Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa
File:                     3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (raw, json)
Hash identifier:          v4H6gzAwImjArSoITiUSWI8LqHh+wkzR2yjGJMXJ6g4=
Subject key identifier:   D7:B0:E1:96:6D:D1:27:4B:DF:11:4F:C7:F0:08:67:C4:F6:BF:3A:10
Certificate issuer:       /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial:       6C7F608FC6193528D644564E6869F4B5ABF16ACE
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa
Signing time:             Tue 04 Jun 2024 08:30:43 +0000
ROA not before:           Tue 04 Jun 2024 08:25:43 +0000
ROA not after:            Tue 03 Jun 2025 08:30:43 +0000
asID:                     152438
IP address blocks:        157.66.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
                          rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7f:60:8f:c6:19:35:28:d6:44:56:4e:68:69:f4:b5:ab:f1:6a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
        Validity
            Not Before: Jun  4 08:25:43 2024 GMT
            Not After : Jun  3 08:30:43 2025 GMT
        Subject: CN=D7B0E1966DD1274BDF114FC7F00867C4F6BF3A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:60:a0:e7:c1:6b:02:31:61:63:96:c0:9b:84:
                    bc:4f:d4:36:34:8a:6b:6c:c5:95:99:98:58:30:42:
                    d9:99:26:10:c9:26:b8:93:11:f3:03:b8:41:55:78:
                    d0:55:13:7a:f5:ce:36:6b:b8:78:d2:9b:4c:9f:a4:
                    91:fe:6a:d3:2d:4e:68:7b:eb:e6:e0:d1:f6:b6:d7:
                    21:e2:09:24:1f:69:6c:f2:ba:b0:f6:5f:db:4c:52:
                    ae:50:45:e7:ba:e8:8e:fe:3c:32:8d:2e:35:26:c9:
                    8b:28:e7:86:79:c4:ca:34:5a:05:29:3e:89:a6:ca:
                    88:f5:12:22:44:2a:2b:b2:73:0a:2f:ef:a8:57:5d:
                    02:95:09:f6:82:b6:de:ad:5e:d9:4d:13:93:93:48:
                    1f:90:cc:e3:4e:99:11:e8:1b:b4:d1:d6:03:86:c4:
                    ca:e7:94:4c:25:17:5e:c2:0a:ad:b9:77:d3:e3:63:
                    46:50:ec:31:d3:c3:62:69:de:69:45:2f:de:0d:35:
                    c5:ab:e2:6f:c2:98:f7:fe:f1:7e:55:68:74:55:d6:
                    d4:8b:57:61:e0:8a:ce:7f:e5:69:5a:5c:e0:e6:90:
                    06:98:13:25:1b:62:1e:8e:17:4b:32:59:b6:3a:e5:
                    6d:2a:1f:e8:6f:a6:ff:30:40:53:72:53:26:54:27:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B0:E1:96:6D:D1:27:4B:DF:11:4F:C7:F0:08:67:C4:F6:BF:3A:10
            X509v3 Authority Key Identifier:
                keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:de:22:4e:97:4b:08:70:b3:d0:54:f5:60:67:a3:3a:60:e6:
         3b:ec:ff:30:dc:cd:9e:cf:35:cf:fe:ac:db:45:7d:f4:f7:ca:
         c3:87:6d:8c:83:a7:7d:5f:dc:49:9c:5b:32:e6:34:b4:17:a3:
         3a:c8:91:fd:4a:ea:60:a2:8c:d2:cf:67:90:e9:7a:ec:1f:90:
         95:12:a4:22:60:7d:53:58:be:16:f1:e3:85:1f:47:2c:2f:e3:
         13:68:5b:d7:38:36:95:1f:f1:58:55:13:2d:e9:a4:b0:8d:de:
         a7:dd:7c:35:ef:4d:9a:6e:18:89:ae:e5:6e:b8:e4:a9:5f:32:
         ce:fc:94:81:6a:e8:0f:80:13:1e:fe:d1:d1:7a:44:78:84:8c:
         5f:63:64:36:f8:eb:47:09:13:c4:c2:09:0b:7b:e6:9a:36:03:
         d4:6b:49:58:3d:15:b8:0f:ea:04:b9:d8:9c:29:96:57:7c:4b:
         f6:75:56:db:bb:af:bb:bf:9d:24:43:bf:7e:86:89:96:63:fd:
         b0:07:c6:69:df:9c:1c:5e:3d:ec:f2:a7:3d:d8:cd:39:1d:ab:
         b8:4b:78:ef:fc:09:3b:0b:55:51:df:ae:1b:a0:73:fb:ac:5b:
         4b:c4:b0:dd:37:51:d7:28:80:5b:ed:7f:fe:0f:3f:dc:5f:a5:
         56:20:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org