Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37302e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          ccPocuFdCDCSDHOgY1DZ2CjEVumCSctku2fjGTU5Y+4=
Subject key identifier:   19:18:BC:3E:B6:B7:CD:C5:4D:3F:A4:7C:16:37:18:ED:F0:58:63:36
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5B700BEF003502EB7903592F5922605411AA2F42
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:31 +0000
ROA not before:           Sun 30 Jul 2023 23:59:31 +0000
ROA not after:            Mon 29 Jul 2024 00:04:31 +0000
asID:                     38513
IP address blocks:        182.23.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:70:0b:ef:00:35:02:eb:79:03:59:2f:59:22:60:54:11:aa:2f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:31 2023 GMT
            Not After : Jul 29 00:04:31 2024 GMT
        Subject: CN=1918BC3EB6B7CDC54D3FA47C163718EDF0586336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:48:3f:8d:d0:24:3a:b8:e9:dc:57:c0:6e:
                    72:84:2c:5c:68:e0:5c:2b:f3:b3:c3:97:1c:08:f1:
                    ac:52:be:27:d9:ed:ab:d0:92:e5:2e:d1:2b:c8:47:
                    31:1c:59:f1:b9:3a:98:81:3c:f0:ef:f6:0a:80:f5:
                    16:8d:f1:81:18:47:54:75:54:79:24:0d:fa:06:5b:
                    71:a7:9a:25:e0:bc:68:63:d6:37:53:bf:ae:49:6a:
                    ad:15:d7:76:ff:85:9a:d2:d7:38:45:83:9e:53:95:
                    c1:1d:be:30:b6:bc:9c:91:58:9e:68:7e:4f:e5:eb:
                    dd:e6:ea:d9:8b:c1:ce:d2:9f:bb:c4:2f:9e:2a:54:
                    76:c9:be:00:ba:ac:aa:e2:9e:e3:c8:85:f3:48:d5:
                    21:6e:34:31:2c:54:10:2e:0f:db:48:7e:d4:1f:ab:
                    97:33:69:87:76:eb:07:9e:10:eb:8f:ee:38:6e:95:
                    30:54:a2:0d:97:9c:20:cb:75:aa:48:21:64:84:a5:
                    07:1a:3f:fa:9d:35:f4:81:ab:f5:f5:a6:cd:98:61:
                    6d:ec:2c:e5:34:50:0b:ae:c7:46:59:5f:f4:9b:f1:
                    17:ab:8d:9d:79:41:06:53:03:47:04:c2:ea:8e:a1:
                    6d:80:6b:e9:72:13:0c:da:cc:cf:23:4d:c3:7b:5c:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:BC:3E:B6:B7:CD:C5:4D:3F:A4:7C:16:37:18:ED:F0:58:63:36
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e0:fd:ca:4d:85:ee:a4:e0:3a:b0:92:f3:0c:f2:05:5d:80:
         dd:53:b6:51:bc:f4:11:5a:bb:2f:95:48:65:e9:71:7f:1b:ef:
         94:69:bd:88:01:9c:2e:4d:f3:46:9d:b8:25:42:d4:f5:03:1c:
         51:be:60:40:01:24:30:ef:ba:e1:65:c8:4c:6a:d4:7b:75:50:
         1a:52:17:15:fa:3e:9b:59:d2:e7:98:79:dd:d8:1c:c7:3b:30:
         5c:ef:44:95:f2:29:54:39:42:1e:de:99:8b:77:1f:52:10:72:
         1d:8a:32:85:8b:b1:ab:3e:41:67:8d:84:ac:76:6d:0c:ea:71:
         9d:60:e8:14:3f:70:54:98:16:ac:ac:af:76:71:da:73:17:d3:
         91:55:ef:aa:e3:85:77:5a:fe:b7:3f:bd:5c:f2:2b:7c:de:53:
         c8:80:03:ca:90:aa:57:6a:77:5c:2b:5a:c7:80:6e:db:92:ab:
         75:f0:c9:fd:7d:ca:fe:0f:90:ae:35:74:be:a0:24:d8:bc:13:
         17:23:a4:67:3d:f1:dc:7f:29:d1:dc:f5:78:a4:35:64:83:86:
         58:e3:3c:eb:3e:d9:36:91:d1:56:90:88:4a:0d:ca:20:1c:2e:
         cc:d0:c5:33:b1:61:6f:37:f4:0d:dd:9e:4f:81:51:6e:b2:3e:
         25:b5:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org