Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa
File:                     3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          xTgQPvk+gG1wMz0njgy9KTB0aKmL1X6wr7NeuADx6hw=
Subject key identifier:   BD:68:77:54:0B:9C:C4:6A:6D:F1:66:BA:A3:A3:78:E9:20:A3:AC:CF
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       5531AFF0386D212EA9B569C6A7E494CB918933A8
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 11 Jul 2023 11:00:01 +0000
ROA not before:           Tue 11 Jul 2023 10:55:01 +0000
ROA not after:            Tue 09 Jul 2024 11:00:01 +0000
asID:                     9341
IP address blocks:        175.184.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 07:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:af:f0:38:6d:21:2e:a9:b5:69:c6:a7:e4:94:cb:91:89:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Jul 11 10:55:01 2023 GMT
            Not After : Jul  9 11:00:01 2024 GMT
        Subject: CN=BD6877540B9CC46A6DF166BAA3A378E920A3ACCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:7f:3c:85:7f:64:e9:59:7c:bb:13:1d:37:
                    a0:5e:20:c6:71:6b:86:05:74:75:04:ea:9d:f7:93:
                    cb:f4:28:99:91:58:28:40:ad:7a:34:a6:e4:aa:a8:
                    a0:e8:8e:55:35:df:37:c9:ed:38:b9:f4:af:3e:65:
                    de:db:8c:6e:ba:16:4e:3f:4c:46:8d:13:b0:0b:f3:
                    15:26:a2:40:88:15:3f:3a:ec:4b:11:49:52:cf:c7:
                    64:ea:07:b7:74:8c:15:68:55:cd:fe:63:d6:ac:d6:
                    7e:9a:18:a2:fd:c4:4e:21:2c:a4:78:e6:c4:30:25:
                    a5:92:40:2f:e5:05:83:e9:2b:b2:ee:c5:a4:ad:fb:
                    89:e9:58:64:cc:72:d0:3a:92:26:4f:33:18:40:38:
                    e3:93:f9:0b:0f:14:d7:30:e7:8e:29:f1:56:d5:10:
                    a6:35:b2:b1:4d:5b:93:5e:e9:ba:1a:34:bc:3e:6f:
                    66:2c:be:ed:fb:cc:8b:0a:7c:7c:fe:7c:df:cb:43:
                    59:c1:be:ec:f0:e7:ac:55:78:fa:0e:53:2a:fb:89:
                    5b:85:74:ca:69:8f:d9:cc:54:61:3a:a8:b7:bd:69:
                    9f:c7:a0:20:59:a7:ef:ab:50:43:82:f3:95:01:2d:
                    3a:36:3a:9c:5e:f6:6d:71:43:47:77:c4:27:56:e2:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:77:54:0B:9C:C4:6A:6D:F1:66:BA:A3:A3:78:E9:20:A3:AC:CF
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.184.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:07:01:cc:7f:33:39:c4:cf:38:0a:18:d7:00:3a:cd:22:89:
         d2:9a:a3:69:f0:68:c9:44:c0:5b:8f:b9:a6:01:82:d1:15:69:
         53:ef:c6:ef:3e:70:2e:07:83:6e:f3:25:4a:a4:cd:04:fe:e3:
         52:20:6f:da:c5:2b:be:ae:21:84:59:65:9b:45:61:a3:48:94:
         3a:e7:1e:64:5d:41:63:f3:81:c6:3d:7d:91:3a:07:9e:5a:5c:
         8d:12:b5:cd:10:48:54:6e:0d:2e:32:48:55:dc:35:ba:19:a7:
         78:b9:32:d8:4a:7e:69:76:0d:dc:72:57:7e:02:9b:30:05:29:
         9b:2a:68:ad:c4:1f:be:05:18:2b:32:f8:5b:c5:aa:a9:a9:5b:
         dc:6b:82:e1:9e:05:91:d0:34:f1:3b:f7:80:03:37:e1:b7:46:
         cd:88:33:5d:6e:ea:cd:61:8d:cf:26:b5:29:63:71:14:a1:db:
         28:fd:17:ed:82:cb:32:67:85:e1:83:90:a2:aa:f1:8b:14:aa:
         17:18:8d:7a:5a:1b:99:aa:60:b7:75:d0:70:db:a4:2b:63:37:
         f4:24:cd:89:e4:eb:8d:e1:65:de:86:ae:61:b6:d3:66:43:97:
         60:ea:fd:35:a1:9c:01:ef:35:8d:f5:3a:0b:2c:65:eb:ca:43:
         5d:a2:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:49:11 2024 by rpki-client on console-ams.rpki-client.org