Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/3135372e36362e38362e302f32332d3234203d3e20313532343432.roa
File:                     3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (raw, json)
Hash identifier:          yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=
Subject key identifier:   F2:FC:91:EA:59:87:62:1C:43:16:6F:F1:A9:B5:17:5A:DA:96:85:75
Certificate issuer:       /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
Certificate serial:       05053C1E4C62D2D149CD7D506CE051B081C44531
Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/3135372e36362e38362e302f32332d3234203d3e20313532343432.roa
Signing time:             Fri 16 May 2025 05:02:05 +0000
ROA not before:           Fri 16 May 2025 04:57:05 +0000
ROA not after:            Fri 15 May 2026 05:02:05 +0000
asID:                     152442
IP address blocks:        157.66.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl
                          rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:05:3c:1e:4c:62:d2:d1:49:cd:7d:50:6c:e0:51:b0:81:c4:45:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17
        Validity
            Not Before: May 16 04:57:05 2025 GMT
            Not After : May 15 05:02:05 2026 GMT
        Subject: CN=F2FC91EA5987621C43166FF1A9B5175ADA968575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:50:64:7e:04:7f:a5:c8:32:b7:0d:13:87:
                    f8:33:4d:af:b3:4d:37:41:b1:6e:28:f2:35:1a:7d:
                    71:6d:29:4b:61:33:ec:6c:cb:81:2f:b2:8b:f5:ce:
                    c8:62:5e:e0:9a:bd:2e:ce:db:fe:73:82:62:f3:23:
                    31:14:23:d1:c5:fd:19:d3:58:38:04:d0:38:3e:90:
                    f0:40:f2:96:01:4d:d2:38:6d:aa:87:44:e7:15:69:
                    9e:2f:5b:8d:b9:5a:00:48:cd:3f:78:65:ba:38:34:
                    2e:90:df:ea:09:e3:73:74:8c:ae:91:87:07:94:fa:
                    37:bc:08:d5:1e:4d:d5:f0:a2:00:86:47:c8:c9:83:
                    c8:ef:61:2d:b5:c6:ad:c0:7a:10:cc:db:ab:d1:f2:
                    f5:81:05:2f:41:e0:14:2d:c0:2f:45:2e:a1:3a:14:
                    f9:90:a1:cc:22:31:18:01:31:ef:db:21:08:f2:2e:
                    0e:56:e5:5f:24:e4:2e:11:66:f7:d3:6a:4e:34:04:
                    be:16:5c:8d:17:2d:59:e9:b4:26:1f:a3:a8:b2:6e:
                    21:9a:69:3f:e4:a0:2a:cf:76:b0:cb:3a:0e:ee:97:
                    1d:9a:91:cb:f2:68:78:8f:0c:97:86:44:33:8d:0e:
                    0e:de:15:5e:5d:19:e6:5a:7b:4b:bc:b4:9d:c3:dc:
                    05:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FC:91:EA:59:87:62:1C:43:16:6F:F1:A9:B5:17:5A:DA:96:85:75
            X509v3 Authority Key Identifier:
                keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/3135372e36362e38362e302f32332d3234203d3e20313532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:5a:ed:aa:f8:3f:03:68:56:e1:d3:15:03:da:3f:d2:c1:
         3b:17:8c:52:eb:3a:b3:11:9e:72:a5:93:1d:ce:5e:42:ff:6d:
         d2:33:80:a7:10:2d:0c:fa:a6:52:4c:e1:fd:bb:6f:71:e3:f9:
         71:d1:97:54:de:ce:b0:64:17:5b:88:6b:21:6e:80:63:77:e7:
         38:2d:c3:4f:2a:49:eb:80:97:4c:fb:fa:37:43:ea:b5:49:59:
         53:41:61:f5:72:75:2f:a7:02:e7:d3:9e:ca:7c:a5:fa:01:eb:
         0c:bb:e2:e6:37:09:43:f8:22:ad:6c:85:92:d9:f9:2e:b3:69:
         0c:6e:98:e4:d4:7f:a2:5a:0c:25:b2:40:65:50:c4:52:22:db:
         04:48:39:74:22:bd:70:47:25:ad:7b:ec:4a:ac:cb:5b:33:f3:
         70:8c:fd:e2:d6:ac:3b:79:04:8e:00:7f:01:4c:d2:a1:65:6c:
         66:b4:5f:0c:12:87:c3:7d:91:2f:21:56:9f:b8:ff:01:83:d1:
         45:c2:42:3b:c4:c5:14:5e:3e:15:25:40:5e:7e:0b:fa:6c:1e:
         3e:6c:d5:31:6d:3c:fb:b0:78:9f:d3:cb:d2:65:d1:41:eb:5e:
         26:e5:1a:d5:cb:59:0b:2e:62:c1:71:4c:46:1e:7f:9a:ae:78:
         dd:4a:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:16 2025 by rpki-client