Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
File:                     3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier:          VS9Cuwn3t0q97SOCPiAILshVWhFmPtuLTGwgoCrL9Gw=
Subject key identifier:   B0:C8:47:DC:4D:89:E8:F0:E7:4E:6D:8D:17:27:48:7E:CD:88:CC:53
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       53EE286EB55542F66C6E504BE0B44C330F4C0C6E
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
Signing time:             Mon 10 Jun 2024 07:35:07 +0000
ROA not before:           Mon 10 Jun 2024 07:30:07 +0000
ROA not after:            Mon 09 Jun 2025 07:35:07 +0000
asID:                     152770
IP address blocks:        157.66.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ee:28:6e:b5:55:42:f6:6c:6e:50:4b:e0:b4:4c:33:0f:4c:0c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Jun 10 07:30:07 2024 GMT
            Not After : Jun  9 07:35:07 2025 GMT
        Subject: CN=B0C847DC4D89E8F0E74E6D8D1727487ECD88CC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:e8:13:5a:68:97:60:de:26:8d:79:87:b9:
                    d6:5e:ee:73:4c:35:1e:96:9d:a1:03:92:ff:7b:70:
                    28:3e:80:19:d5:b2:0b:cf:60:b9:15:12:97:d5:69:
                    b4:e2:e4:15:3d:e8:9e:b4:bc:57:dd:c1:f6:6e:88:
                    5f:a4:89:0d:7c:c2:ff:ee:ab:b1:ac:41:fd:55:49:
                    70:d8:66:30:0f:21:dd:b6:23:52:f3:2b:05:3d:0f:
                    77:4e:f1:12:0e:16:d0:e5:cc:5a:8b:b2:50:74:cf:
                    33:56:e1:95:cf:91:e0:37:b0:9c:55:3d:12:b5:0d:
                    6b:ef:83:ca:05:05:08:ff:7e:e5:9d:bd:98:7d:16:
                    ed:c1:25:a4:e4:3d:f1:76:45:f9:79:75:57:84:1b:
                    e7:f3:6e:05:da:97:47:82:0e:76:ea:e9:e7:8a:ae:
                    a4:72:a7:0b:20:f9:eb:2e:7c:3e:47:69:7a:31:5d:
                    85:70:e6:19:af:bc:16:d8:c7:f1:34:c0:12:da:c4:
                    65:0f:71:72:a5:a5:c4:e3:ad:27:e8:5d:f1:43:76:
                    2c:44:99:fe:05:e6:d0:e0:fc:36:21:9a:ef:6f:07:
                    64:67:7e:19:86:67:fa:72:da:57:37:22:6d:e9:72:
                    4a:45:3e:95:36:85:2f:ba:e0:8b:fd:f8:53:6f:93:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:47:DC:4D:89:E8:F0:E7:4E:6D:8D:17:27:48:7E:CD:88:CC:53
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:4b:ad:ab:b4:08:02:60:ed:15:31:03:48:91:e5:ed:0a:
         55:c0:01:df:39:c1:bb:3b:d7:01:a7:db:2a:21:52:21:fe:d6:
         a6:a1:77:83:dd:50:74:87:09:a4:52:3f:25:dc:2c:23:a1:a9:
         14:3b:03:8e:5f:04:ba:5b:58:db:52:6c:fc:0c:3f:7f:b1:3f:
         85:2a:6f:33:cd:7c:53:df:05:f5:f0:27:b9:7b:4e:a9:b0:5c:
         74:ff:03:3c:bd:18:19:dd:7d:26:e3:2c:99:13:02:ca:04:0c:
         8c:f9:de:36:69:b6:40:79:4a:51:96:ae:b4:64:ab:f5:f7:3b:
         e3:11:3f:84:e8:7b:79:be:84:bd:4c:da:ca:5a:06:39:4e:44:
         d7:f8:11:d3:89:cf:7e:ae:f4:6a:7a:80:76:f7:75:06:d6:b5:
         0f:a2:15:d0:ce:86:b8:cc:9b:3d:a2:3e:ad:b7:49:e8:74:25:
         70:cf:92:dc:84:d3:e4:c0:8a:2f:e5:dd:75:bd:28:b9:25:66:
         b9:f2:0d:8b:b5:d1:db:2e:d6:8d:ce:5d:11:92:95:a5:ab:ff:
         c1:c4:82:cb:bf:c0:5a:df:f8:1e:1c:27:ab:ed:b2:f0:14:45:
         b4:b7:3b:46:e5:e3:61:1f:03:b5:9d:30:76:ca:a9:ee:2b:8f:
         9e:b6:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:47 2024 by rpki-client on console-fra.rpki-client.org