Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e392e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e392e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          v6jqxa9ixTsMatAD622l6DniSGiLEJuOWInwuYpIE2Q=
Subject key identifier:   52:A3:77:53:CE:61:C2:28:7D:FC:53:04:D5:51:0C:08:D3:E1:6A:45
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       528EAE8EF3A4D1892D0B804CC28A0AED87F9C250
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e392e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:25:38 +0000
ROA not before:           Mon 12 Aug 2024 15:20:38 +0000
ROA not after:            Mon 11 Aug 2025 15:25:38 +0000
asID:                     46023
IP address blocks:        175.106.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:ae:8e:f3:a4:d1:89:2d:0b:80:4c:c2:8a:0a:ed:87:f9:c2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:20:38 2024 GMT
            Not After : Aug 11 15:25:38 2025 GMT
        Subject: CN=52A37753CE61C2287DFC5304D5510C08D3E16A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:de:9b:44:00:57:a8:8f:4b:fc:23:19:bc:
                    76:5d:09:32:ee:03:f9:3d:34:f0:eb:4b:f0:23:c1:
                    32:a3:83:95:b7:50:39:57:a6:16:cd:d4:d3:aa:be:
                    75:66:89:7d:c1:d6:ee:d3:da:7e:4b:bb:e9:e1:33:
                    ef:42:f9:9d:2a:b1:99:f2:d0:ab:16:96:35:3f:48:
                    80:b3:de:f5:10:4c:77:58:f9:c5:d3:97:f9:db:07:
                    8b:8d:95:fe:77:3b:cf:37:5d:7b:2f:5f:17:b5:ab:
                    eb:af:cc:3a:5a:65:4e:7e:a0:e3:33:15:90:65:90:
                    2b:5a:da:11:3b:4c:d0:59:6d:07:52:69:43:37:99:
                    b4:2b:ca:10:a4:f1:e1:fd:eb:ee:9f:2e:5a:88:1a:
                    78:7c:e1:43:ea:a9:01:bc:a1:1d:1b:0b:82:7e:08:
                    40:9a:88:24:c0:88:37:78:54:11:f0:f5:fc:af:f1:
                    df:25:8b:03:5a:5a:f3:8f:82:6f:ce:ec:ac:95:10:
                    1a:34:2b:95:0e:d2:71:8c:aa:a0:b8:83:68:5d:98:
                    7a:6b:37:1a:c5:85:3a:7e:1c:49:17:61:bb:8c:61:
                    e0:36:86:dc:3d:37:16:83:54:5c:59:82:63:1a:ff:
                    76:2b:5d:f7:31:90:ea:9f:fa:a9:c2:f8:9e:c8:d9:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:77:53:CE:61:C2:28:7D:FC:53:04:D5:51:0C:08:D3:E1:6A:45
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e392e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a1:7b:ec:53:94:36:a6:a7:f4:32:0b:47:07:64:9a:35:29:
         13:c3:db:a2:9b:92:ec:69:6a:42:10:1c:eb:5a:51:aa:55:91:
         c9:f2:28:e6:20:bc:8f:1b:45:54:ba:2f:1b:4e:ce:75:2b:95:
         7c:e7:bf:80:76:48:26:7a:3b:6e:86:41:bc:36:d1:97:d2:93:
         b9:a5:83:04:73:cc:e5:8e:0e:75:1a:8b:21:dd:26:95:01:58:
         03:20:4f:d1:04:14:33:a2:2a:d3:43:33:86:73:79:0c:c9:ac:
         6c:0f:ca:98:4c:4b:08:46:54:08:bd:7f:52:d3:19:00:82:04:
         9f:39:27:4f:15:1f:ff:2c:f0:48:ea:20:98:3c:6f:ca:e6:f0:
         9b:23:23:00:ba:7b:7a:89:70:b3:29:ff:54:22:1d:5b:55:49:
         00:85:aa:be:ab:17:1f:af:bd:0d:d9:54:8a:14:2a:b6:3d:8a:
         ca:01:9b:ec:72:99:4a:3a:e0:d3:c0:c1:8b:9c:ce:bf:04:20:
         74:08:0d:81:2a:47:c6:7d:8c:3e:58:37:d8:b8:7b:db:8c:79:
         de:6e:24:df:6c:32:3d:66:7e:9c:c6:58:08:eb:da:c6:44:b6:
         ab:7d:05:88:1e:e0:c6:73:f0:74:f1:b8:7d:6e:3c:db:07:e6:
         bc:72:3a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org