Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e31302e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          7sUTtRuwPg8kw2M8sdWZBF9ShneER3Nh48oUxki4MRs=
Subject key identifier:   02:E3:93:51:64:6B:F0:57:B6:78:1B:53:C9:F6:11:48:C5:3B:85:00
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       1E3C8DDD864A4849DB377258B72900896614E4D7
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 14 Jul 2025 16:00:04 +0000
ROA not before:           Mon 14 Jul 2025 15:55:04 +0000
ROA not after:            Mon 13 Jul 2026 16:00:04 +0000
asID:                     46023
IP address blocks:        175.106.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 07:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3c:8d:dd:86:4a:48:49:db:37:72:58:b7:29:00:89:66:14:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Jul 14 15:55:04 2025 GMT
            Not After : Jul 13 16:00:04 2026 GMT
        Subject: CN=02E39351646BF057B6781B53C9F61148C53B8500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:63:7e:a7:94:9d:81:9b:27:5b:3d:84:13:
                    a1:50:bb:e4:c0:9c:aa:d8:a6:75:1e:d4:eb:e6:41:
                    6c:48:29:e1:9b:b1:b0:fa:85:d4:0c:4b:f8:b0:88:
                    ba:12:71:36:d2:ab:23:06:7e:e2:dc:f2:1f:4a:0b:
                    29:b9:cf:49:78:ff:5d:5e:5d:00:77:ba:28:f0:90:
                    7d:1a:15:41:e7:07:5d:1d:99:41:9b:b5:a2:bf:ec:
                    31:f8:40:77:8d:bf:82:5c:3a:56:92:29:ac:1e:67:
                    81:ac:8b:66:58:2a:0d:0d:a3:48:0f:d3:a6:33:8a:
                    e0:6d:2a:0a:ba:e0:31:ea:db:d8:f0:85:b3:da:13:
                    0f:a5:22:5c:b7:c1:b1:d9:79:e7:f4:f7:fc:c2:06:
                    1d:3c:90:95:07:80:44:2f:6a:c4:1d:40:a3:3d:6d:
                    02:8b:82:1b:c7:2a:23:80:66:e0:c3:89:0c:e1:10:
                    c9:08:51:9e:b9:12:93:38:3c:25:47:5d:76:bd:0e:
                    70:18:f9:50:8e:09:a2:4c:b3:f6:c0:54:d4:09:7c:
                    e4:23:b1:fd:ba:d3:44:61:59:b0:e0:ea:50:1f:08:
                    5f:9c:2f:32:3d:07:56:de:4e:70:32:36:e7:a4:b0:
                    38:1f:b3:9a:d6:d1:b8:61:71:2a:69:92:a0:a8:c2:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E3:93:51:64:6B:F0:57:B6:78:1B:53:C9:F6:11:48:C5:3B:85:00
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:04:b5:0a:ef:85:43:49:d8:65:d9:7b:a1:05:1c:f2:3f:62:
         ae:a0:1d:f2:66:ef:f4:89:39:22:08:5b:fe:9d:9f:53:c3:07:
         79:c8:be:11:dd:29:c5:63:d4:31:dd:9a:f0:97:25:1a:4f:4e:
         e4:ec:8d:6b:9d:ae:84:4f:d9:79:c6:90:4b:39:59:80:9d:09:
         f5:d9:ca:c5:ff:58:bb:1c:59:c0:90:50:cd:ce:16:ca:24:1b:
         51:b2:ab:6a:90:3d:a8:e4:52:e0:ab:be:ea:93:39:00:be:42:
         a5:f8:c8:f8:35:00:45:0d:df:93:e8:ba:8b:49:86:42:28:70:
         9d:d0:3a:6a:fc:17:2e:1d:5c:84:a3:db:9f:44:07:7b:ae:35:
         cc:5d:01:ee:b2:59:54:f4:97:12:15:f5:66:ff:3a:dd:85:c6:
         d0:b1:6d:c5:bb:2f:ef:81:a4:92:4a:7f:e5:9b:8c:7b:47:c6:
         8d:b0:60:10:76:3b:da:91:5d:b3:5b:8b:60:09:c6:18:bd:25:
         9f:38:11:67:d1:18:c9:ef:b4:00:a5:e1:f0:43:a7:21:c5:34:
         9c:06:af:0d:b6:8b:d2:ef:d3:6f:ba:c9:88:d4:3c:72:ed:e0:
         ee:7c:c1:43:3b:76:f8:94:4f:27:a7:0a:8f:3d:94:f7:29:98:
         c2:91:03:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:36 2025 by rpki-client