Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e31302e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          IBAJq5SaR0Kyzgpsfrpu1lAqDCXfKZVn8oAlt6D/VGc=
Subject key identifier:   E5:3A:0D:39:46:71:2B:37:48:2C:AB:D4:24:5F:F8:5F:07:20:87:41
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       7581F65C9A67C7DBEB3A6FFD81A2F54145EDF8D7
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:27:03 +0000
ROA not before:           Mon 12 Aug 2024 15:22:03 +0000
ROA not after:            Mon 11 Aug 2025 15:27:03 +0000
asID:                     46023
IP address blocks:        175.106.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:81:f6:5c:9a:67:c7:db:eb:3a:6f:fd:81:a2:f5:41:45:ed:f8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:22:03 2024 GMT
            Not After : Aug 11 15:27:03 2025 GMT
        Subject: CN=E53A0D3946712B37482CABD4245FF85F07208741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:22:6a:1f:fe:75:50:b3:a1:b6:a0:a3:35:
                    f8:e5:e7:62:47:70:d6:2e:04:0a:99:fa:33:52:a1:
                    78:82:60:fa:d9:ef:19:49:eb:cc:90:86:f7:17:c3:
                    03:63:bc:57:04:ee:64:5d:c7:cb:0a:f7:35:92:85:
                    93:88:2e:7b:e7:11:c2:1e:92:2f:18:d9:4e:7d:91:
                    58:a0:12:69:a0:83:0f:49:09:50:47:77:73:dc:f1:
                    19:88:98:65:30:23:4c:2c:50:33:42:ba:fe:40:9a:
                    5b:8d:25:38:b4:5c:f9:3f:02:20:82:2f:89:01:45:
                    7e:75:8a:4f:bc:21:ca:d1:62:26:f1:0f:36:d2:fc:
                    9f:12:7d:e4:48:d3:63:f6:00:83:a7:fa:2e:37:f3:
                    2c:b8:bb:c8:fc:7c:56:e4:75:4d:b6:68:f5:1a:7a:
                    16:a9:54:db:a9:68:4c:b4:40:88:1b:6e:e6:0a:04:
                    a1:58:e5:5f:b1:d7:a1:94:2f:96:49:e4:6c:fb:95:
                    69:e0:bd:b9:29:56:f9:79:a2:22:33:0e:fc:35:11:
                    2e:69:f1:9a:08:23:84:de:1e:a0:81:eb:a9:45:39:
                    80:13:76:31:e7:f4:bb:5a:fe:e3:c8:a3:65:8c:12:
                    6d:63:3a:3d:1c:94:0f:20:be:b4:66:dc:d4:53:3b:
                    db:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:0D:39:46:71:2B:37:48:2C:AB:D4:24:5F:F8:5F:07:20:87:41
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:43:54:f8:90:6e:43:87:e5:3e:2a:89:54:3d:4f:bc:88:72:
         84:86:4c:9e:cc:ce:5e:54:ac:4e:60:61:7a:3c:e1:74:60:db:
         63:99:d5:a4:ab:17:d3:0f:f6:d0:6f:b5:c2:d0:f7:bf:32:f8:
         c8:d2:b9:d4:03:e1:7c:f0:90:44:34:ff:8f:ee:58:4a:90:e3:
         c7:44:88:af:71:23:24:ae:ef:7c:95:be:37:cb:ea:9a:f4:36:
         2a:f0:a8:2d:bf:92:4c:ff:a5:9a:8c:aa:84:b1:7d:b6:e9:a4:
         91:dc:2b:c4:fd:45:8f:32:19:8b:c9:0d:20:cf:b9:85:e7:56:
         ff:ae:ea:57:be:ab:57:3d:32:8a:5c:5e:36:30:7d:56:88:05:
         79:8e:57:5f:67:39:07:af:61:5a:84:b1:a1:e2:d6:5b:b6:c7:
         45:dd:52:59:9a:9f:1d:94:f9:56:2f:66:2e:90:8c:27:ef:99:
         44:3b:10:c8:d4:04:25:85:9d:f9:28:85:20:d8:f4:77:c3:f4:
         16:45:44:56:a9:bf:2e:66:56:fb:51:8c:f6:fa:ee:d3:6a:be:
         da:43:cd:87:ef:64:8b:c7:b8:36:49:59:40:07:e7:2c:1c:b2:
         61:98:78:a2:e0:38:99:cc:de:6b:c7:9f:02:e0:9c:4b:0d:96:
         11:ad:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org