Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa
File:                     3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (raw, json)
Hash identifier:          mYajgYdfqfGIEkevHv+d3gbzHhbdWvFDW2nIXkKiX0E=
Subject key identifier:   52:00:47:D8:88:42:27:4F:7B:B5:54:2B:80:2E:21:1D:6D:E1:7F:C2
Certificate issuer:       /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA
Certificate serial:       4F94A5F0DE1DBC6CDCD9AD104B0F8D8796ED26
Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa
Signing time:             Tue 14 May 2024 10:15:54 +0000
ROA not before:           Tue 14 May 2024 10:10:54 +0000
ROA not after:            Tue 13 May 2025 10:15:54 +0000
asID:                     140016
IP address blocks:        157.66.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl
                          rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:94:a5:f0:de:1d:bc:6c:dc:d9:ad:10:4b:0f:8d:87:96:ed:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA
        Validity
            Not Before: May 14 10:10:54 2024 GMT
            Not After : May 13 10:15:54 2025 GMT
        Subject: CN=520047D88842274F7BB5542B802E211D6DE17FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:ee:1d:61:f4:1d:43:e1:81:76:26:a5:9a:
                    90:5d:d4:2a:33:c3:9c:2d:d9:ab:09:6e:aa:68:a4:
                    1c:9d:f9:02:d9:35:d2:dc:d8:9b:5b:45:aa:1a:6e:
                    02:d8:03:53:fc:f7:d7:bf:81:51:ca:82:8a:7c:02:
                    f6:0b:3d:3f:63:42:75:67:19:93:58:ef:9f:09:6f:
                    49:c7:78:50:73:70:c0:06:51:42:5a:85:72:df:ea:
                    f6:6e:be:4a:82:1c:df:5a:9e:f5:df:0b:9c:ca:35:
                    10:84:5c:cf:22:5e:71:5e:4c:44:89:9a:11:f6:0b:
                    29:6b:4b:80:d0:ae:f0:63:04:7e:89:06:47:29:ea:
                    3a:4b:8a:f9:06:3a:ba:da:2a:fd:a8:5c:54:ee:6f:
                    e6:b3:bf:10:cc:9a:03:2a:ca:f4:12:6a:d3:4d:2d:
                    77:73:7a:75:d9:1b:0f:e4:80:99:68:aa:03:2d:90:
                    e3:a4:16:10:14:59:2c:98:41:87:88:3c:64:26:51:
                    6e:6a:f0:6f:ad:2a:e7:9c:1c:0c:bd:bc:9a:6b:57:
                    9e:24:18:62:33:0f:44:09:6e:55:3a:0c:d6:13:38:
                    d4:d0:81:d0:b1:ba:1d:f6:84:80:44:f6:e5:63:d3:
                    b9:f7:79:24:f4:e6:a6:2d:91:bb:a1:a3:72:54:24:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:47:D8:88:42:27:4F:7B:B5:54:2B:80:2E:21:1D:6D:E1:7F:C2
            X509v3 Authority Key Identifier:
                keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:c3:7b:9c:d2:e9:f5:24:83:76:e2:60:cd:bc:78:f0:ed:
         da:79:f8:09:ce:f1:58:9c:65:46:c3:57:e5:90:0f:04:41:aa:
         fa:b6:51:7d:0e:0c:c9:18:cf:3c:82:2b:68:9c:0b:d4:9c:b8:
         3f:7b:ed:82:3d:8e:0c:ac:fd:e4:ac:c3:fe:cc:5e:aa:34:d2:
         e6:70:3a:58:7c:04:76:01:e3:2f:f3:af:a1:3e:29:9b:c0:92:
         cd:1f:7d:73:da:94:83:d9:af:96:29:9e:60:47:f5:3e:42:93:
         5f:83:af:19:61:93:69:95:8b:06:3c:1d:8c:54:c4:63:8e:6a:
         59:cc:be:32:a5:94:d2:51:b9:9b:9a:40:43:56:fd:0d:98:66:
         41:c5:a8:29:96:9a:98:4c:d9:8c:a9:f1:c8:5e:f1:e8:7e:ec:
         1e:b6:f2:cf:58:fb:d2:f0:e6:f2:19:c8:fe:da:8f:e6:d6:f4:
         dd:01:88:ee:db:93:63:36:a1:6f:10:ae:15:15:5c:d2:e8:21:
         dd:8b:88:17:ee:66:8c:ae:2f:37:c3:13:69:83:49:bf:e0:8a:
         4b:f5:91:bf:db:dc:6c:20:3a:ae:44:d6:78:13:fa:fd:95:74:
         d8:99:75:d0:dd:f7:f6:0e:2e:58:3b:0a:25:ff:c7:a4:57:53:
         30:c8:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:51 2024 by rpki-client on console-fra.rpki-client.org