Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa
File:                     3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (raw, json)
Hash identifier:          AZEmfCNTiV+FYg/yw9hFETkUfFbbK5ftbZE0ZS1n9Ro=
Subject key identifier:   74:78:A8:43:86:97:98:FF:1C:F7:20:5A:00:A5:B4:0C:2C:EC:A0:10
Certificate issuer:       /CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28
Certificate serial:       44703E071F1DAA79ABA474B99C3769373172EFB5
Authority key identifier: 64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa
Signing time:             Thu 18 Jul 2024 18:41:48 +0000
ROA not before:           Thu 18 Jul 2024 18:36:48 +0000
ROA not after:            Thu 17 Jul 2025 18:41:48 +0000
asID:                     152441
IP address blocks:        157.66.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl
                          rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:70:3e:07:1f:1d:aa:79:ab:a4:74:b9:9c:37:69:37:31:72:ef:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6428361522977EC74FA3D4ECB6009CCF78C9BC28
        Validity
            Not Before: Jul 18 18:36:48 2024 GMT
            Not After : Jul 17 18:41:48 2025 GMT
        Subject: CN=7478A843869798FF1CF7205A00A5B40C2CECA010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:ef:9a:a5:2a:35:bf:9b:7f:e6:64:56:74:
                    c9:19:7a:5b:ab:84:b3:b4:bf:6b:4c:3f:b0:88:1f:
                    02:f9:45:e2:2c:5f:e9:99:6a:62:2a:87:bd:f0:50:
                    f3:8c:d9:94:ee:70:52:50:4d:2a:45:7b:35:e8:a1:
                    d1:0a:f4:fc:13:d4:2a:07:56:79:b4:64:6f:b5:1a:
                    81:ce:19:53:fd:ca:6a:ee:1f:25:ff:18:04:9b:cd:
                    90:b6:b2:1e:25:b8:42:51:6f:2b:a6:f5:28:2f:c6:
                    6f:d1:68:8c:92:27:46:a3:69:c5:09:41:b4:71:a9:
                    3d:a7:a9:04:8f:83:62:c7:9d:de:14:23:d3:ef:ef:
                    69:56:ed:d7:3d:91:d9:8a:0e:3f:ed:77:37:27:0b:
                    4f:76:e5:c8:6e:c7:11:b5:5f:bd:af:5a:ea:ea:36:
                    81:b3:97:76:72:47:14:a0:01:2c:73:f2:9a:d3:69:
                    eb:56:79:07:9c:26:a8:50:be:8a:94:f3:b0:dd:84:
                    57:fd:97:b9:fe:1e:d0:5b:02:f7:51:c7:a5:9e:14:
                    bb:af:d5:cd:b0:cd:f7:50:da:d9:6c:9a:03:69:e2:
                    ac:26:d0:b9:d8:38:01:21:48:cb:9f:29:cb:64:87:
                    f5:cc:20:64:7b:19:64:b4:99:1c:eb:78:ae:ab:84:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:78:A8:43:86:97:98:FF:1C:F7:20:5A:00:A5:B4:0C:2C:EC:A0:10
            X509v3 Authority Key Identifier:
