Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa
File:                     3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (raw, json)
Hash identifier:          pBKU6AL4LZRuHnO1o7lghVbyP/DLM7+Jfq4NlAZORn0=
Subject key identifier:   6C:05:94:AD:87:4C:C9:4A:66:0C:9D:6C:2C:6D:AE:DC:1E:8F:00:9C
Certificate issuer:       /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E
Certificate serial:       3353CC9650EDE6B600E8CB7D7808DC6B2A0B9D97
Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa
Signing time:             Fri 02 Aug 2024 03:16:13 +0000
ROA not before:           Fri 02 Aug 2024 03:11:13 +0000
ROA not after:            Fri 01 Aug 2025 03:16:13 +0000
asID:                     141592
IP address blocks:        157.66.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl
                          rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:cc:96:50:ed:e6:b6:00:e8:cb:7d:78:08:dc:6b:2a:0b:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E
        Validity
            Not Before: Aug  2 03:11:13 2024 GMT
            Not After : Aug  1 03:16:13 2025 GMT
        Subject: CN=6C0594AD874CC94A660C9D6C2C6DAEDC1E8F009C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:ae:87:a2:40:c4:12:01:6e:a8:ad:a8:5c:
                    bb:87:7f:dc:ca:67:b3:da:48:a0:6a:7e:13:5f:03:
                    87:50:33:b1:c0:49:e3:d4:4c:8b:77:47:0d:60:cc:
                    62:f9:de:ec:af:46:a7:57:23:74:23:eb:16:25:a5:
                    ea:be:20:6a:24:19:50:62:3e:1c:e1:8b:08:5e:11:
                    59:db:fb:44:23:fa:55:58:b2:74:00:b9:65:4e:1b:
                    86:e4:0d:cc:4a:e8:48:89:b5:5d:a1:c1:f7:83:23:
                    3f:f6:f7:7f:9b:f1:dd:d9:85:73:86:49:29:de:3f:
                    a2:60:fb:25:22:3a:78:75:8d:21:d0:cd:a5:c7:9a:
                    39:09:1c:55:67:3a:80:3a:4a:99:57:12:40:73:ff:
                    20:85:87:e6:01:8d:f2:d4:a1:3f:ce:bc:e6:4d:4a:
                    29:cd:83:d1:8e:06:ac:1b:e9:b3:92:65:6b:b7:0d:
                    0f:fa:c2:aa:6b:16:13:51:8e:ed:0b:36:da:b2:29:
                    31:45:a5:3a:3d:97:4d:de:92:58:3f:62:f9:29:ab:
                    1d:07:88:4b:a0:8b:f9:9e:20:80:a4:c3:e2:62:5d:
                    b5:29:1f:c6:ed:90:79:ed:bd:e4:44:f5:af:37:d8:
                    7c:e5:1c:4a:d5:c0:99:88:b5:a5:56:22:08:d2:4a:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:94:AD:87:4C:C9:4A:66:0C:9D:6C:2C:6D:AE:DC:1E:8F:00:9C
            X509v3 Authority Key Identifier:
                keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f2:02:c4:4e:8d:7d:0c:a1:fb:db:ef:c0:2d:5c:6e:6c:b7:
         42:35:7a:77:a1:31:cd:18:ac:62:3f:88:bf:f4:04:9a:22:85:
         13:a3:8c:2c:4c:db:dd:16:1c:c8:94:fc:99:3b:3e:b5:bc:62:
         0b:05:36:db:59:62:6d:d6:b1:85:a6:ee:3f:38:4e:43:64:fe:
         3c:73:e1:74:64:b4:f5:82:c1:48:8c:02:79:ca:c9:09:e2:42:
         25:60:29:fb:51:8a:fd:cd:0a:c3:5b:ce:92:33:db:08:df:43:
         00:4b:0a:58:bf:c2:e8:c5:68:eb:87:7b:1e:25:f5:c2:0b:49:
         b9:26:22:a2:d6:96:bb:00:46:c6:82:d4:7b:f9:69:65:5a:30:
         58:58:f2:ec:b5:55:82:92:3b:d2:34:48:20:71:13:5b:33:67:
         1d:16:12:3e:bc:d2:2f:83:a9:2a:e9:15:1d:91:b0:0d:2f:7c:
         83:00:47:22:d4:66:0e:b3:a3:01:00:82:8b:d3:64:9d:52:38:
         8d:e2:59:7e:df:7c:f3:f4:48:5d:5c:8e:5c:37:1c:d6:e8:4d:
         0e:e7:99:9f:4d:91:a0:e0:b3:12:6d:ea:07:6e:70:6d:01:cf:
         ec:8f:3b:44:32:9e:25:d6:4d:8f:82:29:7e:d3:74:02:f7:48:
         80:50:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:30 2024 by rpki-client on console-fra.rpki-client.org