Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230362e302f32332d3234203d3e2034383030.roa
File:                     3135372e36362e3230362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          8kVYJMFg9miFcV8DdNOf6wsqeqNyEi4wat9llh+wGWU=
Subject key identifier:   40:64:40:03:3D:59:F2:4D:2D:56:BC:62:D2:4C:70:71:C2:9A:D3:C0
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       4C68118115E5536FCC3B9B8CFE945A46FF396073
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230362e302f32332d3234203d3e2034383030.roa
Signing time:             Sun 30 Jun 2024 01:59:53 +0000
ROA not before:           Sun 30 Jun 2024 01:54:53 +0000
ROA not after:            Sun 29 Jun 2025 01:59:53 +0000
asID:                     4800
IP address blocks:        157.66.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 14:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:11:81:15:e5:53:6f:cc:3b:9b:8c:fe:94:5a:46:ff:39:60:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jun 30 01:54:53 2024 GMT
            Not After : Jun 29 01:59:53 2025 GMT
        Subject: CN=406440033D59F24D2D56BC62D24C7071C29AD3C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:c0:73:14:a1:9b:ea:33:f2:e1:18:58:5d:
                    c5:56:08:2f:7a:a3:2c:a2:fd:d9:2b:a2:f7:8f:45:
                    a8:c9:0c:a3:fb:d7:c5:87:78:2a:a1:c5:8b:3f:7a:
                    55:e1:f8:09:6a:98:35:54:34:ad:d5:30:34:3c:b5:
                    bc:16:c3:67:e1:0e:fa:87:01:22:4b:4c:5c:7e:27:
                    cd:be:5f:8e:bf:b4:85:98:54:cf:6a:ee:0c:77:c4:
                    95:55:ab:6e:2f:bc:89:dd:67:a7:9e:0f:68:6e:87:
                    43:31:f3:c0:cd:c3:4b:0f:b7:83:4f:c0:01:cc:96:
                    85:1f:cd:61:6b:eb:55:3c:77:83:43:06:d6:25:22:
                    42:42:6c:8e:82:c9:9b:02:fd:4d:67:f5:4a:6f:40:
                    77:82:7e:4d:4e:a3:c8:2f:cb:7d:dd:1f:67:31:a8:
                    a8:73:63:08:ab:a8:a5:3e:40:c0:b9:9e:38:74:26:
                    c8:6f:c3:dd:18:81:e6:ad:39:a9:64:cb:60:56:61:
                    88:1e:35:57:e3:58:c2:59:50:97:66:b6:f9:93:97:
                    02:c8:3c:4d:75:b7:7a:86:a3:93:ce:c2:a9:97:c8:
                    ea:1d:68:82:42:fd:6d:8b:df:da:f0:33:79:d0:a5:
                    72:98:e0:dd:22:4b:f8:f2:cf:c9:36:a0:5c:61:f9:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:64:40:03:3D:59:F2:4D:2D:56:BC:62:D2:4C:70:71:C2:9A:D3:C0
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e36362e3230362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:75:42:76:59:a1:fd:34:e8:5a:5f:b8:87:7d:6f:46:a0:
         e7:fd:54:db:85:1a:39:f7:e7:5b:04:27:98:d3:57:89:e6:ca:
         14:a3:15:63:b8:da:e9:06:fe:fb:b0:e1:e0:9c:68:f7:ce:5a:
         35:13:d8:1a:26:43:00:88:1b:10:4d:52:60:c3:24:54:13:d3:
         ad:69:86:d8:cd:de:ac:9b:a3:6e:59:3b:9a:ef:60:23:1a:c6:
         ef:c7:4d:45:93:6b:de:8b:2f:ff:2f:2d:64:79:e1:e2:3e:ca:
         fc:d5:eb:37:dd:f8:69:20:f3:d0:5f:7a:e6:27:10:b5:82:3a:
         1f:3a:b9:1d:17:be:c8:89:e3:a8:0a:ad:88:64:77:0d:fc:0a:
         0a:54:f9:96:a3:63:22:8e:f4:87:77:a0:86:29:00:e2:5d:55:
         6a:df:67:2c:50:c7:db:ac:bf:ae:6e:ec:70:ca:dc:22:60:ed:
         40:2d:d5:05:f0:44:cd:6d:64:4a:5a:39:50:f7:c9:b6:ac:e5:
         55:70:a2:4b:55:24:a2:82:62:c6:c1:f2:ef:08:93:6c:c0:5c:
         8a:d4:29:70:a6:92:29:43:62:07:6a:28:fa:91:1a:d3:cf:04:
         52:bc:4a:6d:5e:61:87:2f:7a:59:18:c9:2c:fb:58:14:8b:4c:
         cd:4a:78:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 20 05:42:54 2024 by rpki-client on console-fra.rpki-client.org