Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          t7w75yjsYibdXaLt3vYd+nK8iJahfzez7vWvTqDQHwA=
Subject key identifier:   BC:17:62:57:BC:64:6E:47:4C:D9:13:9E:E1:CE:97:22:F7:07:74:2B
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       48F11992CB4352F0EB071DA61653650CB2CEACAA
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 02 Jun 2025 01:02:31 +0000
ROA not before:           Mon 02 Jun 2025 00:57:31 +0000
ROA not after:            Mon 01 Jun 2026 01:02:31 +0000
asID:                     46019
IP address blocks:        175.45.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f1:19:92:cb:43:52:f0:eb:07:1d:a6:16:53:65:0c:b2:ce:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  2 00:57:31 2025 GMT
            Not After : Jun  1 01:02:31 2026 GMT
        Subject: CN=BC176257BC646E474CD9139EE1CE9722F707742B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:0c:76:90:f2:43:dd:a4:43:13:90:82:43:
                    e2:9b:f5:1c:91:87:f0:8e:bb:ec:fd:ca:ef:c2:da:
                    07:a3:44:ca:44:c2:53:a8:6b:ae:d5:54:46:5f:99:
                    0b:0a:71:a5:66:56:9e:db:a2:86:3e:56:5f:db:af:
                    3d:74:9c:71:5b:61:d9:4b:1e:dc:b4:48:05:f2:82:
                    c4:41:b8:41:41:37:23:2a:5f:98:50:90:2e:31:02:
                    13:23:20:0b:a3:58:66:e4:62:ee:0a:0d:49:dc:61:
                    01:6b:62:e7:53:95:9d:0f:5d:cc:6b:13:9c:88:52:
                    9e:76:3f:a8:b5:e1:65:3c:06:02:78:05:e9:17:4b:
                    22:e0:18:29:ae:bb:5c:d5:6d:bb:4d:20:ee:ca:b8:
                    79:a8:47:56:5e:81:07:96:f0:5f:8e:dd:a5:87:d5:
                    38:0f:bf:c1:b9:10:85:e4:36:73:01:f2:b3:6a:31:
                    9f:74:12:55:6d:80:b6:83:9c:77:98:22:2b:ce:1c:
                    00:e3:ef:3f:ff:48:fd:b0:08:cb:17:27:4f:02:32:
                    db:ba:92:ab:b9:8f:78:1c:c4:a9:40:b7:a2:68:58:
                    09:cb:75:ea:e5:9c:65:a5:cf:f2:1f:9b:cd:11:6e:
                    d3:07:8d:3a:44:b8:d2:bf:cb:45:57:12:7c:aa:0a:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:17:62:57:BC:64:6E:47:4C:D9:13:9E:E1:CE:97:22:F7:07:74:2B
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:b3:7e:7d:91:23:ac:3e:7b:21:de:50:78:25:d1:1a:c4:
         4a:7a:28:25:c5:cd:03:a1:1a:db:90:f1:39:83:aa:76:89:70:
         9d:d3:30:e2:98:96:9d:79:2b:19:d2:e5:0d:d3:02:b1:0e:07:
         1d:df:39:16:22:d2:84:4a:cf:17:47:ea:96:ac:88:53:ff:30:
         0b:cf:33:5e:a6:91:d2:1f:69:fe:2b:8b:0f:86:01:7a:00:d6:
         b0:56:f0:79:79:ba:85:9e:5a:5d:33:a1:01:61:a5:d7:ab:4f:
         ee:ea:3c:a1:8b:50:f6:de:02:e3:55:35:2d:e4:52:4f:c0:95:
         8e:5c:0a:ef:ad:20:d1:1e:a7:7b:42:c7:28:d2:16:a8:7e:76:
         78:40:aa:cc:5f:43:11:d3:1d:00:74:75:1d:81:45:56:91:1f:
         c8:d4:88:7b:32:01:ef:2e:b0:58:fe:32:42:4d:ef:77:1d:75:
         6d:7e:c4:22:63:b3:b5:b5:41:6c:53:37:d2:f4:97:24:22:db:
         56:54:35:40:eb:20:a7:64:f0:8e:7f:49:f2:f9:78:e5:e9:cb:
         e4:5a:86:97:88:f8:00:73:0d:bc:7d:a3:26:bd:5b:20:e9:3a:
         98:54:e4:ac:44:ff:da:7c:16:11:2c:c1:f7:8a:0a:44:84:c4:
         88:54:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:21 2025 by rpki-client