Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa
File:                     3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (raw, json)
Hash identifier:          dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=
Subject key identifier:   05:C7:BB:B3:69:95:1B:41:E2:DD:4C:05:12:7F:91:C9:8B:78:CE:6E
Certificate issuer:       /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
Certificate serial:       43AFD484FD6C17E1A08B880EF9118660CE539BFF
Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa
Signing time:             Wed 12 Jun 2024 06:59:22 +0000
ROA not before:           Wed 12 Jun 2024 06:54:22 +0000
ROA not after:            Wed 11 Jun 2025 06:59:22 +0000
asID:                     139937
IP address blocks:        157.66.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl
                          rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:d4:84:fd:6c:17:e1:a0:8b:88:0e:f9:11:86:60:ce:53:9b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4
        Validity
            Not Before: Jun 12 06:54:22 2024 GMT
            Not After : Jun 11 06:59:22 2025 GMT
        Subject: CN=05C7BBB369951B41E2DD4C05127F91C98B78CE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:f0:b9:0a:04:87:9d:6a:60:4d:e7:09:3b:
                    0c:7f:28:51:6f:ee:4d:be:05:82:43:22:42:81:39:
                    24:0b:60:57:2b:f2:67:fa:a0:d4:a4:58:24:18:55:
                    e5:05:6a:c6:2b:c6:cc:e0:90:0d:3d:25:51:b1:2a:
                    c4:a4:a4:fc:5c:ce:f9:e3:a6:23:a9:1f:e9:4a:88:
                    da:5a:83:0b:86:43:c0:ed:d8:74:84:ec:da:5a:ef:
                    f2:64:c7:c8:41:b8:04:68:50:c1:64:00:f7:c0:97:
                    95:ad:a1:12:60:f5:01:85:34:73:2a:89:a5:17:8b:
                    f9:53:a9:bd:16:62:f8:78:20:10:0b:b9:f4:11:8d:
                    d9:91:71:f1:fc:b5:67:e3:a8:d9:7f:c9:41:c5:75:
                    e4:f1:88:c3:ef:79:f3:d4:15:fc:d2:47:06:69:d4:
                    13:e4:5b:74:d9:17:b2:30:55:4c:45:85:51:56:f3:
                    a2:3b:03:06:7a:73:2a:62:69:0f:4e:21:08:02:6f:
                    90:21:9b:3c:de:5b:d1:4a:b1:3e:c4:a4:7f:48:cc:
                    f0:40:e6:e0:28:1c:8f:29:f8:c1:23:c6:57:f8:a2:
                    4a:a3:cc:71:a9:14:7a:7a:b6:b4:ba:94:c6:ec:61:
                    ed:e6:3f:bf:d4:bb:26:21:2c:69:c5:86:f5:b2:48:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:BB:B3:69:95:1B:41:E2:DD:4C:05:12:7F:91:C9:8B:78:CE:6E
            X509v3 Authority Key Identifier:
                keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:4c:e7:28:7f:06:fb:f0:bc:d0:1e:18:94:85:38:a9:15:
         64:03:a4:b8:c2:b1:99:20:58:7b:fc:b1:88:62:53:94:a5:72:
         a0:e4:b2:ea:90:50:81:e6:2d:5f:1c:11:ed:75:b7:7a:cc:5e:
         ae:13:4d:cb:6a:1d:25:97:06:c4:da:06:f5:9b:f2:42:cb:9a:
         33:f3:a9:af:96:e3:43:e9:f5:85:e3:9e:69:8f:a7:c4:2b:c0:
         4a:c5:17:f6:ef:a4:02:6f:5d:3b:e6:5e:24:4e:12:c8:f0:00:
         66:58:2c:1e:6b:d7:df:34:e9:e8:c6:22:04:a8:7d:3e:49:2e:
         c6:92:39:97:a4:de:aa:e5:eb:6e:37:48:48:4e:92:7c:fd:1e:
         5e:58:9d:bf:8a:cb:e5:33:05:96:da:a7:a8:f2:d5:c4:c0:7a:
         b7:77:2c:52:9e:fd:ad:2c:97:71:ae:8d:b5:f4:dc:07:30:69:
         72:72:b9:0f:e4:81:db:48:45:79:c2:ab:cb:ff:1f:49:a7:08:
         f5:05:99:cf:6d:fa:7a:a9:3e:6f:d2:6e:15:26:b3:ad:cc:34:
         7b:15:8c:e8:fa:07:32:aa:9a:45:88:39:2b:57:87:48:9c:06:
         b5:fb:3c:30:6b:4c:91:23:72:8e:78:e9:bc:f0:a0:26:71:75:
         5a:83:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:50 2024 by rpki-client on console-fra.rpki-client.org