Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36352e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          MMkA79vKil/MpbEXLvs4p4RsUBjpBQPXGouDYCdZbxQ=
Subject key identifier:   13:87:84:05:9B:1E:09:5B:8C:23:33:41:13:1A:7D:68:4A:42:3A:23
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       4E092BEFDEB385D9656FD93E3BDC612851CE7AC9
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:28 +0000
ROA not before:           Sun 30 Jul 2023 23:59:28 +0000
ROA not after:            Mon 29 Jul 2024 00:04:28 +0000
asID:                     38513
IP address blocks:        182.23.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:09:2b:ef:de:b3:85:d9:65:6f:d9:3e:3b:dc:61:28:51:ce:7a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:28 2023 GMT
            Not After : Jul 29 00:04:28 2024 GMT
        Subject: CN=138784059B1E095B8C233341131A7D684A423A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:e7:18:ae:9c:3f:b2:5a:4a:5c:7d:e2:7a:
                    f7:9f:35:44:5b:01:80:83:e5:0b:30:56:0b:2e:02:
                    56:d9:7c:ef:4b:13:05:4b:17:09:cd:39:35:df:9b:
                    ec:04:c3:32:f2:50:18:2d:de:ce:9b:27:78:04:a4:
                    65:71:36:11:f6:86:7c:08:b5:56:f6:3c:f5:90:43:
                    6f:27:86:a9:07:fd:55:44:23:c9:a1:f0:88:5a:20:
                    53:e1:7e:72:f3:65:04:96:85:c2:19:ff:aa:b5:f5:
                    f8:91:5b:db:18:f9:67:a7:d1:bd:ca:7f:0f:65:73:
                    9d:96:77:c1:b8:be:a1:e4:d2:18:a5:90:67:b4:a3:
                    1a:58:19:23:44:59:c4:0b:74:7a:8a:51:c1:f5:c2:
                    20:dc:67:41:d8:d4:07:42:1f:a7:75:53:a9:7c:c1:
                    4d:2a:3f:22:c2:6c:48:a6:ca:3b:46:cc:26:10:79:
                    0e:e9:d8:f6:f1:33:63:c6:7d:bc:ad:0e:49:cc:51:
                    c2:29:3c:02:da:dc:e1:4c:73:6c:d4:58:24:c4:46:
                    fd:46:cf:6d:46:7b:f7:be:86:8f:6a:ec:5e:03:2f:
                    ce:c2:20:37:a8:53:07:f4:36:20:d0:f8:73:2d:ab:
                    25:2a:69:bb:2b:23:e6:10:ec:03:d6:e0:4e:1e:85:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:84:05:9B:1E:09:5B:8C:23:33:41:13:1A:7D:68:4A:42:3A:23
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:2b:49:79:8a:5f:23:9a:37:09:8d:bd:93:a1:81:62:19:
         1e:6e:b7:e4:e8:01:b5:b7:91:02:12:d0:33:a5:94:6f:ca:12:
         69:ff:bd:5e:ae:50:52:56:1e:58:f1:21:24:c7:e5:9b:a6:e2:
         5b:a0:9d:48:f6:10:6e:e4:46:b9:2f:4a:ad:98:ff:9f:c4:76:
         b8:2f:7a:ac:e2:26:5e:b7:f1:71:e4:55:79:3c:68:f6:20:1e:
         be:ed:c3:b4:7a:54:65:16:7c:4a:d0:ab:ff:2e:7e:4f:3b:62:
         92:dd:0c:2f:9c:7c:3a:8f:28:61:ce:f1:17:f6:10:d9:a9:26:
         29:e3:c8:56:43:4d:14:92:6f:46:09:a6:4a:6a:7d:36:c6:d6:
         dd:21:13:c2:53:8f:89:46:b4:b5:b5:f2:bb:0d:cd:b8:b0:d1:
         e9:ab:e1:d5:f1:65:96:ec:1c:57:21:a2:ae:10:89:a4:30:72:
         b3:d1:b3:de:a5:20:50:48:c8:6c:d5:ae:f4:0d:d5:5b:5f:1c:
         c6:4c:4d:f4:8f:17:4e:3d:e5:0d:ec:29:e2:91:a2:00:03:fe:
         fb:af:cd:97:e3:59:d8:b4:f8:11:26:19:2a:33:b4:39:cb:41:
         3c:51:83:28:67:09:96:ba:ca:ad:f3:31:3f:45:fb:69:bb:4f:
         ec:2d:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org