Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa
File:                     3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (raw, json)
Hash identifier:          p51eUIV9q2m9jWxXX8xAOU8z8+ncy/9DFxT2SrBloOE=
Subject key identifier:   1D:06:C8:87:14:FB:FB:48:E6:9D:0C:96:37:94:86:62:74:83:8F:6A
Certificate issuer:       /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
Certificate serial:       25C3746B13D1E3F68388C70796BC0F79FFF7CE40
Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa
Signing time:             Fri 24 May 2024 16:32:24 +0000
ROA not before:           Fri 24 May 2024 16:27:24 +0000
ROA not after:            Fri 23 May 2025 16:32:24 +0000
asID:                     152756
IP address blocks:        157.66.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl
                          rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c3:74:6b:13:d1:e3:f6:83:88:c7:07:96:bc:0f:79:ff:f7:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B
        Validity
            Not Before: May 24 16:27:24 2024 GMT
            Not After : May 23 16:32:24 2025 GMT
        Subject: CN=1D06C88714FBFB48E69D0C963794866274838F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:74:19:c5:05:e7:73:88:43:6d:1a:23:30:
                    e0:ea:b8:39:8e:3c:b9:46:fe:f6:06:e3:32:27:d5:
                    b5:c2:57:6d:e9:77:5e:04:de:5d:ae:54:8f:82:5c:
                    c5:4f:6f:30:26:3c:b5:ff:12:00:8d:ec:ad:a3:f5:
                    2a:cd:5b:2f:85:39:56:76:2a:f3:30:c9:ea:14:b1:
                    0b:21:28:03:40:4a:90:9d:4f:13:23:3d:54:0f:a8:
                    ae:84:34:4f:71:70:b0:5d:a1:08:dd:b4:23:f5:54:
                    8a:b6:d8:b8:91:e9:4f:c3:3f:80:14:7a:04:93:96:
                    bc:a9:0c:aa:02:47:a8:d2:82:f7:8d:b2:3a:cc:8d:
                    dc:b3:c6:e3:cb:19:12:d5:1c:e5:ef:e9:5c:8b:a9:
                    89:7d:f7:b0:d8:88:c1:de:3c:0d:f5:d8:58:e4:f6:
                    c5:5d:c4:24:ca:19:34:01:67:a1:32:80:ab:e7:54:
                    7c:63:62:65:17:b9:46:e2:73:5c:cb:3a:6a:c1:dd:
                    04:ea:60:64:c7:15:1c:6c:08:a5:92:90:44:e1:80:
                    6e:cf:7b:ae:7e:06:fa:76:52:41:4a:83:ca:7a:fe:
                    00:d4:48:34:46:4e:f9:05:29:b8:b1:f0:7b:a5:e4:
                    e7:8a:fe:4b:cb:8c:7c:c1:b0:d4:4d:81:66:e3:79:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:C8:87:14:FB:FB:48:E6:9D:0C:96:37:94:86:62:74:83:8F:6A
            X509v3 Authority Key Identifier:
                keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:56:11:14:d1:4b:19:d5:bc:ff:57:f6:15:96:6b:c0:20:ad:
         10:63:7f:82:02:10:ef:9d:03:a3:b5:dd:d1:59:b6:ac:39:35:
         13:5d:1e:60:82:b9:fc:e1:f9:92:71:0e:75:0e:28:e9:d5:b0:
         30:9e:3d:ef:5d:04:d5:ba:d9:72:c7:1f:96:aa:4a:fe:9e:1b:
         f9:62:7f:9b:a2:06:ec:64:bd:fc:45:c2:db:e0:96:6a:b6:a6:
         10:02:2e:dd:9e:0e:21:79:60:32:b8:ed:af:7f:56:80:d7:73:
         98:aa:2d:42:23:13:fd:2f:a6:f1:52:d4:6c:6e:fb:b8:20:21:
         96:f7:b8:c8:78:dd:ef:5f:8e:f3:66:e7:0b:a1:c2:16:35:a4:
         4f:d3:cb:5b:62:bf:15:d5:cc:18:e2:98:89:cb:07:f6:4b:ff:
         e7:0a:89:96:a4:e8:29:5a:f6:c9:64:af:fe:8c:74:2c:6b:55:
         62:1f:30:3b:ab:74:14:8b:4c:e3:1a:92:24:9a:e3:ee:ac:e9:
         27:01:61:11:0d:3e:e6:84:2b:9b:e3:fb:70:31:94:96:57:42:
         6a:0a:c3:dd:75:b4:d2:af:cc:c8:8a:60:4f:c9:ce:10:a6:40:
         e8:21:7c:34:0b:10:ce:05:ca:0b:13:c0:9d:5d:b7:75:38:5a:
         0b:23:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:29 2024 by rpki-client on console-fra.rpki-client.org