Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa
File:                     3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (raw, json)
Hash identifier:          ldaui5sMmxqiHUVbs1jRCvNbZlVTdmCpnxDOTN/gSdw=
Subject key identifier:   AA:15:98:CA:DA:25:37:DC:6A:0F:57:9F:C6:4D:96:E1:DA:21:63:14
Certificate issuer:       /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Certificate serial:       494FACC44E7AE1C555209B536235867E7AC3EBDA
Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa
Signing time:             Fri 24 May 2024 16:32:47 +0000
ROA not before:           Fri 24 May 2024 16:27:47 +0000
ROA not after:            Fri 23 May 2025 16:32:47 +0000
asID:                     152756
IP address blocks:        157.66.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl
                          rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4f:ac:c4:4e:7a:e1:c5:55:20:9b:53:62:35:86:7e:7a:c3:eb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
        Validity
            Not Before: May 24 16:27:47 2024 GMT
            Not After : May 23 16:32:47 2025 GMT
        Subject: CN=AA1598CADA2537DC6A0F579FC64D96E1DA216314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:bc:b1:9b:a3:a1:ec:c6:0d:e6:8a:23:5c:
                    33:f1:94:28:41:e9:cb:b6:06:b1:6c:19:0c:05:76:
                    2a:03:9b:10:4d:cb:c4:22:86:5d:58:0f:24:ed:ce:
                    47:f8:a2:fe:5c:b1:ea:6c:a7:a3:84:ef:24:3b:e2:
                    ec:eb:fe:c8:fc:20:95:84:84:0c:75:2c:21:dd:ad:
                    71:c9:8e:b6:8c:cd:8e:1e:29:a3:2e:c7:32:c6:b4:
                    85:c0:37:f4:b0:49:06:65:4b:60:5b:51:8a:0a:29:
                    06:5e:62:e5:ec:93:84:6f:98:74:97:47:74:d5:c6:
                    26:5f:f9:0d:fa:4a:e7:fa:d0:4d:e5:36:79:8f:00:
                    eb:f2:cf:11:e4:8e:1b:5b:4e:ae:5e:d7:b4:de:b4:
                    c6:05:fe:c5:a8:47:1a:77:33:e8:a5:9c:58:a3:c9:
                    e6:a6:0f:e4:a2:6a:8b:53:ee:6a:27:23:4c:8f:d7:
                    3b:b3:48:68:4c:9c:28:ed:be:ab:64:0b:84:cb:bc:
                    16:97:b1:05:0a:70:40:ce:d8:50:49:8c:f7:97:8a:
                    32:25:ff:53:cb:61:1c:a6:2f:20:58:23:29:0c:5b:
                    6d:1b:7d:37:5d:27:d9:38:bd:3d:2a:ae:24:6e:22:
                    ea:e7:01:86:22:86:c2:b5:b7:32:55:19:6d:44:74:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:15:98:CA:DA:25:37:DC:6A:0F:57:9F:C6:4D:96:E1:DA:21:63:14
            X509v3 Authority Key Identifier:
                keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:bb:46:63:4c:39:75:dc:3d:70:a9:8b:5c:71:04:c7:be:
         f2:ef:d7:00:f8:24:01:78:6e:42:e4:75:c6:a3:ef:68:0a:3b:
         2a:c5:3d:a3:db:a3:8a:ea:f6:82:bf:8e:e0:3a:c6:ee:e7:d9:
         45:31:6e:1e:2b:88:7f:1f:09:a3:0b:fe:53:83:e9:63:ce:3b:
         3e:2d:25:c4:77:00:90:b8:83:c0:c1:51:17:c0:7f:e2:9a:a4:
         e9:43:aa:dc:d2:09:45:7a:74:49:2a:ec:1b:55:63:38:d3:03:
         69:e0:94:40:f2:98:40:a7:ed:8b:5f:c3:21:0a:47:29:91:91:
         85:ee:ff:92:fd:95:57:29:47:73:52:f7:d8:10:76:1b:47:e5:
         4f:c3:12:b3:82:60:03:5d:f9:14:54:d1:26:55:b9:77:6f:1d:
         c5:28:3d:01:94:31:b1:5f:a8:2e:e7:4f:82:62:2e:44:38:eb:
         67:aa:f2:3e:f2:72:18:fc:18:c7:b9:69:85:a5:03:29:80:55:
         b3:e1:40:d2:f8:3f:7d:fd:55:f7:d6:f5:95:5d:ab:f4:9a:55:
         26:21:86:4b:3c:79:a8:ed:60:f8:a1:38:56:94:a1:d5:7d:8b:
         6b:03:ef:2e:4e:b7:ce:43:72:8c:77:26:73:1b:ec:d4:6c:38:
         5b:53:75:0b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSU+sxE564cVVIJtTYjWGfnrD69owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2
NzY5QzkwQjAeFw0yNDA1MjQxNjI3NDdaFw0yNTA1MjMxNjMyNDdaMDMxMTAvBgNV
BAMTKEFBMTU5OENBREEyNTM3REM2QTBGNTc5RkM2NEQ5NkUxREEyMTYzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVLyxm6Oh7MYN5oojXDPxlChB
6cu2BrFsGQwFdioDmxBNy8Qihl1YDyTtzkf4ov5csepsp6OE7yQ74uzr/sj8IJWE
hAx1LCHdrXHJjraMzY4eKaMuxzLGtIXAN/SwSQZlS2BbUYoKKQZeYuXsk4RvmHSX
R3TVxiZf+Q36Suf60E3lNnmPAOvyzxHkjhtbTq5e17TetMYF/sWoRxp3M+ilnFij
yeamD+SiaotT7monI0yP1zuzSGhMnCjtvqtkC4TLvBaXsQUKcEDO2FBJjPeXijIl
/1PLYRymLyBYIykMW20bfTddJ9k4vT0qriRuIurnAYYihsK1tzJVGW1EdHPDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqhWYytolN9xqD1efxk2W4dohYxQwHwYDVR0j
BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3
NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5
QzkwQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhYjRlMTRkLTAyMWQtNDBkYy05
MjNhLWMxMmQxYWY0NDNiNS8wLzMxMzUzNzJlMzYzNjJlMzEzNzM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKwMA0GCSqG
SIb3DQEBCwUAA4IBAQA68rtGY0w5ddw9cKmLXHEEx77y79cA+CQBeG5C5HXGo+9o
CjsqxT2j26OK6vaCv47gOsbu59lFMW4eK4h/HwmjC/5Tg+ljzjs+LSXEdwCQuIPA
wVEXwH/imqTpQ6rc0glFenRJKuwbVWM40wNp4JRA8phAp+2LX8MhCkcpkZGF7v+S
/ZVXKUdzUvfYEHYbR+VPwxKzgmADXfkUVNEmVbl3bx3FKD0BlDGxX6gu50+CYi5E
OOtnqvI+8nIY/BjHuWmFpQMpgFWz4UDS+D99/VX31vWVXav0mlUmIYZLPHmo7WD4
oThWlKHVfYtrA+8uTrfOQ3KMdyZzG+zUbDhbU3UL
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:09 2024 by rpki-client on console-ams.rpki-client.org