             Mon 20 Jan 2025 06:00:44 +0000
ROA not before:           Mon 20 Jan 2025 05:55:44 +0000
ROA not after:            Mon 19 Jan 2026 06:00:44 +0000
asID:                     152377
IP address blocks:        157.15.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
                          rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e8:d9:93:29:d9:76:5b:83:00:29:9e:83:ba:74:49:dd:23:c8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
        Validity
            Not Before: Jan 20 05:55:44 2025 GMT
            Not After : Jan 19 06:00:44 2026 GMT
        Subject: CN=B96F92DD5FFE65291CDDBC3758CE82880648F652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:fa:50:a1:e6:74:4e:ac:58:98:0d:be:54:
                    eb:78:9b:82:6c:8c:ae:9f:de:ad:61:99:4d:f4:b0:
                    c7:fa:8d:a2:17:62:99:17:e9:37:88:3f:ca:8e:5b:
                    c2:9e:19:97:54:0a:d5:f9:95:77:15:13:6d:b8:eb:
                    07:6a:2a:37:50:09:b2:5d:bb:66:b1:ac:ae:f1:61:
                    c5:0f:85:fb:e9:1e:43:a3:20:1c:d7:18:e7:68:51:
                    04:74:54:14:55:00:4a:52:f1:26:45:c1:4a:fa:24:
                    55:c3:6c:f4:2d:ae:71:ed:e4:0c:73:9c:0a:39:6e:
                    5a:04:f5:19:10:e7:da:62:eb:ba:1a:9e:39:82:ef:
                    2e:56:10:eb:90:86:8b:1f:79:d1:09:94:14:85:d2:
                    c0:f2:12:d3:70:05:de:fc:06:a7:55:c1:3e:c5:13:
                    a5:97:98:60:5a:03:ea:a6:48:3f:21:8b:48:c1:43:
                    8a:0b:02:94:5f:34:a0:6c:74:21:f0:d3:ac:06:ad:
                    69:63:e5:51:7f:3a:2f:f9:e4:0f:9f:0a:31:ea:db:
                    43:70:27:04:8c:ce:26:d0:0b:b8:12:cd:56:1b:df:
                    d8:24:b6:ee:0d:15:45:9c:8b:8e:15:5d:09:52:4c:
                    77:56:36:2a:1a:b9:d7:b2:3c:10:e6:11:f3:1a:c8:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:92:DD:5F:FE:65:29:1C:DD:BC:37:58:CE:82:88:06:48:F6:52
            X509v3 Authority Key Identifier:
                keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36372e302f32342d3234203d3e20313532333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:ba:d4:da:3b:b9:59:3c:34:85:42:1f:5b:41:a7:e4:3b:
         d9:c8:9c:55:96:0c:03:f1:62:07:5b:36:8d:8e:cd:8e:85:e4:
         2d:af:d1:4d:83:88:0c:e3:98:e9:06:cf:64:76:54:c9:66:09:
         0e:90:48:3a:49:87:b5:72:be:98:9e:3e:20:3a:38:1b:29:b1:
         b7:37:12:a0:24:ee:75:dc:d2:15:f2:df:6a:1d:e2:0c:66:b7:
         2a:db:5e:a1:ab:ad:1c:d0:fb:55:4d:b4:b0:ac:2b:91:16:2e:
         42:12:5f:6d:3d:66:f2:61:95:74:08:fc:65:d7:0f:1f:d9:df:
         78:5a:f9:1f:29:03:24:3c:5a:5f:7a:5e:9c:c7:b1:4d:2b:80:
         01:e3:b4:37:a9:89:a2:a7:2b:20:e0:c1:d4:7c:f4:40:2f:c8:
         a9:01:a2:e1:a0:8f:9f:c2:6e:92:4c:e8:98:bf:ab:a6:ae:e5:
         20:f4:a5:7b:ac:d1:75:56:95:52:91:2f:80:95:f9:25:cc:93:
         35:30:62:ee:7f:a1:26:96:a7:86:1f:a3:e0:ba:d5:0c:bd:0e:
         28:27:e7:b7:ef:65:ee:1c:23:19:47:92:59:2c:a8:89:88:a9:
         46:3d:a3:92:ae:6f:a1:86:29:4a:f6:11:ea:45:34:b7:6e:f0:
         d1:ee:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net