Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa
File:                     3133372e35392e31342e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          0fv19luagoO93f5fwpQzyxrCgwGajNrOA8tDwWa++20=
Subject key identifier:   78:07:F3:2F:43:9C:C5:30:6E:35:3D:69:74:79:CA:05:82:56:AF:7B
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       2806EE73D04C47DA4BD4CB666C502F2F2104A834
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:47 +0000
ROA not before:           Mon 02 Jun 2025 01:58:47 +0000
ROA not after:            Mon 01 Jun 2026 02:03:47 +0000
asID:                     38500
IP address blocks:        137.59.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:06:ee:73:d0:4c:47:da:4b:d4:cb:66:6c:50:2f:2f:21:04:a8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:47 2025 GMT
            Not After : Jun  1 02:03:47 2026 GMT
        Subject: CN=7807F32F439CC5306E353D697479CA058256AF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:31:cc:61:2b:2f:95:41:df:cd:e3:ef:0c:
                    05:17:e9:a2:98:66:3e:8f:af:81:e0:37:a5:3c:92:
                    3a:26:c4:30:24:34:78:ae:5a:d9:17:11:7e:e4:7e:
                    8f:cc:af:75:6b:f8:e9:a5:13:21:8a:97:37:b5:2c:
                    b4:ea:94:13:e9:68:9d:16:87:9f:71:7a:a7:be:7a:
                    b2:f9:2a:3d:11:ab:51:2a:b9:65:5c:f9:3b:c8:0a:
                    5a:67:f5:d4:80:f6:fa:cb:e9:a8:25:92:1a:ce:d5:
                    93:47:60:2e:df:70:25:05:59:f6:1c:a3:75:9e:77:
                    4c:eb:95:70:95:14:9e:0b:12:74:1e:36:3b:b1:8c:
                    d5:32:20:d4:27:92:06:a8:62:be:01:9e:b2:17:08:
                    df:d8:9b:d0:b4:e5:70:ff:eb:b1:5a:7a:46:36:44:
                    1d:9f:5e:6a:d4:f1:02:f2:1e:e0:9b:b3:86:01:52:
                    c5:ff:d8:0a:43:28:d0:1d:09:26:d0:34:2b:4b:03:
                    23:34:c3:e4:db:4e:11:84:5b:5e:fb:c7:dc:ac:43:
                    10:f9:58:20:8b:5b:0a:24:df:8a:55:c9:46:13:7d:
                    11:b6:c2:59:89:ae:a3:f9:0a:19:07:3c:91:cf:43:
                    a3:43:f1:91:f3:95:d0:c5:13:de:13:3f:67:fc:21:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:07:F3:2F:43:9C:C5:30:6E:35:3D:69:74:79:CA:05:82:56:AF:7B
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:de:a0:03:fd:be:2b:af:34:75:3b:18:87:a8:24:27:99:
         da:8f:19:91:94:28:f6:0c:37:8a:fb:2f:5b:b3:92:c2:1e:db:
         04:44:88:a1:2d:7f:a6:d1:47:a7:ec:85:9b:ec:5d:4e:ae:17:
         bf:18:f1:a5:5d:d9:4f:68:86:47:af:eb:45:97:c8:fd:d8:bf:
         10:d9:79:de:68:2d:79:f8:ca:9d:d1:ad:fc:35:2f:34:1b:00:
         3d:34:a2:26:c1:de:54:5e:5d:a3:b0:57:e4:97:f4:8f:99:2b:
         07:c1:dc:7b:dd:e6:90:49:a1:6d:1d:28:9b:64:27:a0:77:36:
         cb:56:9b:0d:96:43:28:93:01:47:07:af:51:29:89:2a:4e:49:
         0f:0c:13:82:28:08:9f:05:ac:26:03:39:59:a3:48:6c:8a:5e:
         b4:d0:d1:b2:ad:1a:1d:a2:2f:bb:0e:5b:f9:39:fa:b6:35:64:
         26:7c:bb:c2:15:87:51:f8:06:e6:ab:7f:50:0d:25:95:48:17:
         89:0b:20:8a:1a:1f:57:e7:69:9c:a1:68:60:5e:c1:be:9b:55:
         f9:f2:04:0b:ad:5c:3d:12:c1:ba:db:90:09:9d:b1:25:44:89:
         7d:dd:f4:3c:ac:73:67:09:f2:7c:85:28:06:44:46:58:1f:28:
         9b:5d:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:17:29 2025 by rpki-client