Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa
File:                     3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (raw, json)
Hash identifier:          ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=
Subject key identifier:   54:FB:DA:EE:F8:87:0C:CA:93:BB:96:13:7C:53:83:ED:80:93:51:FD
Certificate issuer:       /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Certificate serial:       65CD20141BC82675DB5557F07EFA7955241BE702
Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa
Signing time:             Tue 04 Mar 2025 13:02:13 +0000
ROA not before:           Tue 04 Mar 2025 12:57:13 +0000
ROA not after:            Tue 03 Mar 2026 13:02:13 +0000
asID:                     152406
IP address blocks:        157.15.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl
                          rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cd:20:14:1b:c8:26:75:db:55:57:f0:7e:fa:79:55:24:1b:e7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
        Validity
            Not Before: Mar  4 12:57:13 2025 GMT
            Not After : Mar  3 13:02:13 2026 GMT
        Subject: CN=54FBDAEEF8870CCA93BB96137C5383ED809351FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:eb:9d:4d:b6:80:5a:66:c0:ba:88:e5:a3:
                    d4:2c:e2:ca:fd:2e:fa:4e:2b:de:45:64:aa:15:f0:
                    8c:1e:65:9c:d4:53:76:30:cb:e1:51:2a:d1:52:f1:
                    38:c8:27:db:d5:78:27:6d:40:18:33:2a:e9:6a:4e:
                    b2:cc:9a:2c:aa:60:eb:4a:ed:a1:7a:de:52:9d:c6:
                    1e:22:e8:ce:53:ed:d7:eb:07:e7:d4:32:0e:95:b5:
                    0f:fd:a7:f4:c5:32:e9:87:36:7d:57:e0:52:65:bf:
                    6e:c9:92:fe:f6:e7:50:66:7b:4e:4c:8d:6e:0d:b7:
                    aa:e0:74:14:81:f8:5d:6d:4a:d7:b3:59:3d:29:ed:
                    dd:b4:2a:18:26:a6:04:1c:ab:c9:c8:ca:4f:5a:f3:
                    fe:3e:57:43:4f:49:65:d2:ec:a8:1b:f2:63:b8:9b:
                    ea:14:fe:cb:cd:3c:e6:5f:7f:42:dd:bd:86:68:39:
                    af:f4:8d:04:a9:70:1f:30:22:af:f7:b0:55:27:24:
                    30:57:47:33:11:67:9d:fe:7d:0d:31:94:9a:5b:4e:
                    79:5e:c1:a6:6c:e6:8c:a6:96:49:e9:84:44:70:3d:
                    1c:35:f3:9e:bf:d2:c6:9e:15:eb:5c:62:dc:f3:55:
                    cf:0a:1a:4c:03:4a:2e:99:6c:4c:27:72:42:c7:45:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:DA:EE:F8:87:0C:CA:93:BB:96:13:7C:53:83:ED:80:93:51:FD
            X509v3 Authority Key Identifier:
                keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:2b:60:d4:9a:97:fa:21:41:7f:59:75:9d:80:ff:af:98:
         2b:e8:0b:4f:a4:ab:4f:eb:32:29:06:b7:c4:22:dd:a8:e4:af:
         61:ec:88:4d:0a:21:a8:8f:28:89:99:b5:ff:4d:57:dd:3d:0f:
         f7:3d:e7:63:c6:12:3d:4b:cc:5a:bb:cb:39:51:ef:25:8f:83:
         28:16:48:98:71:9c:93:8e:12:93:6a:f4:f6:0f:a8:a3:00:e2:
         57:83:52:09:bb:9f:71:35:f1:90:26:5c:cd:b0:1b:48:1b:84:
         14:c3:e0:87:f3:f5:71:b4:62:4b:d1:a0:e5:5f:2e:04:af:1c:
         e1:36:a6:02:96:70:d0:16:d2:36:09:c9:bb:75:16:62:0b:6b:
         d0:4e:72:26:e4:b7:41:41:6c:b6:fa:7b:94:39:6c:54:31:68:
         fc:5f:02:78:a1:43:c7:0f:5f:7a:de:85:17:79:b7:7a:4b:f1:
         ba:78:99:70:00:9d:ef:71:46:cf:2a:87:78:c8:98:68:af:d2:
         7b:cd:70:ae:23:24:11:e2:7e:61:3e:9f:1d:eb:a7:ea:f7:6d:
         f1:b1:93:d8:20:0c:6d:39:d4:ec:05:58:1f:cd:50:ca:78:8a:
         90:83:2c:bf:5c:ae:0e:45:b4:05:77:7e:05:44:b9:c1:02:d4:
         b3:d8:e6:cc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZc0gFBvIJnXbVVfwfvp5VSQb5wIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIw
Q0EwMUUyMjAeFw0yNTAzMDQxMjU3MTNaFw0yNjAzMDMxMzAyMTNaMDMxMTAvBgNV
BAMTKDU0RkJEQUVFRjg4NzBDQ0E5M0JCOTYxMzdDNTM4M0VEODA5MzUxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9COudTbaAWmbAuojlo9Qs4sr9
LvpOK95FZKoV8IweZZzUU3Ywy+FRKtFS8TjIJ9vVeCdtQBgzKulqTrLMmiyqYOtK
7aF63lKdxh4i6M5T7dfrB+fUMg6VtQ/9p/TFMumHNn1X4FJlv27Jkv7251Bme05M
jW4Nt6rgdBSB+F1tStezWT0p7d20KhgmpgQcq8nIyk9a8/4+V0NPSWXS7Kgb8mO4
m+oU/svNPOZff0LdvYZoOa/0jQSpcB8wIq/3sFUnJDBXRzMRZ53+fQ0xlJpbTnle
waZs5oymlknphERwPRw1856/0saeFetcYtzzVc8KGkwDSi6ZbEwnckLHRTqbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVPva7viHDMqTu5YTfFOD7YCTUf0wHwYDVR0j
BBgwFoAU84tnUkErulumoA4L1ADQkgygHiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDFmYzFhMi1lZTc3LTQwNWYtOWUzMS1hZGM2ZGZjOWI3NGMvMC9GMzhCNjc1MjQx
MkJCQTVCQTZBMDBFMEJENDAwRDA5MjBDQTAxRTIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjM4QjY3NTI0MTJCQkE1QkE2QTAwRTBCRDQwMEQwOTIwQ0Ew
MUUyMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkMWZjMWEyLWVlNzctNDA1Zi05
ZTMxLWFkYzZkZmM5Yjc0Yy8wLzMxMzUzNzJlMzEzNTJlMzIzMTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ/UMA0GCSqG
SIb3DQEBCwUAA4IBAQAFsCtg1JqX+iFBf1l1nYD/r5gr6AtPpKtP6zIpBrfEIt2o
5K9h7IhNCiGojyiJmbX/TVfdPQ/3PedjxhI9S8xau8s5Ue8lj4MoFkiYcZyTjhKT
avT2D6ijAOJXg1IJu59xNfGQJlzNsBtIG4QUw+CH8/VxtGJL0aDlXy4ErxzhNqYC
lnDQFtI2Ccm7dRZiC2vQTnIm5LdBQWy2+nuUOWxUMWj8XwJ4oUPHD1963oUXebd6
S/G6eJlwAJ3vcUbPKod4yJhor9J7zXCuIyQR4n5hPp8d66fq923xsZPYIAxtOdTs
BVgfzVDKeIqQgyy/XK4ORbQFd34FRLnBAtSz2ObM
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net