Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa
File:                     3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (raw, json)
Hash identifier:          Qz1Kg1HQXiKB/AScS9V+bE6Z+oOPaOLRSzeXmFVh+Jk=
Subject key identifier:   5F:82:E8:E9:08:F1:3F:7F:8D:9D:53:E6:1C:7D:C7:EF:6D:E7:4D:E2
Certificate issuer:       /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
Certificate serial:       2FF5E50CA781FF0D581EC67912FF22CB2EBC809A
Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa
Signing time:             Thu 27 Jun 2024 09:54:19 +0000
ROA not before:           Thu 27 Jun 2024 09:49:19 +0000
ROA not after:            Thu 26 Jun 2025 09:54:19 +0000
asID:                     138804
IP address blocks:        157.66.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl
                          rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f5:e5:0c:a7:81:ff:0d:58:1e:c6:79:12:ff:22:cb:2e:bc:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6
        Validity
            Not Before: Jun 27 09:49:19 2024 GMT
            Not After : Jun 26 09:54:19 2025 GMT
        Subject: CN=5F82E8E908F13F7F8D9D53E61C7DC7EF6DE74DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:01:3b:7e:54:64:e2:e2:dc:7a:6e:03:ae:
                    99:22:0c:f9:32:99:f2:e9:5d:b2:77:02:85:cc:90:
                    e5:db:08:33:c8:9e:6c:11:88:e1:fa:00:45:2a:e9:
                    12:00:58:10:df:76:0e:13:91:7f:21:1a:62:28:f5:
                    5c:d5:fa:ab:3b:0d:50:6a:26:aa:06:a1:9f:1a:52:
                    54:4f:c8:aa:9c:f7:fc:54:b1:ee:e7:88:44:d6:59:
                    80:2e:94:6a:d7:a5:1f:26:99:c1:fc:b4:42:43:35:
                    65:91:a0:15:9a:3b:b7:ec:84:17:e2:6f:bf:47:fc:
                    cb:71:1b:d6:11:12:24:92:b1:ed:a5:97:10:18:cf:
                    12:fe:c7:af:5a:94:78:2a:d4:b4:01:ee:cd:62:bd:
                    2f:23:6e:be:56:01:0f:2a:30:32:c3:16:92:da:bf:
                    87:be:97:00:68:d0:e2:e4:9c:a9:6e:02:1d:32:b3:
                    40:2f:8c:e0:a0:bf:94:f7:c6:d7:09:49:d1:7a:af:
                    5b:4b:3f:af:be:84:99:c9:1c:7f:b5:73:99:22:66:
                    49:a6:df:e0:c5:ab:29:c5:85:4d:bb:c2:de:71:a1:
                    12:3c:0e:14:4c:de:fe:14:4e:c5:87:e7:1b:0a:31:
                    94:4d:13:93:90:e8:d5:8c:5e:85:9c:91:8a:cc:31:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:82:E8:E9:08:F1:3F:7F:8D:9D:53:E6:1C:7D:C7:EF:6D:E7:4D:E2
            X509v3 Authority Key Identifier:
                keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:86:84:b5:57:d1:14:45:17:a5:e9:4e:29:c3:d2:1f:6a:ae:
         7c:fc:47:37:2e:de:f4:9c:0f:a1:6e:54:5f:b2:e6:5a:77:25:
         ad:5b:6a:a7:02:42:4d:12:6b:ee:6f:21:b4:96:59:e9:b6:ee:
         33:ab:ff:75:b9:ab:25:93:71:14:c6:f4:86:34:75:1b:f6:fa:
         ee:48:ea:32:0a:41:ca:5a:1d:a1:16:5a:12:5f:af:0b:01:7a:
         2b:6c:68:cb:d1:9a:1b:95:13:9a:f1:ac:11:a5:18:9f:08:f7:
         9a:70:73:c4:c0:0b:95:80:17:91:5e:6c:d3:dd:c5:1b:4c:68:
         aa:d3:e4:f9:8d:c1:df:c7:35:ae:c2:53:d3:f1:31:d0:05:fe:
         6f:48:53:74:34:00:ef:c5:97:5f:5d:d4:24:e9:06:1c:7f:5a:
         2f:45:5c:4d:7f:2d:15:57:f2:c6:a6:6e:a8:50:d1:40:39:a2:
         74:c8:02:72:c9:1e:94:8c:15:6c:0a:5a:a9:88:37:fc:97:9e:
         38:cd:eb:ed:a9:90:5e:f2:d5:06:aa:68:c6:5f:8d:d7:c0:29:
         7e:3f:e0:9b:7c:1d:73:f9:c9:8a:c4:89:44:40:38:cd:a6:b3:
         47:c8:06:2d:25:54:ab:2e:1b:cd:7d:78:bf:41:80:69:73:1f:
         d1:e7:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org