Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
File:                     3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (raw, json)
Hash identifier:          A6eU6UhtAph0cwKbE7Ie6aoZlkgO7AMqGFUvmMpHiLk=
Subject key identifier:   3F:A5:86:E9:E2:2F:67:BA:72:34:AB:8B:59:BE:2E:12:CA:B8:07:09
Certificate issuer:       /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
Certificate serial:       3F84194F0DCFEEA8FD14FBC864E112A86BFA2A45
Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
Signing time:             Mon 31 Jul 2023 00:09:34 +0000
ROA not before:           Mon 31 Jul 2023 00:04:34 +0000
ROA not after:            Mon 29 Jul 2024 00:09:34 +0000
asID:                     17995
IP address blocks:        182.16.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl
                          rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 11:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:19:4f:0d:cf:ee:a8:fd:14:fb:c8:64:e1:12:a8:6b:fa:2a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
        Validity
            Not Before: Jul 31 00:04:34 2023 GMT
            Not After : Jul 29 00:09:34 2024 GMT
        Subject: CN=3FA586E9E22F67BA7234AB8B59BE2E12CAB80709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:21:95:91:26:75:25:48:1a:95:26:30:09:
                    8f:6e:e1:fe:8d:be:0d:0c:92:6c:b6:e2:89:42:50:
                    9b:db:9b:e5:41:de:dc:6c:81:26:54:a4:de:b2:17:
                    38:82:9b:8a:65:71:59:0b:2c:38:a8:28:de:35:6c:
                    88:27:97:ac:0c:c0:7e:c3:ea:20:cc:3e:49:8e:10:
                    93:e6:09:47:e0:e7:bf:22:fa:e5:79:32:b7:83:23:
                    a5:1b:d2:8a:3c:67:29:65:ad:d0:46:8f:bc:cd:70:
                    4a:09:4e:1f:06:57:b7:cf:9f:f3:11:95:06:63:13:
                    f1:ac:69:3b:87:08:4c:ed:3b:89:a2:40:c1:50:fc:
                    2f:cc:44:9e:d6:2e:fd:47:ab:f9:c4:d3:42:d2:dc:
                    7c:ed:33:68:bc:f9:d2:3f:7f:a0:4b:dd:f1:7a:48:
                    da:bb:fb:26:2d:fb:0d:bf:2e:e2:bb:91:c8:6d:31:
                    ca:57:f4:6c:c0:9c:0c:6e:cf:76:93:99:76:8a:85:
                    19:c2:c4:80:bd:1f:4c:b3:56:b5:39:86:dd:d7:7a:
                    f5:9e:49:a8:19:4a:db:24:e0:c9:22:ee:7f:7d:33:
                    c7:96:ce:fa:7c:e1:75:0c:0f:fb:6b:09:bc:fa:90:
                    38:9b:0a:49:a6:a9:34:3a:a5:69:4b:a4:d5:52:bf:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:86:E9:E2:2F:67:BA:72:34:AB:8B:59:BE:2E:12:CA:B8:07:09
            X509v3 Authority Key Identifier:
                keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:53:82:22:00:6a:2a:91:3e:b6:dc:49:2b:18:9f:ac:56:d5:
         7c:bf:87:c0:fe:e6:15:a2:a0:1c:33:79:1f:0f:41:f5:93:f4:
         d3:80:ee:7a:dc:8f:1b:97:41:3a:c0:32:96:b6:8f:d1:34:ae:
         69:6f:eb:cb:9a:90:32:dc:77:1d:31:e3:b5:b8:c8:54:ba:4e:
         5e:82:01:24:a0:e4:f9:45:a1:e4:74:51:4f:6d:95:ab:ec:08:
         26:33:dd:a8:19:0a:f8:d0:a6:85:66:36:1c:10:cb:a0:d4:cc:
         f7:1f:ec:e8:e8:36:fa:73:39:f8:1a:ba:71:77:4d:09:6c:8d:
         b6:46:b1:e4:4b:c6:16:87:df:6a:c0:f0:85:54:59:e5:ad:2c:
         fa:cc:33:29:15:69:86:ea:90:07:95:9d:51:13:62:25:4b:e3:
         73:94:45:b1:04:2a:24:a2:b2:30:92:71:b4:7a:25:d9:f2:8f:
         39:bf:d1:c5:66:67:b7:30:49:30:21:fb:d4:3a:93:dc:68:fd:
         6d:21:25:f0:10:c2:86:9d:83:a7:84:62:29:e8:f5:8e:9c:8e:
         69:56:ad:f5:29:c5:e1:af:e3:b5:05:00:3c:9a:67:42:47:af:
         b6:10:98:ca:4e:96:76:cc:42:d9:14:ba:e1:66:33:58:f5:34:
         f1:78:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:06:03 2024 by rpki-client on console-ams.rpki-client.org