Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230342e302f32332d3234203d3e2034383030.roa
File:                     3135372e36362e3230342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          KLJTr5Jc6j47uP72g+mVrlX8K8RuJ6MltIbOsrPPpv8=
Subject key identifier:   66:4B:67:F3:D6:3B:CD:09:BB:33:F7:EC:F9:59:5E:0C:2A:4C:7C:03
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       6EAEFF6602FFEA52AFA4184F61C23BFBD236EEA6
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230342e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 30 Jun 2024 01:59:54 +0000
ROA not before:           Sun 30 Jun 2024 01:54:54 +0000
ROA not after:            Sun 29 Jun 2025 01:59:54 +0000
asID:                     4800
IP address blocks:        157.66.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:ff:66:02:ff:ea:52:af:a4:18:4f:61:c2:3b:fb:d2:36:ee:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 30 01:54:54 2024 GMT
            Not After : Jun 29 01:59:54 2025 GMT
        Subject: CN=664B67F3D63BCD09BB33F7ECF9595E0C2A4C7C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:86:2c:59:65:bc:85:ee:72:51:80:5b:6c:
                    22:c9:22:ed:71:01:80:cd:ee:e8:ad:cf:c5:b9:a9:
                    6a:48:22:4d:43:29:0e:5d:ad:08:07:ef:0e:a0:5b:
                    b1:77:72:95:7d:b0:f0:a9:f0:da:87:f4:ca:b8:91:
                    3f:86:45:49:41:69:99:c4:d9:16:f7:2c:0d:04:ae:
                    1b:d2:59:60:9b:f0:66:57:15:bc:f2:78:5b:17:1d:
                    e2:d1:e4:dc:4a:56:f7:12:e3:9d:e6:05:9a:43:f0:
                    59:78:2c:ad:4a:55:48:f8:80:77:5f:9e:f5:bc:07:
                    09:d7:54:78:b8:93:fb:76:1d:fb:99:53:1b:fe:da:
                    0d:0b:e6:76:7e:38:ac:5f:76:fc:95:75:0e:f5:e3:
                    4a:f0:b1:83:53:80:18:f7:09:50:86:88:8a:67:2d:
                    34:c9:92:1e:61:2b:1e:73:dc:46:f2:2c:ae:f0:11:
                    b1:8a:b6:68:ed:72:b3:a9:99:f9:91:83:b3:ad:07:
                    e3:f2:a2:75:e9:ea:a6:80:d2:16:75:b6:f3:dd:c3:
                    e2:84:06:0d:60:d7:ce:0c:d2:f4:aa:4c:b4:b9:44:
                    b4:fb:66:7e:1d:d2:df:5b:37:21:b1:7e:ba:ab:a3:
                    f1:58:df:2c:a7:2d:31:51:27:b1:3f:53:c6:41:1d:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:67:F3:D6:3B:CD:09:BB:33:F7:EC:F9:59:5E:0C:2A:4C:7C:03
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:ab:18:61:26:7e:ae:6f:d1:bf:b5:c2:ff:2d:5c:ea:5e:
         c5:2c:06:6c:a6:59:16:74:ca:ed:37:61:1b:f3:ff:61:10:f8:
         ac:08:89:29:a1:30:4c:18:02:f4:03:80:6a:e0:be:74:e9:df:
         29:0f:18:15:43:10:9f:d5:54:8d:80:a1:21:8e:1f:2b:fb:08:
         ad:f7:b1:f5:2b:eb:46:ac:5c:35:48:18:94:66:89:ee:e5:f8:
         f8:be:d4:45:67:bb:3e:c3:61:29:57:ea:4e:cc:87:82:e0:cd:
         3d:9e:7b:9c:e2:b7:f1:67:55:00:c1:c8:a7:67:2b:47:a8:dc:
         10:a5:c5:78:2b:85:dc:a3:84:dd:b3:93:94:e4:c3:e6:c9:ed:
         30:f3:a6:6c:71:cc:32:67:bd:d7:e3:fe:5c:05:b4:ac:c7:b0:
         d3:fd:58:2e:ec:44:44:29:46:e6:13:53:67:64:a9:76:91:21:
         1e:e0:10:9e:e0:0b:8d:a0:51:4e:93:fb:5f:04:75:61:12:34:
         c6:c9:ac:42:4e:1c:b2:da:c3:9e:5c:b2:29:9e:56:f0:c1:49:
         8e:3c:e0:fc:77:bd:63:ac:62:48:6a:e6:83:ae:02:c9:a5:2e:
         7c:06:6d:13:6e:86:1b:2e:1e:0d:a3:d0:97:f4:34:7b:a2:7b:
         23:4c:ac:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:51 2024 by rpki-client on console-ams.rpki-client.org