Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          r8fLesmFkRnmjh3JTXGMPG85JJ/2mDQiedE9E440qUg=
Subject key identifier:   C6:D6:61:48:91:16:B2:EB:1F:E8:A2:E6:4E:B0:FD:69:42:EA:6B:E9
Certificate issuer:       /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial:       3036B9B7B37FFDA56643B501A679135FEE45C453
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
Signing time:             Wed 29 May 2024 07:31:37 +0000
ROA not before:           Wed 29 May 2024 07:26:37 +0000
ROA not after:            Wed 28 May 2025 07:31:37 +0000
asID:                     152351
IP address blocks:        157.10.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
                          rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:36:b9:b7:b3:7f:fd:a5:66:43:b5:01:a6:79:13:5f:ee:45:c4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
        Validity
            Not Before: May 29 07:26:37 2024 GMT
            Not After : May 28 07:31:37 2025 GMT
        Subject: CN=C6D661489116B2EB1FE8A2E64EB0FD6942EA6BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:f7:df:e7:7e:71:66:6f:ed:7f:bf:dd:73:
                    4b:76:c3:f0:5e:11:76:21:49:b3:75:82:b9:94:46:
                    4f:42:4f:6d:21:1d:59:66:01:e7:2e:8e:43:03:db:
                    a5:93:3a:98:c6:e7:9f:53:19:3f:14:a1:6a:87:6a:
                    38:40:bb:60:ce:64:01:03:67:7e:5e:10:29:5b:6f:
                    90:c5:d2:78:0f:25:cd:9d:48:92:00:f7:21:f9:6f:
                    d0:8e:33:05:98:a0:ad:54:a5:0d:78:6b:cc:d0:08:
                    1e:98:cc:1e:98:d5:57:3c:8e:31:29:f1:44:8d:46:
                    e6:56:53:3e:b0:7a:1f:22:cd:26:a7:eb:11:dd:35:
                    8c:6f:b8:bd:7b:24:df:bb:1b:1b:7d:8a:92:8e:71:
                    05:91:c4:29:70:5c:c0:a4:e2:7a:97:f5:02:a2:45:
                    eb:b2:44:2d:fa:bf:14:7d:c9:fa:02:e3:ad:1d:05:
                    8d:a3:2c:01:e7:fd:f4:55:49:bd:f3:e8:14:ca:fc:
                    d7:0e:0b:91:23:c4:43:04:25:f7:47:7f:a3:a3:50:
                    ad:7a:5f:ea:bd:eb:a9:5d:9b:48:9f:a7:59:27:7d:
                    da:31:6e:e9:ab:c2:01:79:4e:d6:6e:5a:d0:dc:a9:
                    a2:e6:1a:f1:78:67:ab:9f:db:85:f5:1e:8f:52:a5:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:61:48:91:16:B2:EB:1F:E8:A2:E6:4E:B0:FD:69:42:EA:6B:E9
            X509v3 Authority Key Identifier:
                keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:50:ae:b8:49:ab:1c:04:db:3c:37:04:2b:57:de:ba:d0:
         06:53:26:4d:1f:6a:85:06:5f:aa:07:30:b0:59:fb:0b:a8:3e:
         ce:d7:f5:bb:ce:a1:89:fa:b3:7b:1a:86:59:0e:e5:1f:48:6d:
         9e:bf:a5:d9:91:e5:bc:57:c7:4d:9d:a4:59:11:e6:0d:c8:12:
         8e:3e:aa:03:b3:a1:1b:dc:86:8d:7b:45:df:0c:33:ae:3b:dd:
         47:c7:e4:92:3c:e2:0f:da:e8:d2:57:5d:41:44:24:fb:8e:eb:
         33:7c:81:c9:9a:05:00:7f:6e:ff:71:21:e0:70:11:5d:25:a5:
         c4:e0:82:2c:31:9a:a8:8e:ea:2c:17:0b:9f:be:f0:bf:4f:c5:
         78:98:fb:64:7b:ed:83:58:7e:ac:06:98:9f:c4:00:25:9b:00:
         4a:e1:31:b7:56:e0:a7:ed:f3:f4:7f:4b:85:a3:23:f8:06:43:
         9a:bd:a8:3a:4b:3d:3a:8b:73:85:c7:7f:e1:c8:11:44:b4:9b:
         43:64:40:8b:24:f5:a6:b5:4e:ee:a0:61:94:aa:c7:4a:93:4b:
         50:47:0a:1f:60:e5:df:cc:a3:e8:77:5e:57:23:11:c9:b3:65:
         32:45:dd:bb:9f:c3:19:67:36:ec:80:a6:5b:f3:3b:91:37:5f:
         7a:21:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org