Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa
File:                     3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (raw, json)
Hash identifier:          06Cec8xVPiYb0c70fqAa/HVAsGAHQ3+T6hqXoF+BqVw=
Subject key identifier:   1D:98:E4:88:5C:63:B9:1C:60:E8:70:8E:26:3A:B7:BE:39:EB:34:8F
Certificate issuer:       /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
Certificate serial:       3DBA02EC1A50F778BAFE1755BC58E08CACAD8D73
Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa
Signing time:             Thu 23 May 2024 12:35:42 +0000
ROA not before:           Thu 23 May 2024 12:30:42 +0000
ROA not after:            Thu 22 May 2025 12:35:42 +0000
asID:                     136089
IP address blocks:        157.66.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl
                          rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ba:02:ec:1a:50:f7:78:ba:fe:17:55:bc:58:e0:8c:ac:ad:8d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4
        Validity
            Not Before: May 23 12:30:42 2024 GMT
            Not After : May 22 12:35:42 2025 GMT
        Subject: CN=1D98E4885C63B91C60E8708E263AB7BE39EB348F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:51:a8:01:eb:a3:55:47:b4:73:e6:f4:16:f6:
                    d9:57:09:9a:33:15:11:69:2a:17:32:4e:1a:a1:09:
                    17:36:50:71:b5:99:fe:d0:c2:6f:11:8c:70:e8:b8:
                    b9:a8:9c:8d:75:ce:09:1d:b5:a9:b7:6f:99:70:de:
                    d2:36:69:4a:e6:d2:b5:48:3b:98:b5:96:ed:a4:90:
                    ff:1f:ad:ef:21:7b:5b:be:fb:8e:03:e9:3d:48:64:
                    12:96:63:bc:a0:28:6f:74:56:b3:ea:5c:59:be:9e:
                    ed:84:f8:01:d5:95:5c:93:2a:25:38:ad:fc:94:c5:
                    6b:4f:12:2e:51:28:bb:07:2e:64:d5:9d:89:7f:5f:
                    14:d1:f8:71:05:49:0f:03:ed:5d:1c:f6:11:a1:b1:
                    62:1d:ee:3d:b6:c7:c3:41:96:c3:dd:fc:57:f7:c2:
                    0c:2a:79:0f:6b:be:93:6b:4e:40:34:4c:13:8e:27:
                    98:06:2a:bb:8c:cf:18:b7:e9:cb:24:c5:42:d9:00:
                    4b:de:7c:e8:25:fa:75:3b:07:c3:7f:21:4e:00:94:
                    b0:e2:e1:f9:d8:16:76:4a:f2:32:b5:38:33:54:fd:
                    49:c7:c2:e6:92:c5:22:d9:f4:48:f3:d0:fc:bd:0e:
                    42:1b:39:02:0e:12:81:9c:be:97:f6:a2:47:f4:95:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:E4:88:5C:63:B9:1C:60:E8:70:8E:26:3A:B7:BE:39:EB:34:8F
            X509v3 Authority Key Identifier:
                keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:85:cb:5e:33:15:71:2a:8b:f4:b1:42:18:79:fb:6e:2c:f0:
         43:0e:95:ee:07:5d:74:44:e5:63:36:22:c0:80:6e:06:39:81:
         36:6b:b0:2b:56:c8:05:b2:33:52:a8:5f:ee:94:fc:09:16:83:
         9b:78:fa:38:28:f2:e7:25:59:f2:c6:8e:9b:7e:6e:b2:7a:3e:
         c0:b8:7f:ed:bc:d5:9e:27:d1:89:ec:11:20:8e:2d:e8:fa:15:
         55:17:31:b0:51:9f:b7:8e:0e:27:84:75:c2:ec:57:df:e9:fc:
         6b:a4:f7:2f:86:bd:fb:d9:d7:71:ce:39:ca:64:7f:72:a2:04:
         55:a9:77:94:dc:07:44:9a:e9:f8:6a:7a:63:6e:9b:b0:09:88:
         ec:c0:67:90:d5:27:b8:0c:7b:28:2b:ed:41:d0:0f:c4:d0:2f:
         8c:95:41:a9:84:82:1b:b9:d7:ad:17:92:e3:39:6f:29:24:7a:
         93:cb:2e:70:e8:ba:2a:8d:e7:0f:89:e0:a9:37:4a:05:64:fd:
         7d:68:04:a2:99:28:b6:aa:f6:0c:25:eb:65:11:09:3a:b3:b0:
         6d:98:5a:88:f9:fe:f3:6f:c2:ac:88:8a:ac:7f:58:dc:c4:e9:
         b6:c1:74:8f:bf:2d:72:c2:8d:70:bc:63:9a:d5:85:4e:5f:76:
         39:0f:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org