Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36342e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          GjTwEXWge1vvPvYf7FaMBcxs28k/KcLqEU4Sl18fzww=
Subject key identifier:   3E:BD:B5:43:04:66:60:78:3D:B8:00:17:13:6E:05:EF:4D:F6:AB:EA
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       6FD0D072E12040DAE30A50DEDE9CE93DC935439E
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:30 +0000
ROA not before:           Sun 30 Jul 2023 23:59:30 +0000
ROA not after:            Mon 29 Jul 2024 00:04:30 +0000
asID:                     38513
IP address blocks:        182.23.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d0:d0:72:e1:20:40:da:e3:0a:50:de:de:9c:e9:3d:c9:35:43:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:30 2023 GMT
            Not After : Jul 29 00:04:30 2024 GMT
        Subject: CN=3EBDB543046660783DB80017136E05EF4DF6ABEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:fc:71:5b:15:fc:73:b1:5d:19:ec:72:1f:
                    5f:54:84:d9:fb:c7:f9:21:72:21:af:29:7f:db:9e:
                    b9:c5:dd:ac:3a:ab:69:f6:27:6d:3b:bf:3f:32:3f:
                    3d:f4:27:25:15:b9:2d:28:e9:33:ca:73:e7:d3:8c:
                    67:6c:02:13:29:23:57:f1:c8:1c:79:6f:e5:21:43:
                    4f:a5:fe:b6:f0:16:60:2a:39:46:3a:85:98:b2:14:
                    ef:4d:e2:7a:c0:5c:34:14:28:04:f8:aa:05:bb:e5:
                    6f:66:c3:d9:ad:e7:a3:c8:83:d8:6d:0c:66:38:c0:
                    07:78:ed:9c:39:8f:d5:c6:f3:45:6e:f0:81:11:8a:
                    b6:a0:41:ed:e3:b5:41:96:12:52:3a:a5:7d:85:bc:
                    19:cf:fd:48:a0:19:12:48:5f:a1:60:93:79:7c:e8:
                    2f:b9:75:f0:a3:11:b1:cb:90:1d:97:95:88:3b:b4:
                    80:b9:49:81:1b:43:95:db:75:d8:c9:af:75:9f:56:
                    e0:66:85:bf:5f:5f:7c:87:56:92:10:ac:d6:ca:b9:
                    d7:7d:0d:1e:36:f2:12:ce:5b:18:e3:05:9f:36:63:
                    b5:58:10:9a:db:be:74:ae:25:06:ea:58:da:c0:a5:
                    bd:ab:2a:c1:f8:01:ca:8d:69:64:fa:31:1c:3b:88:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:B5:43:04:66:60:78:3D:B8:00:17:13:6E:05:EF:4D:F6:AB:EA
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:45:ec:d1:b9:3d:89:5a:37:cb:8e:a3:cf:ef:3f:6b:e1:c4:
         45:ce:fa:79:f0:6b:ad:b4:4b:4c:f2:88:c1:91:bb:eb:ec:5c:
         7b:82:d0:98:9d:d6:34:b5:bd:79:a9:0a:0c:99:37:0b:4d:5e:
         e6:0c:3c:f9:d6:61:bf:12:61:c9:84:58:6c:38:6e:eb:b7:96:
         96:5e:ca:05:a2:f0:72:36:d8:e2:80:21:52:29:80:7e:65:97:
         3f:26:ff:8b:ae:e0:51:36:bf:ae:c0:c1:de:ac:00:84:5c:42:
         84:04:fe:df:1b:48:71:1f:c0:97:f2:f0:0a:f3:da:2e:9a:7c:
         43:47:8a:31:8c:cc:b7:71:92:d2:45:07:8c:c1:ea:a8:81:06:
         00:0c:74:4b:82:28:73:d9:ce:8a:c7:e9:a2:fa:90:0b:cf:c9:
         23:5f:4d:4b:69:fb:79:64:ea:79:7b:87:6f:8a:14:2a:ce:8f:
         28:54:2d:f2:9a:6f:17:a0:3f:f0:69:89:bf:6c:a8:35:a8:36:
         24:dc:db:df:d6:ce:d4:e0:06:57:1b:85:f4:b0:f0:db:3d:57:
         9c:56:c4:fe:6f:ff:a2:62:c2:da:38:be:74:69:22:7f:25:04:
         c7:2f:43:03:51:5f:29:af:d9:04:0b:3c:df:8a:82:8f:c4:62:
         42:59:55:70
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUb9DQcuEgQNrjClDe3pzpPck1Q54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzBaFw0yNDA3MjkwMDA0MzBaMDMxMTAvBgNV
BAMTKDNFQkRCNTQzMDQ2NjYwNzgzREI4MDAxNzEzNkUwNUVGNERGNkFCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyufxxWxX8c7FdGexyH19UhNn7
x/khciGvKX/bnrnF3aw6q2n2J207vz8yPz30JyUVuS0o6TPKc+fTjGdsAhMpI1fx
yBx5b+UhQ0+l/rbwFmAqOUY6hZiyFO9N4nrAXDQUKAT4qgW75W9mw9mt56PIg9ht
DGY4wAd47Zw5j9XG80Vu8IERiragQe3jtUGWElI6pX2FvBnP/UigGRJIX6Fgk3l8
6C+5dfCjEbHLkB2XlYg7tIC5SYEbQ5XbddjJr3WfVuBmhb9fX3yHVpIQrNbKudd9
DR428hLOWxjjBZ82Y7VYEJrbvnSuJQbqWNrApb2rKsH4AcqNaWT6MRw7iP2FAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUPr21QwRmYHg9uAAXE24F7032q+owHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzgzMjJlMzIzMzJlMzYzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC2F0AwDQYJKoZIhvcN
AQELBQADggEBADlF7NG5PYlaN8uOo8/vP2vhxEXO+nnwa620S0zyiMGRu+vsXHuC
0Jid1jS1vXmpCgyZNwtNXuYMPPnWYb8SYcmEWGw4buu3lpZeygWi8HI22OKAIVIp
gH5llz8m/4uu4FE2v67Awd6sAIRcQoQE/t8bSHEfwJfy8Arz2i6afENHijGMzLdx
ktJFB4zB6qiBBgAMdEuCKHPZzorH6aL6kAvPySNfTUtp+3lk6nl7h2+KFCrOjyhU
LfKabxegP/Bpib9sqDWoNiTc29/WztTgBlcbhfSw8Ns9V5xWxP5v/6Jiwto4vnRp
In8lBMcvQwNRXymv2QQLPN+Kgo/EYkJZVXA=
-----END CERTIFICATE-----
Generated at Fri Apr 19 06:27:58 2024 by rpki-client on console-fra.rpki-client.org