Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa
File:                     3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (raw, json)
Hash identifier:          BTNIMW516Y60Snrf53RsmV5KL33SHRkTpW5qniWoV9I=
Subject key identifier:   B3:EB:5B:00:D6:7D:68:75:5F:31:AF:8E:FE:F5:46:AA:47:8C:3F:5A
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       2C4F218F3D4BDAE94B10460E0FDF8ABB593FCB17
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa
Signing time:             Mon 10 Jun 2024 07:35:30 +0000
ROA not before:           Mon 10 Jun 2024 07:30:30 +0000
ROA not after:            Mon 09 Jun 2025 07:35:30 +0000
asID:                     152770
IP address blocks:        157.66.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4f:21:8f:3d:4b:da:e9:4b:10:46:0e:0f:df:8a:bb:59:3f:cb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Jun 10 07:30:30 2024 GMT
            Not After : Jun  9 07:35:30 2025 GMT
        Subject: CN=B3EB5B00D67D68755F31AF8EFEF546AA478C3F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:40:c5:b7:c6:58:8f:03:32:b9:f7:35:1f:
                    0a:b7:8b:3c:a3:f7:62:8b:4b:7d:83:be:15:c3:1a:
                    f6:da:1b:d0:f5:6b:84:88:88:b7:5c:59:26:16:27:
                    3c:a2:a4:44:1a:7e:0c:b7:64:a7:ad:e6:84:7a:e9:
                    e6:62:e7:35:20:62:16:ff:4a:ad:43:d1:f7:d8:b7:
                    99:35:8a:d1:42:7e:ff:12:b6:19:45:0e:8c:5c:f9:
                    fb:b8:84:ae:c4:72:fb:47:9c:ec:9e:b4:15:89:3a:
                    c5:a4:ae:fe:7c:e5:18:0f:e1:94:96:88:93:86:fe:
                    24:2d:ad:7c:f7:3d:0d:97:dd:c3:be:b3:47:b0:95:
                    20:c1:5d:ad:c3:26:92:2f:f0:c5:0b:be:a1:d3:26:
                    2a:af:b5:55:a8:04:f8:fd:34:0a:7d:6e:e6:56:cb:
                    06:b9:21:64:68:a6:c5:18:05:6d:ca:c8:44:d2:d1:
                    c9:47:b7:0b:08:b1:ae:4b:92:1a:cd:02:ad:e8:2a:
                    9f:85:ab:f3:00:3f:fd:02:1f:15:43:81:4f:98:63:
                    14:d1:5e:92:d5:30:de:7f:20:c3:e5:b8:76:cb:0b:
                    d6:06:a0:cf:28:f4:8c:cd:87:eb:96:35:76:44:e1:
                    4e:f6:9a:df:84:c4:2f:43:9f:d8:f2:b8:3c:f6:47:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:5B:00:D6:7D:68:75:5F:31:AF:8E:FE:F5:46:AA:47:8C:3F:5A
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:1f:a7:94:60:46:fa:18:49:12:59:31:a1:8f:1c:e5:23:92:
         2d:fb:89:7e:8b:88:f0:fe:f0:69:f0:cf:a4:cf:b8:30:f7:51:
         e7:be:2a:83:fe:88:ec:15:8e:52:c3:d9:38:9f:c0:be:12:22:
         5d:dd:f3:24:1c:ba:a5:ed:46:85:27:b9:0a:e1:85:6b:53:8a:
         bb:19:2f:f7:38:94:f3:08:03:c4:42:ce:28:ba:33:53:76:1c:
         f8:38:7f:ee:bf:5e:fe:2f:c4:08:3e:e7:e9:87:45:af:fb:87:
         b1:67:12:76:86:ff:d4:b6:6b:63:a9:7f:cd:a2:ee:6e:ca:56:
         6b:f5:33:7e:7e:1a:a5:2a:3d:d9:01:1b:22:2e:40:54:71:49:
         ea:89:c7:e2:82:ad:3a:05:be:2d:89:01:b6:c4:4e:b1:49:c0:
         94:56:d2:1e:36:e0:5c:d9:c2:ce:84:3b:31:52:28:8d:e2:1b:
         15:59:a9:0a:4f:a6:1c:e4:d6:b3:55:9c:70:32:4e:c9:aa:4d:
         72:9e:13:53:1e:34:d5:ca:c2:e9:39:6d:ba:89:1f:25:b0:d6:
         fc:b1:96:fb:b0:79:10:ba:b4:66:75:52:a5:dc:bd:eb:9a:f0:
         a1:46:d0:92:fc:5e:b2:58:54:ec:b5:ae:14:47:e5:a4:38:38:
         f0:5a:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org