Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36372e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          tBVDp/mdoszMAfF3DU3TD0Q1nNFGCNqrBpijUAz41W4=
Subject key identifier:   F5:63:DC:BB:1F:79:3D:D2:03:63:7D:A0:C4:56:19:1F:B1:DA:3A:E9
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       2964B5A46D7D1CFB67A2719EBB41BF427E95D3D7
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:32 +0000
ROA not before:           Sun 30 Jul 2023 23:59:32 +0000
ROA not after:            Mon 29 Jul 2024 00:04:32 +0000
asID:                     38513
IP address blocks:        182.23.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:64:b5:a4:6d:7d:1c:fb:67:a2:71:9e:bb:41:bf:42:7e:95:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:32 2023 GMT
            Not After : Jul 29 00:04:32 2024 GMT
        Subject: CN=F563DCBB1F793DD203637DA0C456191FB1DA3AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:eb:c5:33:6e:08:ea:f9:3d:ed:3c:20:8e:
                    f8:69:b2:a3:a3:da:0e:62:dc:82:d3:3d:d3:4b:f7:
                    0c:6d:bd:fe:9d:3c:37:f7:22:44:de:5f:51:2c:a9:
                    0b:ff:17:96:f2:e7:78:a9:41:c4:a8:e4:02:94:d6:
                    94:62:00:79:b5:44:d5:25:1b:c9:70:4a:66:7a:6c:
                    9c:09:d1:6a:8d:3c:4e:a7:62:98:49:a8:7f:ce:9a:
                    02:08:a9:51:e3:b1:6b:7f:dd:95:6b:53:59:cc:18:
                    0f:38:9b:4f:27:2d:d3:9d:19:8d:49:a7:78:19:41:
                    78:21:db:14:74:0f:b8:d0:01:71:e2:1d:1f:ba:8e:
                    33:82:96:96:c9:bb:3b:51:09:d4:7b:e0:23:f5:50:
                    7d:f9:6b:a4:7a:6a:60:99:7e:06:82:ae:7f:b2:bd:
                    30:10:44:73:bd:a8:6e:36:9e:bc:e2:e9:e4:27:f9:
                    84:4c:36:a0:a8:d1:a3:9e:98:58:41:fe:5a:ea:28:
                    83:62:6f:0d:a7:cb:f5:63:80:0b:14:49:6c:06:28:
                    76:3d:49:66:e8:a0:26:05:67:94:b0:a2:ac:a1:b9:
                    d6:98:da:86:35:32:92:ba:ea:12:b7:cd:0d:f1:11:
                    82:17:25:88:23:60:3c:89:d1:af:67:e4:a5:82:19:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:63:DC:BB:1F:79:3D:D2:03:63:7D:A0:C4:56:19:1F:B1:DA:3A:E9
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:14:00:3d:cb:71:a1:4b:9b:ec:24:6a:c6:43:9f:e8:bd:
         f3:30:95:16:25:5d:e3:ff:01:bb:c1:a6:7e:9d:44:1b:ba:7e:
         da:f8:43:63:12:3f:33:3f:2f:31:60:a4:f5:00:6c:f7:9a:5d:
         76:ab:18:0e:72:d1:f7:bb:20:4e:74:d5:c5:b0:4a:3e:bf:d7:
         17:1c:1f:74:b9:6e:83:61:34:ff:b6:ae:a3:dc:0d:e1:45:49:
         f2:ab:5f:a2:82:51:3f:e7:35:e0:09:40:08:41:a3:98:bf:36:
         a5:35:bd:4e:c2:65:0a:49:5a:6a:73:53:da:00:d9:0a:93:4a:
         af:c6:c0:62:68:c1:48:14:01:e7:9c:6e:f6:85:64:6f:c4:39:
         23:71:b6:6c:eb:49:2d:b7:f9:2b:c9:60:da:08:50:30:e0:2a:
         8d:59:b9:a9:68:03:a6:2a:73:aa:31:68:60:bf:8b:2b:70:55:
         a3:d2:a6:11:60:76:bf:5a:52:78:57:fe:1f:1c:de:be:d6:37:
         2c:f0:e9:d7:48:a2:f1:b4:ec:0b:bd:56:8c:df:87:b3:52:00:
         cb:22:b0:35:e5:db:65:78:9e:0a:31:00:97:8e:a2:06:72:39:
         02:ff:8c:64:f4:33:01:56:52:2f:2d:b6:87:d8:b8:4e:c0:28:
         b1:35:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org