Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138362e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          8NWlJt4CJ8mG05Kksh2s5LLd0tjsRxbEV7dAV2EGZp0=
Subject key identifier:   2A:C7:07:12:E4:24:09:F2:E2:39:12:CA:77:6C:2B:B5:81:6D:A1:98
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       3A69A00F303FD7C8C5535E638541F2050A32B205
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138362e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 02 Jun 2025 01:02:31 +0000
ROA not before:           Mon 02 Jun 2025 00:57:31 +0000
ROA not after:            Mon 01 Jun 2026 01:02:31 +0000
asID:                     46019
IP address blocks:        175.45.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:69:a0:0f:30:3f:d7:c8:c5:53:5e:63:85:41:f2:05:0a:32:b2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  2 00:57:31 2025 GMT
            Not After : Jun  1 01:02:31 2026 GMT
        Subject: CN=2AC70712E42409F2E23912CA776C2BB5816DA198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:07:01:23:ae:ec:fc:aa:a9:f0:27:5a:75:
                    83:dd:37:14:51:27:97:bf:13:46:53:78:b3:30:f8:
                    a5:03:b6:31:5c:68:74:d4:c8:0b:13:15:85:14:9f:
                    2e:53:48:ea:5d:60:06:cc:2f:01:02:d6:15:ab:3f:
                    74:c4:ff:b8:52:26:76:83:a4:60:86:72:03:d8:0e:
                    da:e5:d4:cb:bd:c8:50:00:f9:66:e6:3c:c8:48:13:
                    23:85:24:a5:25:1c:99:85:c3:d8:e3:b3:a2:a6:a1:
                    43:78:ef:15:f5:bc:0a:3f:65:1b:31:eb:3a:20:06:
                    52:1b:a7:15:93:9a:66:62:41:c3:e9:2c:12:e1:a0:
                    92:0f:a2:7b:08:3d:09:c3:bd:3f:de:28:9d:0d:7e:
                    54:0f:01:c7:d7:b4:47:00:d1:5a:09:5e:1d:65:b0:
                    dc:32:20:b4:64:d2:24:97:81:4e:06:7d:9d:92:1b:
                    cc:38:06:a4:1d:06:e5:ca:c1:9f:ac:f8:de:ba:4d:
                    91:30:96:a1:71:0e:81:b7:02:65:dd:bd:97:75:8b:
                    cc:f7:5b:9d:46:eb:51:8b:37:4c:41:a4:11:dc:00:
                    82:b9:84:3e:a6:c5:f8:cc:8d:e3:ae:16:ba:4a:3b:
                    53:2f:86:27:5e:2d:c3:c6:59:81:38:13:cd:5b:3f:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:07:12:E4:24:09:F2:E2:39:12:CA:77:6C:2B:B5:81:6D:A1:98
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138362e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:3b:07:2b:36:9b:71:52:e3:6b:6c:9c:f4:a5:16:62:80:
         31:2f:83:c0:52:12:ac:2b:60:0b:99:57:5a:07:3a:a1:40:d8:
         ad:3d:44:f9:2c:db:ca:0c:0f:5e:76:3e:9f:8c:8b:36:76:ab:
         4f:b1:44:41:8b:8a:26:79:8b:c7:70:62:b9:39:5d:71:a5:af:
         9d:24:3e:16:38:b1:41:da:02:f8:7a:51:44:e8:70:9f:27:bb:
         72:e0:f9:94:fb:17:93:0e:00:4d:a8:b5:d2:68:9d:28:d2:4a:
         b2:0c:fa:42:bd:2c:5b:9a:61:a8:00:df:55:2f:18:f9:6a:4d:
         c4:81:bb:4f:43:58:cd:ee:82:32:bd:59:3c:dc:7d:c3:fd:86:
         b7:77:ad:5c:8d:22:61:83:89:a4:6a:0e:59:d8:25:f7:d4:c0:
         a2:59:45:d4:91:96:e1:0f:5f:47:ba:df:31:3e:9b:cd:7f:1d:
         79:f7:52:f7:48:e9:7e:76:e2:8c:c7:ef:fb:d4:c5:ef:b5:76:
         97:da:11:9a:05:eb:08:69:0c:31:2a:35:6c:0d:68:b4:4c:a2:
         e0:40:52:96:02:58:af:64:56:db:33:51:ea:c2:f0:93:32:4e:
         91:b4:e5:b6:cd:68:f8:30:eb:a0:ad:5a:ab:a6:a6:c3:91:04:
         3d:f4:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:34 2025 by rpki-client