Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
File:                     3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier:          X8Tudvsjk5JQZe7M1xTFDgdso21np02ozo3uH6oMpQs=
Subject key identifier:   F7:B9:EB:4F:27:5D:CF:FD:BE:2F:29:E4:21:03:60:6D:8B:E2:F5:40
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       7909C6DA48D27FB4DCDB4C8BBD554D82B8D8F646
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
Signing time:             Mon 10 Jun 2024 07:35:21 +0000
ROA not before:           Mon 10 Jun 2024 07:30:21 +0000
ROA not after:            Mon 09 Jun 2025 07:35:21 +0000
asID:                     152770
IP address blocks:        157.66.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 06:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:c6:da:48:d2:7f:b4:dc:db:4c:8b:bd:55:4d:82:b8:d8:f6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: Jun 10 07:30:21 2024 GMT
            Not After : Jun  9 07:35:21 2025 GMT
        Subject: CN=F7B9EB4F275DCFFDBE2F29E42103606D8BE2F540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:8b:47:34:47:13:b0:cc:14:0d:17:03:44:
                    51:d2:f5:5a:85:37:3d:6f:c0:b3:2e:1a:39:1e:56:
                    1b:0f:ad:37:6c:b1:0c:8c:89:81:f3:ac:e5:b7:f7:
                    d8:7c:fc:d5:8b:b8:ab:ef:96:1d:40:cb:73:67:87:
                    4a:84:3e:c0:ad:bd:74:0b:27:30:85:eb:66:6e:92:
                    a6:6e:60:d8:38:3d:7d:bd:6e:d8:3a:ae:70:ad:50:
                    a7:13:b3:b4:07:90:6d:e4:66:41:76:31:d7:36:9c:
                    ce:b3:a4:9e:f6:da:3c:3d:5a:70:0c:fd:39:bc:ff:
                    28:b5:c7:14:42:a1:b2:be:93:a7:a8:7d:1e:f3:d0:
                    ea:10:88:72:71:de:10:64:51:1b:fa:56:e0:7a:df:
                    22:05:6f:6b:8b:04:b2:a4:ee:cb:57:a5:58:f3:1f:
                    a0:0b:0b:6f:0f:1c:a3:80:ff:61:19:22:25:4e:a8:
                    27:8c:12:a9:21:1f:f0:46:27:60:89:09:d2:9d:be:
                    f6:e1:9b:48:44:0c:06:51:46:fa:b7:96:38:b6:11:
                    de:f3:c3:df:0d:e7:3e:cf:01:28:20:30:f5:93:6a:
                    72:28:7f:a3:be:b9:81:8e:14:0d:37:ba:d7:62:f1:
                    f6:e4:17:9b:2f:de:43:6b:5e:fc:14:e3:b0:17:b5:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:EB:4F:27:5D:CF:FD:BE:2F:29:E4:21:03:60:6D:8B:E2:F5:40
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:ad:79:38:26:9f:2d:b2:0d:08:32:9b:e1:a5:f2:7b:1a:
         1a:84:38:c9:c9:48:5f:ea:ed:0e:6c:20:ee:b5:46:8b:90:75:
         5c:5f:d0:ac:d4:87:42:9c:42:16:28:3f:67:f6:9e:1d:a0:5f:
         31:45:26:14:19:81:56:26:38:b3:51:9b:a8:d1:8c:96:8e:48:
         45:d0:1d:02:5a:a9:dc:ca:dc:1b:67:4a:a9:f8:29:27:ce:d9:
         e0:23:df:d7:18:f5:f2:ef:7e:0e:65:94:33:ce:b3:23:84:44:
         4e:f3:67:6a:c3:11:7f:dc:c9:21:f0:6e:c1:f9:c0:37:da:b9:
         5c:23:f4:5a:be:9b:67:25:e3:92:a3:9a:b7:39:f6:03:a5:d8:
         02:b3:cd:46:d8:75:c9:a6:ea:c3:15:c2:5a:50:f3:26:95:e0:
         51:89:42:2f:a8:38:0b:30:ec:eb:ec:6a:19:f3:43:49:27:19:
         cd:d9:2a:13:07:23:27:5c:bb:95:a3:43:0d:26:2a:81:06:c4:
         f3:a6:07:cb:f9:71:a8:d4:f1:09:1b:d9:44:cd:15:3d:89:16:
         6f:82:7e:bc:91:90:c0:51:9f:1f:27:1a:de:d6:b0:b9:2f:c0:
         43:d5:c3:69:5f:e8:32:aa:03:ff:d9:e4:00:71:3d:7c:9a:c3:
         19:8f:98:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:04:53 2024 by rpki-client on console-ams.rpki-client.org