Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          ykON6mQM/7NNeWhPZuZWYf9qqZrrkiNbbI4RctctYjA=
Subject key identifier:   2F:90:5A:1A:32:58:33:B2:97:3F:64:32:92:2F:46:D1:DA:A0:41:4C
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       66FB3FA597F9E0796C2B40E21F9070376928E0B7
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 01 Jul 2024 01:02:23 +0000
ROA not before:           Mon 01 Jul 2024 00:57:23 +0000
ROA not after:            Mon 30 Jun 2025 01:02:23 +0000
asID:                     46019
IP address blocks:        175.45.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Mar 2025 04:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:3f:a5:97:f9:e0:79:6c:2b:40:e2:1f:90:70:37:69:28:e0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jul  1 00:57:23 2024 GMT
            Not After : Jun 30 01:02:23 2025 GMT
        Subject: CN=2F905A1A325833B2973F6432922F46D1DAA0414C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:94:55:0b:1b:38:e4:07:9d:c6:1c:ed:af:
                    c2:46:23:3f:47:ad:38:5a:04:01:8f:53:76:d2:ef:
                    0d:8b:3b:30:35:57:8f:9e:a9:f7:9d:77:95:df:a0:
                    9b:81:17:7b:e6:ea:f5:44:b6:8f:3f:53:1c:68:59:
                    48:6d:60:27:02:80:fa:41:44:f0:6c:cd:26:8a:58:
                    52:5d:6c:00:6a:00:df:0b:5f:c8:99:51:3b:8b:ae:
                    37:04:b4:b0:4e:2b:12:53:f1:62:ae:22:e1:c7:1a:
                    2f:1f:69:b3:fe:8b:19:05:66:85:47:d5:a3:39:9b:
                    ee:27:48:6f:73:d0:ff:52:4e:a2:28:ed:ca:39:c1:
                    ed:8c:dd:d4:18:6d:df:6f:e3:d4:21:74:0a:c0:57:
                    b2:9d:6e:2c:9c:48:0c:22:24:cb:6d:1b:d5:66:b1:
                    0c:12:c1:45:49:0c:f1:2e:db:e3:d5:dd:1d:0d:d6:
                    58:71:8d:d0:de:8b:f3:79:90:35:ca:d2:a3:82:1f:
                    bb:7d:cd:c6:01:e1:8f:bf:26:18:0c:4f:11:86:7e:
                    63:ad:6b:18:35:c1:5a:17:0c:7b:50:d8:dc:52:aa:
                    36:df:af:b6:0d:3b:99:cd:2e:4e:e7:22:e9:2f:2d:
                    63:3a:65:a9:71:81:eb:06:c9:8d:62:f8:7b:d0:1c:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:5A:1A:32:58:33:B2:97:3F:64:32:92:2F:46:D1:DA:A0:41:4C
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139312e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:b2:a7:44:52:9b:86:29:9e:38:2b:64:9a:7f:b0:b8:bc:
         77:46:56:e1:74:fb:47:47:4f:22:4e:06:31:2a:d1:5b:7d:62:
         46:7d:ec:23:a8:35:b7:6f:68:bc:2c:f2:8a:43:bf:2b:b4:1b:
         a2:69:2a:f2:80:e1:41:d3:47:bc:dc:c3:88:03:2f:31:7e:f8:
         80:dd:46:07:5c:4b:de:33:ff:32:ba:ae:db:2a:32:27:74:60:
         11:d0:1a:3f:75:79:e3:70:de:19:76:26:eb:98:81:9e:60:33:
         d5:93:8c:db:88:b0:76:e3:53:75:60:32:08:30:66:c7:dc:dd:
         ee:46:53:36:a4:aa:7f:37:b1:03:38:3b:65:e7:c8:75:a4:6a:
         06:81:ac:d9:f0:65:20:6b:59:8f:74:9f:02:c8:d0:84:0c:0a:
         58:84:7e:c5:c3:42:cf:0a:70:d4:2d:3c:6e:f3:c0:d5:24:7e:
         10:80:93:aa:c3:bb:c1:8f:43:cf:41:d6:94:f5:b4:54:d5:2b:
         54:77:49:dd:df:c7:40:fe:b7:e4:79:c7:8d:8f:d8:6c:12:51:
         04:3b:d9:91:58:a4:99:6c:89:4e:a5:e4:24:8d:aa:6d:23:b0:
         e9:0a:47:e2:bb:6c:1b:7d:29:27:dd:3a:6f:a1:c1:70:72:e4:
         cd:b5:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:19 2025 by rpki-client