Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e31322e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          w29+w1ng1VsbpGfY8xfKGKMkMmzB5iWLYQI+VIuNOw4=
Subject key identifier:   B0:ED:3D:62:E6:4A:29:46:81:17:86:00:27:FD:9D:2C:03:9D:C2:F5
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       1E31B72F827EE4DACB307AF3D36208AC55787352
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:29:01 +0000
ROA not before:           Mon 12 Aug 2024 15:24:01 +0000
ROA not after:            Mon 11 Aug 2025 15:29:01 +0000
asID:                     46023
IP address blocks:        175.106.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:b7:2f:82:7e:e4:da:cb:30:7a:f3:d3:62:08:ac:55:78:73:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:24:01 2024 GMT
            Not After : Aug 11 15:29:01 2025 GMT
        Subject: CN=B0ED3D62E64A29468117860027FD9D2C039DC2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:ee:10:c4:23:2d:32:4f:7e:72:74:00:7a:
                    1d:98:92:bf:bc:f4:cd:09:1d:c8:b6:d6:c8:d3:7b:
                    dc:8b:cb:04:06:84:ec:e6:69:2f:e0:7f:f9:9f:75:
                    8b:7e:66:4c:a3:8c:b5:a8:40:97:a3:0a:aa:0a:d7:
                    15:95:c6:b4:05:a9:99:77:73:b2:a9:61:9d:c0:3c:
                    91:63:6c:85:2d:d8:bb:17:4e:cb:d6:6f:30:36:a0:
                    4c:5e:06:2f:b3:f6:59:f7:b9:0d:28:c9:02:64:22:
                    bf:df:7e:31:fc:4d:65:68:d7:8c:05:bc:85:83:b0:
                    06:7e:a6:a3:54:3b:fb:03:14:57:34:86:81:d0:7d:
                    38:9b:59:f3:e9:e0:e2:37:2c:6b:9a:a0:07:ba:15:
                    1d:01:ca:5f:92:f0:e4:99:5f:f3:4d:5a:6d:b6:32:
                    43:80:01:07:58:e1:9b:11:2d:5e:c8:79:b2:5e:bb:
                    f2:90:2b:88:0f:4b:6c:13:f6:f9:6e:75:ef:b7:3b:
                    ee:84:63:47:b8:ec:32:80:59:b3:30:c1:3e:6a:98:
                    73:be:41:e2:6c:99:ba:3c:fb:dd:88:ab:bc:fe:a5:
                    d8:c7:c9:c4:35:df:9e:ab:ca:11:27:49:13:11:bb:
                    f6:71:e1:02:d4:bf:75:7b:42:95:53:76:fe:77:b3:
                    0d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:3D:62:E6:4A:29:46:81:17:86:00:27:FD:9D:2C:03:9D:C2:F5
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:fd:3f:f0:d3:ae:52:ae:ff:c0:b0:64:af:c5:da:ca:36:
         5d:06:50:d9:5b:ec:4b:53:7c:37:d8:df:be:df:39:bc:f3:11:
         de:79:37:2b:92:a4:6d:d8:43:af:f7:11:55:a1:76:9e:50:80:
         0e:33:62:62:b1:c2:20:5b:e1:6f:67:78:13:1e:b1:99:7f:2d:
         48:47:9e:44:1b:99:6e:dd:64:94:62:67:97:32:5f:d1:ba:56:
         b9:78:12:fb:bd:ca:5e:5f:ff:93:a7:28:f1:e7:fa:c4:16:3a:
         2f:96:b7:52:eb:f3:2d:9c:65:7b:44:79:72:92:8c:d5:4b:f5:
         a0:3c:9e:22:77:bc:c9:68:71:75:08:bf:3f:6b:82:fd:f9:41:
         78:2c:f4:f6:cc:c0:83:ed:7c:69:05:49:70:16:98:d8:a6:6b:
         b3:09:61:7c:12:d9:e8:a0:71:29:ca:29:5f:7e:f8:04:c8:6b:
         a2:89:91:93:90:61:6c:37:c6:1c:58:c6:02:4f:75:a5:bb:d9:
         6a:39:c0:41:bb:d2:78:47:a0:46:16:46:32:5a:b5:09:f2:47:
         58:68:c9:c2:f7:d7:af:f0:56:a5:b2:5c:3c:db:2c:55:f0:68:
         1d:52:1d:b1:80:5f:20:64:7d:fd:46:4f:d5:0a:d0:98:fe:60:
         23:9a:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org