Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          EUPU3gxfHVLQuUfRQPs2Hw5Mzj8w6cqfENl3gLIY52A=
Subject key identifier:   AA:82:75:89:19:18:C0:68:C5:47:DF:95:39:C9:A8:D8:66:DC:37:B8
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       0C4160EB989172E96B77E1F3C7CCE723A8346363
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 01 Jul 2024 01:02:22 +0000
ROA not before:           Mon 01 Jul 2024 00:57:22 +0000
ROA not after:            Mon 30 Jun 2025 01:02:22 +0000
asID:                     46019
IP address blocks:        175.45.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:41:60:eb:98:91:72:e9:6b:77:e1:f3:c7:cc:e7:23:a8:34:63:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jul  1 00:57:22 2024 GMT
            Not After : Jun 30 01:02:22 2025 GMT
        Subject: CN=AA8275891918C068C547DF9539C9A8D866DC37B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:d3:2c:c6:f3:29:eb:26:0c:78:f3:55:b9:
                    06:47:90:73:90:31:f8:4c:29:56:1b:b6:45:22:d6:
                    2f:ca:9a:16:1d:e8:02:43:96:02:6b:bd:1d:4c:b5:
                    be:82:cb:cf:42:5d:51:59:d3:8b:b7:4b:9d:09:00:
                    b8:c2:22:27:66:99:99:cc:0f:d1:5f:45:38:3e:e2:
                    75:91:13:e1:29:c4:2e:f8:43:59:98:3d:7a:39:0d:
                    55:ec:0b:a8:ce:66:2b:78:97:1c:78:3a:d2:4b:54:
                    8d:b6:9b:d7:73:18:52:09:10:17:59:c9:ee:1a:5d:
                    15:60:6a:a7:76:0d:78:01:09:d1:9f:62:d1:60:8c:
                    b1:62:62:eb:da:90:f9:91:07:c0:40:b7:9d:26:8d:
                    3b:22:6b:da:b5:f4:11:5c:3d:0c:83:c5:29:62:c6:
                    77:39:e6:07:74:c4:93:6c:d5:45:ca:3b:df:eb:4d:
                    84:17:51:3d:56:50:79:c1:e7:87:22:8c:22:ce:d3:
                    3e:b2:8b:63:a1:d3:04:4c:51:80:11:cf:46:fa:a5:
                    31:10:d2:d3:ac:e9:b8:eb:e0:2c:8a:94:6b:bc:b4:
                    8e:14:c8:bf:37:e0:00:e6:00:60:d9:0c:fa:a6:92:
                    55:fe:54:da:14:18:57:de:a8:25:63:3e:62:b5:63:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:75:89:19:18:C0:68:C5:47:DF:95:39:C9:A8:D8:66:DC:37:B8
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138372e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:da:08:ac:e7:85:6e:10:b9:9c:e0:fb:82:c7:62:4d:2b:
         cf:e3:46:76:b3:40:7f:68:ba:d8:6c:30:ab:d2:78:0f:ff:e0:
         aa:32:1c:fd:d0:41:89:34:09:17:d8:8c:28:59:04:99:ab:a2:
         77:9b:46:aa:a3:65:a4:d1:27:99:01:77:6e:b9:f0:4d:d9:9d:
         3c:d7:f3:d0:f8:97:ed:f0:80:78:07:77:30:c2:e1:bb:a4:61:
         ea:88:a8:95:1c:a3:66:69:db:cc:a8:e5:38:80:47:be:a9:13:
         c6:2b:fd:d1:a9:88:e1:dc:d9:83:59:61:8e:c1:dc:87:8b:65:
         78:f5:7b:3b:b4:b7:f1:34:ac:a1:eb:0a:0d:58:36:68:b0:a2:
         62:ff:e7:88:2f:7e:d5:58:29:58:08:14:77:fe:2a:39:3c:dc:
         c9:f9:d4:2d:11:bf:52:38:ed:a0:c7:32:15:32:e9:98:df:89:
         09:56:e7:7b:4b:3e:5f:f8:36:21:b3:2f:ba:58:a6:bf:c5:d1:
         df:ef:b4:23:a4:54:73:dd:45:f7:48:36:07:42:53:11:66:ec:
         cb:bc:fd:6f:cd:43:94:07:75:16:ee:c7:ee:0b:3c:34:7d:56:
         d0:28:dd:5e:a2:8e:84:3f:36:62:e7:8c:c6:80:d1:00:b4:5b:
         3b:3c:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org