Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
File:                     3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (raw, json)
Hash identifier:          0v8AgN7r/4c1TsSHnJh2jh4MvGOfXWjrDArdHCr4Jyk=
Subject key identifier:   AA:AB:A7:DB:16:5F:6D:61:A0:42:5A:A7:C9:4B:DF:0E:0F:A7:91:79
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       7B79AFC8C2CEBBBEA14AD90F0ABC39ED1335683E
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
Signing time:             Sat 06 Sep 2025 04:02:24 +0000
ROA not before:           Sat 06 Sep 2025 03:57:24 +0000
ROA not after:            Sat 05 Sep 2026 04:02:24 +0000
asID:                     46019
IP address blocks:        175.45.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 06:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:af:c8:c2:ce:bb:be:a1:4a:d9:0f:0a:bc:39:ed:13:35:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Sep  6 03:57:24 2025 GMT
            Not After : Sep  5 04:02:24 2026 GMT
        Subject: CN=AAABA7DB165F6D61A0425AA7C94BDF0E0FA79179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:31:22:e4:43:74:2d:5c:db:f6:1a:98:68:
                    00:2f:15:a8:73:9d:bc:e3:18:b8:9c:6d:0d:92:6a:
                    88:64:98:0a:cf:99:2c:a3:e8:68:c8:34:9a:a0:33:
                    78:fc:e0:42:d6:23:75:62:52:4a:45:57:0c:c9:bc:
                    03:3f:d1:6d:69:a8:71:67:83:9c:e5:69:0c:6d:e9:
                    be:5b:35:db:bd:f2:73:30:b8:5d:35:a1:53:14:8d:
                    b7:19:75:f9:3b:70:b2:98:f9:64:77:fd:7b:75:90:
                    5b:d2:a4:7f:06:b6:1a:86:fe:0b:1d:25:41:df:ed:
                    0b:19:a9:d2:c6:65:9f:61:c3:6f:f3:82:2c:84:ec:
                    83:2d:7a:c5:f6:4e:f7:0e:2f:c0:7d:d1:33:bd:5b:
                    41:b0:0c:07:aa:b2:bd:73:ca:bc:cb:0b:66:10:d9:
                    03:22:c1:10:18:98:91:df:e7:a5:d1:5c:72:63:85:
                    0c:b8:6d:cf:96:80:62:32:d7:bb:b0:3a:b2:fb:5a:
                    a4:d6:33:eb:33:1a:cc:fd:22:bb:74:94:0c:6d:22:
                    09:99:41:36:ba:01:9a:a1:fe:e2:ba:8e:7d:74:51:
                    20:f9:47:4b:22:aa:d5:1e:9b:0b:24:7d:73:a1:c3:
                    79:be:cb:ca:0d:38:79:70:df:93:ae:ae:df:6b:64:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AB:A7:DB:16:5F:6D:61:A0:42:5A:A7:C9:4B:DF:0E:0F:A7:91:79
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:23:d0:cd:c2:38:2b:77:83:79:27:23:52:f4:7c:92:80:5e:
         fb:a9:93:32:77:12:a5:ad:40:9e:42:e1:3e:22:48:67:22:8a:
         e7:2b:1e:74:fe:ba:e4:93:01:fc:7c:70:ce:1d:f1:13:f1:d8:
         b2:eb:e5:5a:60:5b:ea:68:58:24:5f:49:fc:30:2c:67:fb:28:
         da:61:68:5e:a7:66:3a:bd:65:bf:18:1d:26:fb:f2:a0:21:1b:
         63:c6:42:73:0d:76:6f:bb:69:27:56:53:f1:36:5d:4d:48:d3:
         f8:5e:d1:73:a6:7b:6e:96:cb:4e:a8:b4:4b:59:2a:6e:20:33:
         22:a6:78:bc:9d:c7:3a:a8:37:86:1e:47:d9:6f:f2:b3:0d:4d:
         13:be:32:d5:c7:ad:d9:ed:b0:98:4c:09:f2:0f:7a:72:c7:f6:
         1d:53:99:f4:72:25:1c:5a:e2:77:e1:69:da:fe:9f:e5:c5:fc:
         1e:4c:00:a8:b9:20:0e:25:f5:ca:dc:2d:69:34:86:cf:4f:e6:
         c0:80:54:21:60:04:4f:33:a9:6f:16:ac:db:7e:6f:21:b8:cc:
         98:44:e0:88:53:a8:4d:63:da:dc:f4:4f:35:d6:f4:c2:7c:31:
         5b:eb:8f:a7:6b:87:37:17:21:48:8e:50:c9:ec:8b:a4:e2:e5:
         18:64:a3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:38:20 2025 by rpki-client