Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31352e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e31352e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          ekyVWzxOuC8uMjubJuvpwYgrlxp+lLVxIvziHbo028g=
Subject key identifier:   F1:30:FE:AC:42:A0:C7:CA:8F:3A:00:C6:7F:79:CC:3B:A0:D7:E9:92
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       0D8D72CCB37B9A21E32789C310C4D19DC7F0177A
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31352e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 14 Jul 2025 16:00:02 +0000
ROA not before:           Mon 14 Jul 2025 15:55:02 +0000
ROA not after:            Mon 13 Jul 2026 16:00:02 +0000
asID:                     46023
IP address blocks:        175.106.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 07:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:72:cc:b3:7b:9a:21:e3:27:89:c3:10:c4:d1:9d:c7:f0:17:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Jul 14 15:55:02 2025 GMT
            Not After : Jul 13 16:00:02 2026 GMT
        Subject: CN=F130FEAC42A0C7CA8F3A00C67F79CC3BA0D7E992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:b3:16:66:be:c2:8f:af:6b:f1:37:76:a0:
                    c5:ac:6a:68:f5:2e:c5:0a:45:7c:74:13:1b:74:8b:
                    4f:3e:05:8c:86:10:a6:de:a8:31:30:d9:eb:a4:90:
                    6d:02:e5:0b:32:cf:1e:d3:3c:f6:a1:d1:ac:48:e4:
                    45:d1:58:16:63:84:d3:05:73:0a:f5:fb:b7:7f:a9:
                    33:8e:75:9f:41:50:97:9e:55:72:f6:22:92:74:1e:
                    12:83:e8:9d:90:8c:c2:65:8d:0d:2e:9c:31:c9:d9:
                    16:28:ed:d1:4e:71:f7:74:11:63:fc:01:a2:8e:58:
                    2f:23:47:90:57:f5:c7:84:46:43:f0:de:31:fb:1e:
                    64:ba:4f:11:a0:cd:b9:a5:3f:6d:d3:17:a6:be:c4:
                    9b:65:9a:47:40:66:9d:25:ec:cb:c9:19:d9:f5:fd:
                    ba:b3:a6:91:42:b9:88:84:e1:51:e5:99:06:a8:b9:
                    d1:96:55:a9:54:e6:e0:f4:d4:7e:42:8c:9d:e9:e3:
                    e0:72:fc:9c:53:89:60:07:e9:1f:04:50:5b:e3:6b:
                    d6:d9:00:05:0b:88:2f:a1:a5:f3:5e:e9:b5:93:6c:
                    03:e6:da:86:c8:03:4e:dc:88:c8:7b:fc:89:d5:06:
                    04:96:03:0d:93:f7:e1:67:bc:d8:32:0c:a4:2d:95:
                    ea:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:30:FE:AC:42:A0:C7:CA:8F:3A:00:C6:7F:79:CC:3B:A0:D7:E9:92
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31352e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:21:d8:f5:42:5c:25:da:fa:88:6b:5f:ce:39:a2:12:c3:
         a3:9c:d1:71:29:17:f7:68:1e:b3:ad:88:99:30:40:f1:33:b1:
         3b:4a:fc:56:31:59:4c:ed:64:bb:fb:ee:aa:87:b1:59:b8:60:
         49:f7:fc:e0:37:ac:36:3d:5d:a3:d2:27:11:56:c9:86:45:16:
         e4:b2:53:a7:c7:40:dd:e7:b2:5f:25:e9:04:f3:60:78:66:6d:
         a4:5d:29:39:7e:73:f4:84:3d:5e:68:eb:71:65:5b:bd:a3:4b:
         77:dc:44:ea:6f:1b:3d:82:7e:f7:78:bb:3c:09:0f:35:2d:9a:
         09:15:35:ad:d8:b5:bf:65:78:6a:19:ca:f5:bf:91:a6:37:60:
         a4:ec:9b:7c:4a:ae:4c:f8:57:40:7b:0c:5c:f5:e5:40:0c:ef:
         1c:e5:c4:47:04:df:13:9e:84:41:9d:10:2b:8c:be:12:52:71:
         c0:5f:0a:93:da:6c:16:5d:9d:2a:26:16:27:9d:80:8e:5a:d6:
         12:6e:23:96:79:82:31:3a:d0:2c:df:35:d9:d1:4f:e0:1a:fa:
         20:7b:0d:af:94:77:b4:10:47:f7:93:04:54:82:f9:7f:5e:a6:
         61:fc:f1:62:4b:b0:23:e4:37:74:ff:f7:ac:a4:00:a1:4a:a3:
         a0:e7:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:33 2025 by rpki-client