Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
File:                     3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (raw, json)
Hash identifier:          6jCPD84y8MH7uTvQ3xE/CNM90suM2uvSs7LwiDSJt8o=
Subject key identifier:   0B:1A:50:32:08:A9:7D:72:69:F5:66:0D:CE:67:74:BA:94:BA:AC:05
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       7A86F62F972E2DD7C6C3B349E26298F634DFA75D
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa
Signing time:             Sat 04 Nov 2023 03:45:52 +0000
ROA not before:           Sat 04 Nov 2023 03:40:52 +0000
ROA not after:            Sat 02 Nov 2024 03:45:52 +0000
asID:                     46019
IP address blocks:        175.45.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 07:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:86:f6:2f:97:2e:2d:d7:c6:c3:b3:49:e2:62:98:f6:34:df:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Nov  4 03:40:52 2023 GMT
            Not After : Nov  2 03:45:52 2024 GMT
        Subject: CN=0B1A503208A97D7269F5660DCE6774BA94BAAC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c4:e8:6d:90:0d:bb:27:bf:b3:08:cd:3b:20:
                    1f:ca:bf:83:c7:84:6e:a2:48:61:99:03:02:b9:18:
                    1b:b2:d0:f5:4a:01:f2:48:62:37:cc:b3:63:a0:b6:
                    15:99:ee:76:ce:72:b8:f2:a2:c5:bc:c4:01:8c:85:
                    9a:5f:01:63:73:5d:8c:67:5e:f2:19:aa:a8:3d:dc:
                    59:15:21:32:ab:66:5e:e0:85:55:15:12:6d:81:49:
                    40:83:ad:89:b3:51:a6:d1:95:92:95:2e:a0:6f:4f:
                    44:1f:25:71:82:06:a2:33:ef:48:6d:c6:74:a2:70:
                    2d:76:dc:7c:aa:4d:92:d7:13:ee:27:14:a4:65:48:
                    59:c0:3b:df:95:ae:4c:06:3a:e6:a4:c7:4a:e0:8d:
                    d6:4b:94:30:04:d4:ca:aa:7e:d9:22:ff:93:b2:6b:
                    63:b2:aa:e3:71:d1:f4:b4:7a:6c:50:62:bf:f2:40:
                    c7:23:1b:e1:01:9c:dc:a9:10:ad:08:7e:55:ca:04:
                    52:92:9a:41:da:08:14:98:3a:a4:72:7e:c3:9e:17:
                    b2:c1:92:4a:b0:70:e3:74:ac:09:ef:4b:e2:b5:8c:
                    9b:b6:59:d4:5c:69:6d:3c:97:68:ee:73:b9:8f:f1:
                    f3:11:53:2f:0d:d7:bc:fb:14:35:e4:c9:d9:c0:e9:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1A:50:32:08:A9:7D:72:69:F5:66:0D:CE:67:74:BA:94:BA:AC:05
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32312d3231203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:49:83:31:25:f1:7e:44:da:77:97:51:01:78:da:b5:a5:
         eb:76:c6:80:9c:37:ad:fa:10:dd:f4:e7:fb:9c:67:db:b9:0b:
         55:b3:4d:41:2a:1d:df:31:7e:54:29:3b:e2:19:05:93:28:64:
         0e:c8:b7:f2:f5:78:70:60:e5:f8:e1:74:58:e7:43:fc:2a:8a:
         7b:cd:da:69:00:8c:40:75:8d:7d:91:81:35:38:c9:99:59:08:
         d5:0e:27:95:1b:8d:4f:24:2f:20:51:05:ca:2e:04:c3:3c:8e:
         83:e3:55:c9:af:80:fb:9c:c6:3d:13:93:d4:76:6c:36:c9:2d:
         56:0d:52:5a:46:e3:ff:6b:9c:09:4a:58:5a:3d:10:1b:62:9f:
         0a:3e:1a:a5:0f:65:22:7f:f7:a6:19:37:e4:9f:21:31:3c:b2:
         4c:8c:6b:a7:ff:c5:f8:a4:a1:87:6d:7a:fb:e5:38:3d:9e:6e:
         f0:f7:56:1d:13:cc:4b:38:0f:46:e2:7b:c9:34:f2:50:70:d2:
         25:08:34:18:c9:30:ba:96:67:cc:45:92:35:00:dc:37:5f:fc:
         ae:1b:3a:49:f8:36:a6:ce:34:9a:d7:34:54:5c:fb:48:2b:c8:
         f0:fa:6e:12:e1:03:c0:49:f0:9f:fe:30:c8:9f:cb:61:3c:a7:
         97:19:f6:05
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeob2L5cuLdfGw7NJ4mKY9jTfp10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz
RjBCNzBCNTAeFw0yMzExMDQwMzQwNTJaFw0yNDExMDIwMzQ1NTJaMDMxMTAvBgNV
BAMTKDBCMUE1MDMyMDhBOTdENzI2OUY1NjYwRENFNjc3NEJBOTRCQUFDMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxOhtkA27J7+zCM07IB/Kv4PH
hG6iSGGZAwK5GBuy0PVKAfJIYjfMs2OgthWZ7nbOcrjyosW8xAGMhZpfAWNzXYxn
XvIZqqg93FkVITKrZl7ghVUVEm2BSUCDrYmzUabRlZKVLqBvT0QfJXGCBqIz70ht
xnSicC123HyqTZLXE+4nFKRlSFnAO9+VrkwGOuakx0rgjdZLlDAE1Mqqftki/5Oy
a2OyquNx0fS0emxQYr/yQMcjG+EBnNypEK0IflXKBFKSmkHaCBSYOqRyfsOeF7LB
kkqwcON0rAnvS+K1jJu2WdRcaW08l2juc7mP8fMRUy8N17z7FDXkydnA6eXHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCxpQMgipfXJp9WYNzmd0upS6rAUwHwYDVR0j
BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB
MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC
NzBCNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZjcxYzkxLTE2MjQtNGZjMC04
YzYzLTJlZmFmZDQ2ZmJjMS8wLzMxMzczNTJlMzQzNTJlMzEzODM0MmUzMDJmMzIz
MTJkMzIzMTIwM2QzZTIwMzQzNjMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA68tuDANBgkqhkiG
9w0BAQsFAAOCAQEANdBJgzEl8X5E2neXUQF42rWl63bGgJw3rfoQ3fTn+5xn27kL
VbNNQSod3zF+VCk74hkFkyhkDsi38vV4cGDl+OF0WOdD/CqKe83aaQCMQHWNfZGB
NTjJmVkI1Q4nlRuNTyQvIFEFyi4EwzyOg+NVya+A+5zGPROT1HZsNsktVg1SWkbj
/2ucCUpYWj0QG2KfCj4apQ9lIn/3phk35J8hMTyyTIxrp//F+KShh216++U4PZ5u
8PdWHRPMSzgPRuJ7yTTyUHDSJQg0GMkwupZnzEWSNQDcN1/8rhs6Sfg2ps40mtc0
VFz7SCvI8PpuEuEDwEnwn/4wyJ/LYTynlxn2BQ==
-----END CERTIFICATE-----
Generated at Thu May 2 03:10:51 2024 by rpki-client on console-ams.rpki-client.org