Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
File:                     3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (raw, json)
Hash identifier:          ynzvFGFeVrYtYbfD+ePKrxwpaypexlX1cEKRBF9+ZqM=
Subject key identifier:   A0:48:A9:EB:2C:04:02:89:74:B2:68:A9:22:95:E6:43:FA:41:91:7F
Certificate issuer:       /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
Certificate serial:       5DA3F94A978D7A5229A47695E862CE64F72E2CA8
Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
Signing time:             Fri 19 Jul 2024 14:40:15 +0000
ROA not before:           Fri 19 Jul 2024 14:35:15 +0000
ROA not after:            Fri 18 Jul 2025 14:40:15 +0000
asID:                     141609
IP address blocks:        157.66.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl
                          rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:f9:4a:97:8d:7a:52:29:a4:76:95:e8:62:ce:64:f7:2e:2c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F
        Validity
            Not Before: Jul 19 14:35:15 2024 GMT
            Not After : Jul 18 14:40:15 2025 GMT
        Subject: CN=A048A9EB2C04028974B268A92295E643FA41917F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:09:67:b1:17:ca:67:f8:8e:01:05:e4:51:
                    b6:5a:0f:25:94:88:c6:af:33:68:59:8c:15:d2:23:
                    ff:6c:b4:c3:04:6a:85:3d:35:62:3a:90:6d:50:80:
                    ef:95:44:b8:6c:3b:3a:1b:30:89:cb:26:50:f8:56:
                    00:bc:4a:ab:c7:bd:c3:e6:fd:04:79:2e:e5:0d:17:
                    0b:65:99:72:85:d3:88:9b:a2:c4:3f:53:7e:a1:50:
                    21:2a:9d:73:e9:21:9f:cf:0d:09:8e:0b:ae:08:c1:
                    2c:25:15:26:a6:ff:83:4f:87:30:17:75:82:55:24:
                    db:d7:0a:7e:4c:5c:db:03:27:5a:b3:14:ad:0b:4e:
                    07:6d:34:e1:bb:7b:09:a8:4e:f2:ea:1e:a5:b5:fb:
                    2b:3d:e7:5c:31:30:84:10:f9:89:41:df:30:6b:d4:
                    b6:29:33:1f:14:cd:aa:a0:63:93:2d:f7:2d:40:a7:
                    14:8c:5a:e0:d8:04:0b:ea:31:b1:57:fa:e4:56:84:
                    9b:fa:59:26:bd:e6:e4:9b:5f:9c:04:88:fe:78:bd:
                    f0:6f:6b:36:ca:21:8a:29:90:64:1d:84:7b:2c:db:
                    ba:d8:3a:b2:36:d1:fd:e3:b7:47:d5:7c:d7:76:af:
                    bc:90:fd:c4:6c:a4:f5:68:d5:c2:e5:d5:e9:66:4c:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:48:A9:EB:2C:04:02:89:74:B2:68:A9:22:95:E6:43:FA:41:91:7F
            X509v3 Authority Key Identifier:
                keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:41:f1:70:f6:8a:4a:7e:41:c8:55:e4:c6:1b:b4:15:ea:82:
         af:ec:8c:d9:e8:e9:2d:c1:6b:9a:b4:a3:f3:3d:6e:d5:d5:d8:
         b6:84:83:c9:ae:59:7f:f7:50:d7:81:54:87:3e:68:f8:5f:2d:
         bf:89:ef:56:c1:27:af:9b:da:f9:aa:d3:a4:76:48:25:cc:4f:
         a3:01:c6:2c:88:42:d5:f4:f8:2b:26:4f:b6:5e:87:e0:99:08:
         6c:cb:b6:61:47:d8:c9:01:0f:18:bf:34:00:49:fd:c3:14:24:
         07:99:68:4b:72:31:2b:1c:77:49:b7:5d:c4:c4:12:54:cb:55:
         85:95:86:8e:12:f9:9d:d6:fe:a7:3c:f9:a4:39:91:c9:a7:99:
         70:5a:d9:32:ec:7c:f4:65:8c:27:51:66:e7:ed:23:c4:1f:73:
         e1:63:00:b8:55:1b:1e:f2:7f:85:a1:56:02:fe:0f:6d:1f:f6:
         52:4e:56:48:26:3d:2d:3e:07:ad:5d:9d:9b:87:96:bd:84:d4:
         25:39:19:07:c3:e7:e7:f1:96:8a:9a:c3:8a:d1:62:06:df:0d:
         33:cd:f3:b6:81:ad:0d:1d:fa:53:68:13:62:02:63:ac:79:36:
         c4:65:0f:29:c9:9b:b5:e2:79:ec:19:4e:b1:b5:f8:c8:1e:29:
         dd:3e:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org