                keyid:64:28:36:15:22:97:7E:C7:4F:A3:D4:EC:B6:00:9C:CF:78:C9:BC:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/6428361522977EC74FA3D4ECB6009CCF78C9BC28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6428361522977EC74FA3D4ECB6009CCF78C9BC28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:47:65:7f:15:cd:92:ac:40:eb:9f:12:58:27:3e:d5:74:44:
         29:3d:93:78:21:40:6e:0e:0b:3e:01:2f:67:31:f7:13:66:ec:
         c1:bf:1d:1d:17:15:49:fe:8b:73:a0:49:78:c6:27:b9:96:c1:
         6e:95:16:2c:4f:ea:1b:cf:9c:c2:ca:04:9c:d3:ac:18:d9:71:
         3b:5a:6a:6f:26:24:79:1d:e8:3c:40:66:fd:c4:db:6b:46:f5:
         97:5a:31:f2:73:d4:56:04:d1:78:5c:f2:d2:04:6e:f0:a2:ad:
         c1:7e:46:13:12:83:e6:40:8d:cb:fc:cc:b3:95:a7:92:e5:c3:
         72:54:d7:58:b8:1e:5f:2b:c5:95:d9:97:3e:7d:c5:dc:4e:1f:
         1b:1b:6f:67:b2:18:ce:2f:9e:2e:c3:c1:d1:e4:7b:73:f3:ed:
         8d:fe:4a:f8:3e:9b:dd:46:52:fe:aa:26:44:91:68:be:58:60:
         d8:ba:88:c2:29:ba:76:d3:cc:58:c8:77:96:62:1f:63:60:d5:
         60:d1:b0:e4:f7:13:f5:53:e6:d2:59:17:50:0c:2a:9e:58:cc:
         88:f5:04:e9:16:0e:27:a5:2f:88:b6:24:c6:59:81:87:59:36:
         86:13:b3:ba:e5:2d:74:68:c7:22:5e:40:4d:68:43:7b:b1:5d:
         50:d9:a8:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURHA+Bx8dqnmrpHS5nDdpNzFy77UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3
OEM5QkMyODAeFw0yNDA3MTgxODM2NDhaFw0yNTA3MTcxODQxNDhaMDMxMTAvBgNV
BAMTKDc0NzhBODQzODY5Nzk4RkYxQ0Y3MjA1QTAwQTVCNDBDMkNFQ0EwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcE++apSo1v5t/5mRWdMkZelur
hLO0v2tMP7CIHwL5ReIsX+mZamIqh73wUPOM2ZTucFJQTSpFezXoodEK9PwT1CoH
Vnm0ZG+1GoHOGVP9ymruHyX/GASbzZC2sh4luEJRbyum9Sgvxm/RaIySJ0ajacUJ
QbRxqT2nqQSPg2LHnd4UI9Pv72lW7dc9kdmKDj/tdzcnC0925chuxxG1X72vWurq
NoGzl3ZyRxSgASxz8prTaetWeQecJqhQvoqU87DdhFf9l7n+HtBbAvdRx6WeFLuv
1c2wzfdQ2tlsmgNp4qwm0LnYOAEhSMufKctkh/XMIGR7GWS0mRzreK6rhJI/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdHioQ4aXmP8c9yBaAKW0DCzsoBAwHwYDVR0j
BBgwFoAUZCg2FSKXfsdPo9TstgCcz3jJvCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMC82NDI4MzYxNTIy
OTc3RUM3NEZBM0Q0RUNCNjAwOUNDRjc4QzlCQzI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjQyODM2MTUyMjk3N0VDNzRGQTNENEVDQjYwMDlDQ0Y3OEM5
QkMyOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NDQ2NTYzLTA5YmMtNDkxYi04
ZmI5LWZkMzlmMDkxNjY5ZC8wLzMxMzUzNzJlMzYzNjJlMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CEjANBgkqhkiG
9w0BAQsFAAOCAQEAJ0dlfxXNkqxA658SWCc+1XREKT2TeCFAbg4LPgEvZzH3E2bs
wb8dHRcVSf6Lc6BJeMYnuZbBbpUWLE/qG8+cwsoEnNOsGNlxO1pqbyYkeR3oPEBm
/cTba0b1l1ox8nPUVgTReFzy0gRu8KKtwX5GExKD5kCNy/zMs5WnkuXDclTXWLge
XyvFldmXPn3F3E4fGxtvZ7IYzi+eLsPB0eR7c/Ptjf5K+D6b3UZS/qomRJFovlhg
2LqIwim6dtPMWMh3lmIfY2DVYNGw5PcT9VPm0lkXUAwqnljMiPUE6RYOJ6UviLYk
xlmBh1k2hhOzuuUtdGjHIl5ATWhDe7FdUNmoFw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org