Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          YmqBXg5C/iKqvpQ9KW2y2Ew2R8LRDU3F88S+rpGtauA=
Subject key identifier:   37:8A:B9:A8:6A:BF:2A:66:87:8C:B8:89:A2:E7:73:9E:AA:D4:F9:27
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       21186CC8B2B10C5ECEAE208DE3918A3EB7863421
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:33 +0000
ROA not before:           Sun 30 Jul 2023 23:59:33 +0000
ROA not after:            Mon 29 Jul 2024 00:04:33 +0000
asID:                     38513
IP address blocks:        182.23.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:6c:c8:b2:b1:0c:5e:ce:ae:20:8d:e3:91:8a:3e:b7:86:34:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:33 2023 GMT
            Not After : Jul 29 00:04:33 2024 GMT
        Subject: CN=378AB9A86ABF2A66878CB889A2E7739EAAD4F927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:86:96:7c:88:78:6b:be:1f:73:48:b4:ca:
                    5c:51:5a:a3:3c:aa:f6:ac:64:e6:bc:7f:a7:39:8a:
                    00:f2:7d:4f:08:0a:73:b3:57:51:76:09:1a:d7:91:
                    71:62:69:02:27:bc:e9:79:7b:87:d2:f6:ed:84:05:
                    11:4b:3f:d1:95:8f:81:6a:a2:db:d7:d7:10:f5:7a:
                    3a:c5:e4:48:19:d0:5a:67:2f:08:b4:cc:8d:2e:2f:
                    6c:d6:f0:4b:e7:47:5f:41:64:4d:34:c3:5a:a1:09:
                    89:17:20:f9:6b:48:5a:44:0d:41:c7:c1:57:30:19:
                    91:54:24:f3:44:03:05:56:75:67:e2:e4:d0:b0:01:
                    09:89:99:d8:67:0d:90:4f:97:ed:25:5e:0e:b0:f5:
                    ec:9f:c6:9f:32:ef:9e:a3:60:fe:72:6b:2b:83:07:
                    b3:a4:ed:bc:16:ae:7b:78:5d:98:42:82:08:05:08:
                    4a:72:0e:17:e8:a8:e6:62:2b:38:a8:08:4f:df:f8:
                    a2:b4:d6:52:84:a4:4a:f8:ae:f9:dc:10:08:ef:b5:
                    88:32:83:be:2e:29:6e:35:2f:58:52:f8:80:45:54:
                    54:4f:a7:06:9f:42:c2:f0:49:86:f6:02:89:c8:6e:
                    30:25:65:28:94:01:45:13:12:10:f2:7c:49:80:50:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8A:B9:A8:6A:BF:2A:66:87:8C:B8:89:A2:E7:73:9E:AA:D4:F9:27
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:88:2b:88:b5:44:73:38:08:1b:82:ce:f0:a3:7b:1a:99:
         62:08:4d:a7:87:2b:05:c9:98:0a:bc:54:73:24:20:b4:ec:d1:
         3b:30:1b:39:47:56:b6:b1:78:e4:f3:82:d2:6e:33:a5:63:8f:
         bf:f3:80:6a:e0:84:df:ff:9b:65:81:f4:99:2a:65:11:bd:76:
         aa:37:d2:6c:61:d5:dd:d9:b9:21:c7:42:63:fe:bb:e6:03:5a:
         2f:6d:7d:f9:52:8f:4e:3c:f4:c5:ef:19:e8:d5:a9:e9:52:4f:
         52:6e:15:7b:9b:0f:42:b0:3f:22:d8:c4:81:f2:62:d8:9b:92:
         81:56:1f:a4:ad:33:b5:36:60:aa:92:bf:fa:ab:7e:22:bc:5a:
         1c:0d:3b:64:70:57:f9:a6:81:17:58:a6:97:c5:e9:09:58:40:
         6a:b9:2f:8a:ef:3d:00:3f:c3:0f:ac:be:6a:3f:e9:26:a2:25:
         15:b7:61:3d:0b:0d:a0:3b:2a:89:a6:8e:ba:76:4a:dc:67:a4:
         2a:70:60:97:21:5d:8c:f3:2e:a6:f4:27:97:8b:18:ef:bf:d7:
         01:90:a5:6d:20:c2:0e:ae:72:46:0b:f6:bd:1c:aa:28:72:57:
         0b:70:63:4e:7d:6c:5a:9f:ab:eb:44:3c:0f:b7:27:7f:c8:ae:
         59:22:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:44:45 2024 by rpki-client on console-ams.rpki-client.org