Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
File:                     3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier:          GWaWKRBrWSX+bUdESxh+m2otGWb/hOeTShn9gb95F3w=
Subject key identifier:   6A:B5:2A:0B:05:C2:18:3C:73:59:49:55:98:49:55:A8:97:D5:63:54
Certificate issuer:       /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial:       2F19AC9D21D041C58A342CF1DFC75A4E9CEF8BBC
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
Signing time:             Mon 12 May 2025 08:01:21 +0000
ROA not before:           Mon 12 May 2025 07:56:21 +0000
ROA not after:            Mon 11 May 2026 08:01:21 +0000
asID:                     152770
IP address blocks:        157.66.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
                          rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:ac:9d:21:d0:41:c5:8a:34:2c:f1:df:c7:5a:4e:9c:ef:8b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
        Validity
            Not Before: May 12 07:56:21 2025 GMT
            Not After : May 11 08:01:21 2026 GMT
        Subject: CN=6AB52A0B05C2183C73594955984955A897D56354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:33:45:21:b4:42:43:d2:ac:78:c4:72:4a:
                    b3:c9:74:e9:f5:06:f0:94:92:1a:3a:da:48:7e:94:
                    27:c2:4b:80:dd:a6:78:64:92:4a:a5:92:c6:7b:e3:
                    17:21:80:30:aa:05:1b:ea:da:c9:f0:2e:ac:f8:c8:
                    4d:58:80:f8:3c:e3:38:ea:4a:b2:52:55:32:7a:9a:
                    00:92:81:48:70:03:95:6d:36:95:b2:ff:3b:09:d1:
                    9f:91:03:ef:6e:3c:28:fd:c6:46:f4:f3:a6:e8:57:
                    72:20:a9:1e:4d:13:5f:e3:0f:da:e1:d6:43:dd:01:
                    27:e2:84:b7:66:5e:4b:9e:a3:2b:c8:4a:c7:ed:50:
                    79:d7:77:fd:5c:e3:b9:75:24:6a:2d:94:c7:62:24:
                    a2:08:69:0c:a5:6e:75:bd:ea:65:bb:6c:b9:57:07:
                    b6:d7:47:29:9b:27:9f:a7:b8:82:20:6c:25:6a:d7:
                    e3:9e:a4:2e:65:a6:fd:e7:90:ce:4e:c1:3c:c5:20:
                    61:15:8f:96:23:bb:4d:fa:f9:0f:34:0d:fa:bd:2b:
                    3e:d5:bb:58:fd:99:a6:db:99:3a:9d:c3:04:7a:f4:
                    c6:b2:43:29:11:a7:1e:c9:32:ab:73:24:af:64:a2:
                    98:f0:28:ca:9b:be:7a:4e:ed:71:1d:fb:3b:65:1e:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:2A:0B:05:C2:18:3C:73:59:49:55:98:49:55:A8:97:D5:63:54
            X509v3 Authority Key Identifier:
                keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:41:31:52:74:8e:c5:a8:1e:ef:fc:a3:9f:e6:2e:1f:60:95:
         64:e5:c0:0a:9c:a5:85:51:76:ec:62:11:ad:45:bd:5a:d7:b8:
         fd:c9:95:16:7b:70:55:32:24:79:95:38:d5:6a:53:1b:b2:d1:
         a1:f9:ee:2b:dd:65:20:46:55:3a:fc:97:f1:52:79:5e:27:79:
         23:d8:a8:0f:a8:28:9d:bf:fd:86:f7:d8:7a:dd:75:c4:a7:17:
         bf:a7:22:8b:2a:44:3f:0a:a2:3e:55:85:13:3f:9e:5f:dc:e7:
         4d:24:22:0f:63:7a:ce:6c:bb:ae:17:40:8c:08:b7:5f:d5:29:
         06:63:bf:8e:2a:b2:a9:e3:eb:5b:11:b8:3f:fa:07:e8:fa:ca:
         ab:7b:b8:31:01:3e:24:89:e9:88:cd:1c:c4:fa:6d:29:c0:68:
         5f:9e:09:7b:5e:8a:1d:53:c0:7b:40:5b:ae:3d:3a:5d:97:fc:
         da:bc:70:b6:d3:a8:6c:e9:2f:7c:0c:18:bc:b8:64:2b:cb:8f:
         0d:b0:da:68:d1:04:08:92:57:c7:7e:14:e5:2c:d1:32:0b:fe:
         76:c0:60:7c:b1:58:a6:3f:94:04:ce:09:d9:10:fb:03:fe:4e:
         ad:9d:f3:ab:56:23:c7:ea:78:da:aa:09:ae:e6:6e:38:b8:10:
         a9:dc:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:53:34 2025 by rpki-client