Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          bX+bui/7xfRUR4HInmAKA5EbP4vreYurLglziW5Paps=
Subject key identifier:   46:51:8E:91:89:6F:A3:F3:30:CE:19:1E:79:45:0D:FD:03:DB:2F:EB
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       0DA5A9EBCFFDD3EF5CB59FE1AAA0F421F71AFD3A
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 01 Jul 2024 01:02:23 +0000
ROA not before:           Mon 01 Jul 2024 00:57:23 +0000
ROA not after:            Mon 30 Jun 2025 01:02:23 +0000
asID:                     46019
IP address blocks:        175.45.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:a9:eb:cf:fd:d3:ef:5c:b5:9f:e1:aa:a0:f4:21:f7:1a:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jul  1 00:57:23 2024 GMT
            Not After : Jun 30 01:02:23 2025 GMT
        Subject: CN=46518E91896FA3F330CE191E79450DFD03DB2FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:53:1c:98:ba:33:32:ef:5c:6a:a1:99:f1:
                    af:13:f8:8c:d2:10:23:80:e2:a2:e3:a5:e1:19:aa:
                    0e:af:3a:d4:0e:e6:48:2d:e1:c2:a5:f0:6c:a3:b7:
                    ce:01:6f:72:57:ef:f8:7a:22:59:b3:85:b9:a3:60:
                    84:72:13:cc:92:97:19:1c:a6:eb:da:c5:fd:87:4f:
                    3b:a2:a6:f5:8a:31:2d:c5:14:f3:f4:f6:cf:72:0c:
                    b0:ba:0d:75:e1:68:31:18:f0:cf:c7:72:1b:63:d6:
                    ca:b8:45:e3:c2:2c:e3:eb:19:6e:c4:21:61:36:7f:
                    da:e4:7b:bd:70:65:fa:63:ab:8d:ab:d2:ad:3a:7f:
                    ec:75:a9:9d:4b:e5:da:34:7c:21:cd:70:7e:fa:b8:
                    0c:ad:03:34:ae:47:02:90:7e:83:ce:42:30:d8:70:
                    a0:33:9a:b3:1f:46:19:a7:de:26:c0:94:13:79:8e:
                    df:20:22:24:5e:f7:2b:35:9b:e6:f6:3f:78:9b:31:
                    e3:9c:e1:78:51:ed:3c:7a:48:e6:6f:00:16:90:a6:
                    77:45:e3:68:5f:f1:e5:da:21:4c:88:ba:c1:9c:e4:
                    ef:88:10:b5:e1:e8:e9:93:4a:39:be:2c:e1:8c:e3:
                    b2:44:68:d7:a7:40:90:9a:a6:39:58:a3:f4:12:9b:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:8E:91:89:6F:A3:F3:30:CE:19:1E:79:45:0D:FD:03:DB:2F:EB
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138342e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:7a:f9:4e:1a:33:4b:e3:f6:24:e8:61:69:a7:a6:cd:42:
         7d:28:17:34:89:3d:b6:6a:ba:b5:45:61:b1:73:5b:6e:53:13:
         98:be:7f:58:43:83:a6:df:e1:26:f2:c2:82:f8:ab:23:ce:d5:
         28:d0:8b:d2:67:47:e8:bb:2e:d0:81:5a:99:58:c2:4c:7f:8c:
         d8:ed:93:45:52:a1:f6:4a:dd:be:18:7d:91:06:42:c9:34:63:
         d1:50:39:33:b7:45:16:1d:88:84:c9:3f:1f:9f:b8:da:c3:71:
         56:6b:74:26:83:99:7c:27:0b:03:0f:6e:76:38:bc:57:bd:40:
         fc:47:95:a0:2f:7e:79:c1:4b:eb:52:5d:dd:74:76:63:1d:31:
         cb:1b:db:82:90:4e:d1:38:1b:c9:6e:6a:e8:76:14:39:d8:41:
         42:2d:a4:03:63:bb:6f:a2:aa:5d:c5:5f:77:21:fb:a0:ec:aa:
         be:77:84:10:09:32:d8:c7:b3:c1:b1:74:4a:14:03:2b:61:53:
         f1:53:55:37:b3:5c:d3:47:a5:5d:77:77:56:e7:fb:b4:e6:40:
         86:70:3f:fc:c8:99:26:6e:19:35:9f:77:0b:06:27:fe:9b:08:
         18:45:b2:63:3f:ad:5e:4b:58:2d:5d:76:dd:a0:a1:ee:94:6e:
         79:16:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org