Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          JEDVGjWCNlyZky1kCfxZHNHeqn82swpdHlq9u9cjPE8=
Subject key identifier:   C6:C0:44:E1:18:F8:EE:70:CF:C9:F3:7E:4A:E7:76:42:32:4C:7E:66
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       2EF54BA3351A03CEBC14E27715EC08F884101BDA
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 02 Jun 2025 01:02:31 +0000
ROA not before:           Mon 02 Jun 2025 00:57:31 +0000
ROA not after:            Mon 01 Jun 2026 01:02:31 +0000
asID:                     46019
IP address blocks:        175.45.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f5:4b:a3:35:1a:03:ce:bc:14:e2:77:15:ec:08:f8:84:10:1b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  2 00:57:31 2025 GMT
            Not After : Jun  1 01:02:31 2026 GMT
        Subject: CN=C6C044E118F8EE70CFC9F37E4AE77642324C7E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:60:42:e8:86:eb:a1:31:32:97:fa:eb:4b:
                    11:70:b2:1b:23:3c:82:ae:5d:b0:ce:5e:6a:b4:be:
                    ba:22:36:7b:3d:8c:1e:25:45:a0:9b:11:67:7f:1b:
                    bf:6b:0a:e4:82:c2:28:a7:e2:eb:f1:4c:01:c4:87:
                    5c:e5:c2:61:06:cb:ba:af:8c:62:63:cb:a6:66:93:
                    18:8f:fa:4c:89:42:07:fa:64:57:13:2e:af:bc:b6:
                    ad:18:6b:64:3a:78:cb:d8:da:53:33:52:dc:7f:dc:
                    c8:fa:b2:04:75:25:a6:88:9a:d5:5a:14:e6:db:21:
                    81:d2:d3:b9:88:f0:b8:79:99:d7:02:1b:a0:3f:fa:
                    da:2b:ca:1f:2c:7a:44:f6:72:2b:5c:71:f5:4b:07:
                    c5:f9:79:3a:90:0d:86:eb:ca:6c:b4:8f:7a:5b:f0:
                    d0:6e:a1:06:fb:20:f5:8a:c6:17:1d:bf:b1:4d:81:
                    33:74:61:ba:8a:bb:47:cc:3e:43:21:b9:e4:68:b9:
                    9d:fb:21:ab:d3:a3:06:a9:fe:6b:b3:93:38:9d:c6:
                    3a:a3:4f:e3:10:77:51:eb:1e:04:69:19:c9:53:1f:
                    ca:e5:0d:7b:80:51:3e:71:dd:84:af:51:ff:cb:9f:
                    73:95:a1:0b:9f:be:c5:8d:0f:d5:78:68:01:7a:e3:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:44:E1:18:F8:EE:70:CF:C9:F3:7E:4A:E7:76:42:32:4C:7E:66
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:d4:61:59:4f:a9:a1:41:35:7b:3a:67:d3:9e:a2:b5:63:
         df:73:c0:06:a4:98:5b:64:88:97:bc:db:8a:bf:a2:d5:1f:43:
         82:da:3e:ff:2e:0e:03:2f:54:b2:33:05:21:dd:74:97:be:f3:
         e5:2b:a4:d9:97:f9:dc:cc:64:3c:14:e2:c0:a4:4d:9e:80:07:
         fd:84:48:62:af:af:6d:dd:12:b3:e2:06:2d:17:45:f4:3b:8b:
         9d:21:f7:a0:58:1e:ec:81:c9:31:a4:09:fc:0b:71:4b:6a:07:
         57:c8:05:f6:82:a8:42:16:e9:0a:2c:2f:dc:c6:83:93:3e:36:
         d5:ad:0f:cf:fe:dc:fc:0e:c6:4b:0e:df:f4:e3:a8:9c:5d:1a:
         a8:49:64:3a:bc:e3:0f:e5:74:ed:f7:8d:18:67:11:29:13:b8:
         64:99:e5:d3:6f:42:2f:35:c2:d3:f5:3f:d9:29:c3:fb:7c:3d:
         1d:5e:a5:c2:82:51:0a:28:b7:fa:d2:93:58:b4:f1:e0:3c:20:
         88:75:1d:20:f7:a9:85:2f:14:d2:da:07:e7:27:63:50:1a:61:
         97:94:dc:75:f0:5a:d8:b9:20:56:de:e3:ab:d4:30:e5:ae:a7:
         b6:fc:e3:24:9a:3c:29:ae:cf:33:8c:2c:e3:53:49:82:bd:8e:
         00:58:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:51:32 2025 by rpki-client