Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa
File:                     3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (raw, json)
Hash identifier:          7x/SmyPHQFfblL4JZHqrDEN7k/DubxIWEEwK3IKjhss=
Subject key identifier:   CA:E3:41:00:8E:C6:00:65:30:18:08:25:6A:46:A5:04:4E:4B:5A:9B
Certificate issuer:       /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial:       55609D583D80A175F7A1C29EC165D7A5F897E5B8
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa
Signing time:             Tue 23 Jul 2024 06:46:39 +0000
ROA not before:           Tue 23 Jul 2024 06:41:39 +0000
ROA not after:            Tue 22 Jul 2025 06:46:39 +0000
asID:                     152749
IP address blocks:        157.66.174.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
                          rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:60:9d:58:3d:80:a1:75:f7:a1:c2:9e:c1:65:d7:a5:f8:97:e5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
        Validity
            Not Before: Jul 23 06:41:39 2024 GMT
            Not After : Jul 22 06:46:39 2025 GMT
        Subject: CN=CAE341008EC60065301808256A46A5044E4B5A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:5d:1b:4d:d7:64:fe:a0:ce:d1:43:37:d3:
                    78:9e:35:d4:2b:df:fd:3e:14:d5:56:82:18:99:1c:
                    9e:a2:28:1f:a5:24:da:4a:3c:33:89:9d:70:4a:96:
                    0e:d7:f9:52:e7:14:86:47:73:ba:1a:35:00:cf:3d:
                    ef:85:bf:b2:42:56:96:3f:b3:c0:68:c0:56:15:0b:
                    06:4d:06:1c:f2:0a:d1:2e:86:98:56:3a:29:c4:01:
                    28:73:19:17:cd:b2:18:b0:aa:a2:37:4b:44:7d:76:
                    da:03:ff:c5:ef:fb:d5:9a:f6:5e:bb:41:2f:5d:5a:
                    08:11:6b:ce:c3:c9:e6:f3:4d:da:cc:08:af:eb:bc:
                    bf:cb:2e:a7:38:10:12:53:cb:2e:a0:c8:18:07:06:
                    84:b6:85:11:69:01:ad:13:03:42:e7:c5:20:cd:4e:
                    44:df:e6:fa:f5:c7:db:31:96:a7:f1:c9:c7:30:a1:
                    0e:83:f7:78:f1:bc:ef:54:e7:15:43:39:79:11:f4:
                    fc:de:49:f9:5b:a2:45:49:95:6b:72:05:50:b3:db:
                    cf:bb:1d:96:f5:36:d3:17:f1:8e:2f:be:4f:f3:27:
                    87:38:47:95:6e:f1:df:38:c2:61:0a:2e:4e:cd:78:
                    1e:cd:e4:b2:52:a5:50:5a:c4:4e:a7:b1:57:13:3e:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:41:00:8E:C6:00:65:30:18:08:25:6A:46:A5:04:4E:4B:5A:9B
            X509v3 Authority Key Identifier:
                keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:b7:9a:5c:e7:fd:a4:85:49:f7:79:c3:f3:55:71:82:f7:
         14:02:66:c4:65:0d:48:ee:a4:fc:5c:1e:f6:5d:c0:a8:08:6c:
         b7:56:7c:b9:02:a9:8a:c8:ce:4b:a7:d0:14:36:c3:54:44:d6:
         48:c8:be:85:97:9c:00:bb:03:0b:48:e0:76:22:5b:02:4b:d3:
         db:54:32:0f:9e:b4:28:81:2d:f5:07:f7:61:46:54:4c:71:a8:
         ad:9b:7f:e3:e1:97:63:45:82:b9:ea:25:ec:1c:b9:8c:92:25:
         ef:79:0e:20:03:74:a4:c6:d1:69:63:f0:65:4e:68:38:bf:ec:
         ff:bc:86:b9:a2:aa:0c:d9:8f:fc:38:46:11:de:ec:41:b5:7f:
         62:82:f1:95:f4:1e:ce:5b:bb:cd:6e:1e:e3:be:ca:0b:04:75:
         de:37:b9:b3:a8:f3:79:f0:ff:4b:a4:99:6a:95:ef:c0:a2:b9:
         43:92:4a:5d:d2:07:a2:11:ab:dd:67:59:82:c5:4d:25:43:3f:
         e0:51:48:24:31:bf:95:ee:a5:7b:f2:52:e5:40:11:52:d2:fe:
         a9:96:aa:66:6e:29:b9:3c:be:ae:16:5c:54:6c:3f:7d:1a:79:
         8a:bc:9b:9f:db:68:a1:77:86:a3:9c:02:97:4a:ea:49:18:ed:
         d2:7a:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org