Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          aVpC1UpUq5xM3EjtXbH8DkIG+zAdeuUyTigDv05h9yc=
Subject key identifier:   43:DB:81:7B:4E:73:78:0D:3C:29:29:4C:AD:DF:BC:B3:B6:B6:BD:9D
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       65D92F6F7D19A79509889702BF9E938383802F31
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 02 Jun 2025 01:02:31 +0000
ROA not before:           Mon 02 Jun 2025 00:57:31 +0000
ROA not after:            Mon 01 Jun 2026 01:02:31 +0000
asID:                     46019
IP address blocks:        175.45.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d9:2f:6f:7d:19:a7:95:09:88:97:02:bf:9e:93:83:83:80:2f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  2 00:57:31 2025 GMT
            Not After : Jun  1 01:02:31 2026 GMT
        Subject: CN=43DB817B4E73780D3C29294CADDFBCB3B6B6BD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:32:4b:85:e8:82:89:2c:74:cc:ed:68:ed:
                    f8:cf:c3:9d:f1:99:8b:f9:bf:8b:b9:e8:23:54:ec:
                    aa:66:48:5c:2a:7b:2e:46:11:06:7a:aa:7e:3b:85:
                    3e:25:fe:b8:af:2c:16:d8:2c:dd:21:c8:a4:f3:71:
                    d7:3c:fa:e7:03:33:3b:37:74:6f:03:da:f1:6e:ec:
                    70:2e:5d:47:5b:b3:d1:17:bd:17:59:00:a6:43:46:
                    9e:c9:95:a7:50:f4:15:32:e5:43:0b:95:c5:2c:91:
                    d6:ec:0e:d2:e8:2c:a6:68:3e:36:44:8d:fb:c6:f2:
                    43:79:3e:0d:31:6f:d6:e4:2c:c9:b7:2d:dd:73:a8:
                    d6:25:b4:d2:4e:9c:0b:bb:5f:3a:dd:55:36:6c:6e:
                    79:19:af:d8:35:b1:ec:3c:89:de:a1:98:14:96:b8:
                    a5:2c:42:0a:1d:57:7a:30:23:b5:3a:b0:e9:33:f1:
                    92:aa:00:a2:7c:44:c4:49:24:a6:f6:30:4b:e5:a6:
                    79:0f:21:d5:ae:21:7e:20:1d:d4:eb:3e:ea:ed:fb:
                    8d:6f:57:3f:88:fe:fb:2e:aa:11:ae:8e:84:d3:1d:
                    36:be:5b:42:db:76:02:e3:f0:e3:1a:ed:dd:b0:e4:
                    e1:3e:b2:d5:cd:e1:9a:d6:32:9d:dd:03:29:12:10:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DB:81:7B:4E:73:78:0D:3C:29:29:4C:AD:DF:BC:B3:B6:B6:BD:9D
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138392e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:39:61:c5:a3:8d:ac:a1:6f:ae:0b:c8:86:0a:5d:78:36:
         88:bb:91:bb:ab:f3:81:0c:7e:ce:73:f8:5a:93:ea:89:ef:b0:
         88:4b:3b:46:c1:29:d4:48:1b:23:e2:52:07:66:c4:f3:6f:51:
         08:b8:fb:cf:7e:6f:a9:b4:4a:8d:72:30:5f:a7:c5:81:6b:6f:
         e0:8f:42:42:fa:c5:67:25:e9:3f:0f:b1:80:07:0a:4b:c2:d4:
         44:d3:f5:63:30:8d:30:a2:25:47:bd:a6:cb:71:3f:3a:5d:71:
         01:24:6a:15:ee:38:7c:8b:55:87:f1:6e:81:ba:bf:ee:bc:2f:
         08:43:f4:88:44:e5:1c:0d:b2:2d:ed:0c:7f:43:e5:46:47:98:
         3a:8c:ed:ec:26:47:55:2e:b1:b7:a9:8c:b6:d3:34:1f:bf:c8:
         b5:b9:77:b5:83:50:a6:1c:52:43:e0:4d:f1:c3:c8:03:42:0e:
         d5:fe:f3:c2:c4:13:a4:fe:7d:98:12:c0:7e:08:2b:67:a5:aa:
         b7:2c:b1:06:ab:ce:59:a7:e6:64:ca:7a:53:cf:a4:1e:26:ca:
         18:5e:11:16:2c:c7:8f:db:5f:f5:af:a7:a5:96:24:c8:02:90:
         98:11:7e:90:69:5c:23:c0:f9:79:4d:f5:33:eb:2f:e9:d5:61:
         2b:5d:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:52:14 2025 by rpki-client