Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa
File:                     3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (raw, json)
Hash identifier:          AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=
Subject key identifier:   71:B6:40:9D:F5:B7:15:14:70:8E:22:76:B1:ED:D8:C7:26:61:C7:2E
Certificate issuer:       /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
Certificate serial:       1AC895C05FAC4174C80C281ED3346E8EA79627EB
Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa
Signing time:             Sat 02 Nov 2024 12:00:12 +0000
ROA not before:           Sat 02 Nov 2024 11:55:12 +0000
ROA not after:            Sat 01 Nov 2025 12:00:12 +0000
asID:                     152794
IP address blocks:        157.66.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl
                          rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:95:c0:5f:ac:41:74:c8:0c:28:1e:d3:34:6e:8e:a7:96:27:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5
        Validity
            Not Before: Nov  2 11:55:12 2024 GMT
            Not After : Nov  1 12:00:12 2025 GMT
        Subject: CN=71B6409DF5B71514708E2276B1EDD8C72661C72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:5f:df:64:f1:3a:bf:f0:a4:f3:ac:1a:03:
                    c5:c5:64:5d:3b:7c:b1:10:d0:76:2a:e6:2a:4d:7b:
                    02:ea:62:35:4f:d7:31:f0:44:d3:ac:8c:95:33:5e:
                    44:19:75:5a:27:c7:50:fc:dc:60:24:7f:8a:8e:ea:
                    dd:55:e5:69:e0:97:a9:22:94:67:57:99:82:c4:dd:
                    32:6d:cb:ec:4b:83:ee:69:11:06:d4:43:d9:23:89:
                    7b:16:c0:2e:16:86:b5:8d:7f:4f:b3:e7:8d:13:e2:
                    71:34:d9:af:3b:86:22:4e:3c:03:2e:cb:1b:94:54:
                    e0:98:0c:bd:89:d8:fe:40:c3:c8:cd:bf:09:70:de:
                    8a:3c:07:a0:3e:82:3f:a1:a3:81:3e:28:bf:59:e7:
                    9a:6a:a9:c1:1f:60:dc:c9:c5:3d:47:d5:25:a4:fb:
                    a9:59:e6:74:86:4c:a4:b6:54:5d:6e:f1:4f:89:05:
                    a1:ec:c0:8a:5d:7b:e7:62:13:1a:08:5c:bd:6d:1d:
                    62:9c:e9:0a:2e:fe:e8:33:7c:9d:70:22:1d:22:db:
                    88:26:fc:f8:c9:c5:19:3b:39:39:d3:e1:16:a3:4b:
                    cd:21:77:a0:ac:55:a6:6b:c8:5c:3d:ce:83:63:98:
                    9f:a3:88:f0:4b:d9:38:05:f4:e2:20:38:38:6d:1a:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:40:9D:F5:B7:15:14:70:8E:22:76:B1:ED:D8:C7:26:61:C7:2E
            X509v3 Authority Key Identifier:
                keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:61:dc:5f:79:5e:44:34:82:67:c3:69:8d:c4:69:da:58:
         31:89:bd:7a:2c:57:2e:e0:e2:d9:fd:5d:c8:68:a2:13:72:32:
         08:63:b3:d0:9b:84:77:33:f8:0d:50:11:2b:b3:c0:9a:57:70:
         89:83:1f:e5:ee:84:68:ed:b0:93:ac:8f:1f:e6:9a:99:bd:8e:
         3b:05:89:05:f2:f3:88:8f:cc:18:95:0e:fc:2c:fc:29:86:a1:
         4f:98:ec:47:2d:74:ae:b7:c0:3a:a2:5a:dc:7b:20:d4:be:a3:
         b8:d4:63:37:5a:61:6b:a5:66:33:5b:51:50:a4:a9:4c:c0:8b:
         ff:a1:01:2f:59:bb:76:6b:cc:c1:8d:5a:a5:47:73:30:db:c9:
         1b:82:b4:96:50:4b:c5:0b:fa:7d:05:5d:ef:ee:21:68:b4:83:
         55:5a:70:43:b6:23:a2:e1:5c:ad:d5:b1:2f:75:08:65:05:c3:
         61:42:4f:39:b6:50:68:89:1f:75:03:f9:14:14:e7:64:00:77:
         cf:30:d1:59:71:9d:54:de:a1:86:a7:e4:c6:ba:c4:d3:f5:e4:
         c7:78:25:67:c3:ab:b0:be:4e:47:9b:20:43:a4:c6:49:ec:1e:
         b0:3d:6d:01:5a:22:cb:eb:12:35:c8:31:66:28:c3:83:cc:71:
         86:5c:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org