Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35352e302f32342d3234203d3e20313431383932.roa
File:                     3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (raw, json)
Hash identifier:          ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=
Subject key identifier:   A6:B2:5F:01:8F:A8:8D:0C:DB:55:99:A1:2B:E1:56:F7:00:17:4B:8D
Certificate issuer:       /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248
Certificate serial:       5734944A183E60154FDF095720B133C3622DCEF6
Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35352e302f32342d3234203d3e20313431383932.roa
Signing time:             Fri 07 Mar 2025 09:00:01 +0000
ROA not before:           Fri 07 Mar 2025 08:55:01 +0000
ROA not after:            Fri 06 Mar 2026 09:00:01 +0000
asID:                     141892
IP address blocks:        157.66.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl
                          rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:34:94:4a:18:3e:60:15:4f:df:09:57:20:b1:33:c3:62:2d:ce:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248
        Validity
            Not Before: Mar  7 08:55:01 2025 GMT
            Not After : Mar  6 09:00:01 2026 GMT
        Subject: CN=A6B25F018FA88D0CDB5599A12BE156F700174B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:d8:61:e1:c5:d4:6f:03:73:f8:f0:47:74:
                    ee:09:80:97:63:1d:b3:3e:69:3c:32:cf:e5:e6:d7:
                    42:c7:ef:83:98:f0:c2:a8:bf:ee:2d:18:e4:c9:3e:
                    88:ee:49:ce:fa:ff:e2:fe:b0:ac:e9:f0:41:d1:37:
                    89:4e:c5:67:21:80:ea:5a:f4:a4:d5:6c:13:a3:8c:
                    d4:67:09:3e:8b:73:ac:b9:ce:5e:4f:96:8e:7f:e3:
                    69:e4:56:91:25:00:ff:e7:f7:65:d9:ce:9c:62:26:
                    39:ac:23:94:59:fc:c2:4c:c9:ac:94:62:ce:1a:d8:
                    4f:ec:04:c5:72:f3:eb:e1:32:7f:b2:c7:cb:7b:0b:
                    83:8f:da:8f:47:5d:12:2b:c0:cf:45:fb:f2:45:82:
                    1a:74:8e:8a:b6:39:a4:f0:71:4c:65:89:dc:a8:2f:
                    e6:5f:52:1d:6a:47:15:e8:34:3b:63:eb:63:fc:86:
                    6f:c0:9b:66:70:74:02:41:1b:f7:1f:f7:1f:3a:cf:
                    7a:8d:b1:d6:66:44:8f:45:41:02:1d:15:89:1c:d7:
                    0e:64:81:ba:e1:c8:15:83:1c:0a:41:05:39:f4:cc:
                    32:f4:65:31:f4:6f:7a:bc:93:ee:c5:aa:47:59:48:
                    de:9e:cd:ea:1e:9f:13:45:54:f3:d9:f2:e8:9c:b6:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B2:5F:01:8F:A8:8D:0C:DB:55:99:A1:2B:E1:56:F7:00:17:4B:8D
            X509v3 Authority Key Identifier:
                keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35352e302f32342d3234203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:b7:37:23:04:d6:e0:de:a8:0c:14:70:dd:e0:f8:d7:5b:
         c5:89:23:b1:6a:5e:3c:ee:93:1d:6e:94:80:ef:9b:41:b7:a4:
         b6:e3:ad:ba:1d:db:09:34:0f:69:fb:c3:2e:dc:ab:ac:ed:35:
         18:1f:58:24:a6:01:47:d3:0c:c8:8f:e3:e2:5e:b5:c5:ac:0e:
         14:8b:99:ff:f6:1f:87:30:15:7e:c0:02:c1:99:6e:f5:20:84:
         f4:c2:12:55:a4:58:5e:e6:09:fb:d3:62:7e:38:09:cd:23:31:
         38:90:b6:ce:a0:2d:5b:8d:23:16:e0:6a:c6:08:48:10:dd:a2:
         1b:31:9b:37:e8:b6:d8:18:0e:0d:f1:ba:d9:55:3d:9d:21:e6:
         4c:c3:b9:37:4b:b3:47:49:6d:7d:5e:cc:fb:b2:7d:1d:74:ec:
         34:78:18:34:f4:b6:9b:3f:52:b7:f1:70:80:c3:f8:5b:3a:e1:
         19:33:26:5b:d9:61:8a:d3:9d:f3:dc:2d:e6:7a:17:20:95:11:
         fb:e5:3c:7e:c9:b2:6d:c0:cb:81:3e:ac:9b:00:10:14:14:c6:
         2a:cf:ed:f6:02:ce:c3:a9:97:33:f4:97:08:92:ac:18:70:3a:
         98:bf:95:19:4c:cd:87:b0:69:6c:7a:f5:e2:a7:a3:8e:a1:77:
         f4:d4:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 01:45:25 2025 by rpki-client on console.sobornost.net