Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          puA8mGw1TnOQCrFl0iIg04HJ41wfz+xZ95LuowhMI30=
Subject key identifier:   60:1A:DC:56:4F:A2:AB:98:55:94:54:BE:71:E7:1F:15:34:87:31:51
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       4B7C4463A97ACADAC10CBFF2097630456341F208
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 02 Jun 2025 01:02:31 +0000
ROA not before:           Mon 02 Jun 2025 00:57:31 +0000
ROA not after:            Mon 01 Jun 2026 01:02:31 +0000
asID:                     46019
IP address blocks:        175.45.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 00:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7c:44:63:a9:7a:ca:da:c1:0c:bf:f2:09:76:30:45:63:41:f2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jun  2 00:57:31 2025 GMT
            Not After : Jun  1 01:02:31 2026 GMT
        Subject: CN=601ADC564FA2AB98559454BE71E71F1534873151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:89:6f:72:71:d5:39:ad:2d:56:82:67:81:
                    5d:21:95:5a:03:13:1b:a3:b4:16:5e:03:f6:2e:75:
                    16:2d:14:bb:38:33:1a:79:0d:82:54:81:ec:e1:d2:
                    a0:14:78:2e:3f:d0:d6:a9:26:77:7e:fe:9b:78:14:
                    38:ed:cb:a1:54:61:8d:84:ff:52:e3:5d:41:80:ab:
                    13:54:bf:21:39:c6:9f:29:8d:5c:32:c6:64:2f:f0:
                    66:8c:84:3c:2a:68:6b:2a:07:c8:b3:ae:06:87:5e:
                    15:41:34:05:89:b5:46:bc:53:cc:cc:53:d7:b9:89:
                    8d:3c:ee:00:4f:1b:17:29:ee:46:60:a0:5f:49:e6:
                    e6:5a:d1:2e:02:e4:dd:e5:82:aa:64:91:47:7d:e0:
                    b8:d3:be:77:42:ae:ce:5d:4c:cd:48:7c:ed:23:71:
                    cf:74:cc:0b:7e:4d:fe:9e:23:98:ab:64:66:1d:ab:
                    13:1f:e3:97:a8:b7:45:fb:a6:c0:b9:59:77:13:f0:
                    73:9b:65:f5:67:4a:44:0c:d8:99:e7:a8:c5:23:3d:
                    29:d0:34:18:bb:f0:a1:55:b4:28:a6:0d:24:b1:2d:
                    92:32:58:63:2f:3c:5f:3e:60:f2:27:31:e1:45:72:
                    26:88:c4:26:8d:4b:1e:55:98:35:bb:8d:7a:71:ea:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1A:DC:56:4F:A2:AB:98:55:94:54:BE:71:E7:1F:15:34:87:31:51
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:70:be:95:75:b4:4b:69:e5:3c:da:eb:71:d3:8a:72:f6:b0:
         99:31:4d:4f:72:a1:d1:02:07:10:30:24:af:43:59:29:57:aa:
         9d:f7:bb:73:39:ce:36:29:27:34:49:07:f4:54:14:ab:b6:e8:
         8c:f4:0d:d1:e9:a1:3f:8a:be:45:d5:8b:e8:3d:01:19:e8:0f:
         a8:09:fa:7e:8f:3e:19:8c:22:a9:13:76:0d:c5:b5:19:e2:76:
         8b:35:fd:1a:4b:34:a7:54:a9:33:b5:8e:52:1d:b9:09:b9:3c:
         a8:cb:0d:d1:91:af:65:c5:81:27:ca:f1:55:60:cd:ab:cf:fe:
         6c:fe:5d:fe:51:bb:1c:95:f1:ea:f1:f8:8c:a8:c8:dd:ca:e8:
         ac:f7:a9:87:0f:cb:09:fe:22:80:de:a2:7d:cd:88:94:2d:79:
         fe:de:c4:97:4d:af:6d:12:d5:21:c6:6d:32:5c:60:c9:f4:8c:
         fe:a4:28:98:82:ba:f5:3f:1d:c4:f4:27:8b:b9:04:4e:76:0d:
         9d:17:f0:9e:1b:26:90:a8:08:00:72:6b:d8:03:d3:56:c7:1a:
         7e:76:a7:f9:fc:8c:ea:42:ea:8b:97:3f:3b:26:a0:ef:ba:03:
         aa:8b:9f:f9:1b:76:97:6f:4a:1e:e0:b3:33:61:38:0f:15:27:
         2a:79:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:35:46 2025 by rpki-client