Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
File:                     3138322e32332e302e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          Up820ykPGdTsMCBfkLJCpjLiOYu4N/1q62YxEmgxKyA=
Subject key identifier:   A1:C8:82:DA:37:ED:F1:73:B6:D6:9A:B6:7B:FF:66:93:EA:3D:B8:11
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       39B59B9BAEDAA3683A3EA30BF41ED5CDFB1E5C68
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:34 +0000
ROA not before:           Sun 30 Jul 2023 23:59:34 +0000
ROA not after:            Mon 29 Jul 2024 00:04:34 +0000
asID:                     4800
IP address blocks:        182.23.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:9b:9b:ae:da:a3:68:3a:3e:a3:0b:f4:1e:d5:cd:fb:1e:5c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:34 2023 GMT
            Not After : Jul 29 00:04:34 2024 GMT
        Subject: CN=A1C882DA37EDF173B6D69AB67BFF6693EA3DB811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:0f:93:f8:88:24:f0:bd:c5:f9:b8:db:5b:
                    b4:74:6a:2d:c6:7f:1b:cf:a1:0c:16:bb:f0:2f:74:
                    7b:a4:df:2f:62:72:34:ed:ad:70:a1:b0:ea:75:79:
                    50:3c:4f:85:53:5c:38:aa:49:64:40:f5:e5:e9:b9:
                    b3:da:43:44:19:29:19:e6:b8:bd:10:3c:f4:d4:e9:
                    d4:3d:b6:d0:64:22:86:c3:26:0d:da:98:67:d7:0c:
                    e2:9e:a7:c7:c3:48:04:b4:1f:93:47:41:b5:8f:75:
                    92:ce:eb:69:d6:2e:51:aa:a1:26:24:ad:a0:bd:61:
                    79:de:5d:e8:ea:cc:84:1d:54:e8:9a:6f:ae:f8:ea:
                    df:da:a5:dd:0a:92:f6:7d:9b:68:eb:05:75:91:ec:
                    05:6b:7f:56:05:54:d7:bf:97:3d:3d:c0:5e:7b:b7:
                    1c:84:6a:d7:2e:84:d9:1a:73:4e:7e:cb:6b:1a:cf:
                    ee:42:2e:1a:f5:d4:92:51:e8:64:25:bc:1d:af:9e:
                    f9:83:4c:df:9d:3a:41:14:dd:f0:3a:17:28:7b:09:
                    cc:ed:2b:9f:30:86:21:01:e8:e1:6e:e7:b4:d5:af:
                    66:71:0f:8a:99:ca:a9:f8:17:d7:6a:44:96:65:91:
                    29:80:5a:71:fe:31:35:1b:e1:31:07:b0:2f:52:97:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:82:DA:37:ED:F1:73:B6:D6:9A:B6:7B:FF:66:93:EA:3D:B8:11
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:a9:1a:af:f6:01:bc:81:26:34:15:2a:df:05:63:07:60:
         fe:ed:06:f8:14:fd:ae:ee:5c:29:8a:db:f5:39:ef:9e:de:f6:
         38:0d:c7:f5:2a:c2:51:ab:fa:dc:58:06:cc:cf:dd:5c:22:95:
         dd:70:cd:6d:24:77:98:10:cd:2a:ab:2a:35:7e:17:9d:53:69:
         ab:c2:15:60:09:93:c7:1b:fc:90:2e:a1:25:8d:ff:f6:60:33:
         cf:da:9e:13:f3:50:fb:65:a9:12:66:2b:74:7c:6e:48:f6:06:
         f3:62:e2:af:03:35:c1:71:49:51:b5:4f:89:f7:14:3b:e8:3a:
         f7:54:09:d0:67:33:10:c1:8a:0f:71:5c:06:4b:70:53:58:ac:
         9b:df:a0:31:1e:85:70:5e:0f:ea:5b:10:fa:5d:6e:5a:63:89:
         eb:37:e4:a1:2d:cf:9a:d5:1d:ba:b5:0c:6b:fc:7c:a0:27:13:
         ce:5e:c4:5c:d9:c1:e4:74:44:c4:98:a8:ca:07:92:d2:11:03:
         e6:7d:9b:56:e1:df:36:39:b7:ff:f2:0b:63:e1:98:3e:fe:51:
         73:4e:24:f4:01:a3:85:9f:d8:52:dd:09:45:2f:96:b6:7a:66:
         c8:69:ea:09:5d:3f:ec:ad:83:6f:94:17:c9:2d:dc:17:e2:e1:
         3e:d5:4d:84
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUObWbm67ao2g6PqML9B7VzfseXGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzRaFw0yNDA3MjkwMDA0MzRaMDMxMTAvBgNV
BAMTKEExQzg4MkRBMzdFREYxNzNCNkQ2OUFCNjdCRkY2NjkzRUEzREI4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXA+T+Igk8L3F+bjbW7R0ai3G
fxvPoQwWu/AvdHuk3y9icjTtrXChsOp1eVA8T4VTXDiqSWRA9eXpubPaQ0QZKRnm
uL0QPPTU6dQ9ttBkIobDJg3amGfXDOKep8fDSAS0H5NHQbWPdZLO62nWLlGqoSYk
raC9YXneXejqzIQdVOiab6746t/apd0KkvZ9m2jrBXWR7AVrf1YFVNe/lz09wF57
txyEatcuhNkac05+y2saz+5CLhr11JJR6GQlvB2vnvmDTN+dOkEU3fA6Fyh7Cczt
K58whiEB6OFu57TVr2ZxD4qZyqn4F9dqRJZlkSmAWnH+MTUb4TEHsC9Sl1SFAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUociC2jft8XO21pq2e/9mk+o9uBEwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjZTM2ZGUtZjkyMS00Mjc0LTg0
OTctMjk4N2Q5MDk1NDNlLzAvMzEzODMyMmUzMjMzMmUzMDJlMzAyZjMxMzcyZDMy
MzQyMDNkM2UyMDM0MzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHthcAMA0GCSqGSIb3DQEBCwUA
A4IBAQA2Tqkar/YBvIEmNBUq3wVjB2D+7Qb4FP2u7lwpitv1Oe+e3vY4Dcf1KsJR
q/rcWAbMz91cIpXdcM1tJHeYEM0qqyo1fhedU2mrwhVgCZPHG/yQLqEljf/2YDPP
2p4T81D7ZakSZit0fG5I9gbzYuKvAzXBcUlRtU+J9xQ76Dr3VAnQZzMQwYoPcVwG
S3BTWKyb36AxHoVwXg/qWxD6XW5aY4nrN+ShLc+a1R26tQxr/HygJxPOXsRc2cHk
dETEmKjKB5LSEQPmfZtW4d82Obf/8gtj4Zg+/lFzTiT0AaOFn9hS3QlFL5a2embI
aeoJXT/srYNvlBfJLdwX4uE+1U2E
-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org