Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa
File:                     3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (raw, json)
Hash identifier:          v2c4vTwHeUS032kmsirkvc1Qxh9biT/nTGJ/lNqYLVA=
Subject key identifier:   95:26:83:BE:92:08:B3:EF:77:C6:A1:2C:E2:43:D4:28:C1:C9:8E:06
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       58D5E5870F5C438B67823CBCFD0AC5F318C6F294
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa
Signing time:             Mon 31 Jul 2023 00:06:15 +0000
ROA not before:           Mon 31 Jul 2023 00:01:15 +0000
ROA not after:            Mon 29 Jul 2024 00:06:15 +0000
asID:                     45786
IP address blocks:        182.50.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d5:e5:87:0f:5c:43:8b:67:82:3c:bc:fd:0a:c5:f3:18:c6:f2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul 31 00:01:15 2023 GMT
            Not After : Jul 29 00:06:15 2024 GMT
        Subject: CN=952683BE9208B3EF77C6A12CE243D428C1C98E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:d1:de:9b:95:67:d1:cd:13:70:9f:e6:97:
                    b8:a1:66:e8:a1:da:0c:f4:d6:95:58:0d:1e:cd:d7:
                    86:db:57:e4:38:8b:69:4e:0e:61:a8:da:68:21:ce:
                    7a:61:11:22:b6:7b:a5:11:da:ed:a7:32:36:9f:a5:
                    15:24:e2:31:05:e1:ff:01:5e:38:46:64:7c:04:ba:
                    72:43:db:6b:3a:b8:e0:07:a8:7b:63:16:9e:b4:e8:
                    73:f2:33:80:87:0c:cd:14:1c:cd:78:60:bc:3f:3e:
                    f6:e1:ac:75:28:f7:a0:ad:74:0c:3e:bb:64:63:ae:
                    78:d6:82:37:6d:66:27:7a:5f:6d:99:fd:c2:56:9f:
                    de:42:63:08:4d:d6:18:9c:dc:8b:04:96:fb:c0:3b:
                    e0:72:b6:0c:66:d0:9f:3f:70:58:51:b0:b5:d4:09:
                    86:f8:9e:5f:cb:55:6d:5f:68:5c:59:db:49:ca:8e:
                    b4:3f:2f:78:90:1c:e1:11:28:a2:5a:09:24:e0:7b:
                    c0:5d:5a:de:b9:c5:da:bf:28:ed:a9:2e:5a:01:45:
                    09:b8:23:fc:aa:4d:8a:64:eb:5a:77:bd:57:4e:bb:
                    0f:70:21:ab:34:c6:dc:d5:41:82:8a:aa:25:aa:ea:
                    14:ae:b6:b8:27:b1:b2:f4:14:d9:ac:fd:c6:3c:a0:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:83:BE:92:08:B3:EF:77:C6:A1:2C:E2:43:D4:28:C1:C9:8E:06
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:c4:05:4f:04:32:33:02:2a:91:c3:3e:58:9f:c8:6c:41:4e:
         8c:91:c7:3a:9b:06:03:ac:81:ed:41:50:35:20:66:3c:0a:06:
         6a:1d:40:ec:1a:e6:74:ec:12:75:7e:a7:71:04:dc:d1:e8:94:
         15:40:c3:fe:52:80:65:b7:d4:4d:01:19:09:88:8c:07:f7:7f:
         75:ad:cc:fa:33:d2:33:01:7a:c0:08:ed:64:df:4b:96:d5:91:
         0e:81:78:be:6e:ea:75:ed:70:3d:15:16:45:8e:5f:0b:ed:18:
         95:d4:0e:7d:48:bc:21:e2:7c:c9:02:7e:c3:d2:55:33:44:c1:
         51:cc:8c:da:8f:72:9a:b6:6a:44:4b:50:98:35:cc:84:06:af:
         44:79:fe:9d:f6:89:27:39:99:d4:13:c6:18:aa:4d:64:a6:e4:
         6d:83:8e:26:9d:52:fa:27:19:3c:18:ce:40:18:c0:21:30:36:
         00:18:83:62:94:52:17:72:b2:17:a7:31:40:a7:e0:68:45:b2:
         0f:35:33:46:7a:d9:92:03:96:3d:68:22:ae:20:06:ac:08:cb:
         ca:d3:25:3b:fa:e7:8f:1b:1c:d3:0e:e1:b6:70:b9:73:ed:e9:
         5a:84:b7:bf:36:69:32:f7:64:af:06:e0:50:e0:56:e5:0c:33:
         a9:98:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:24:02 2024 by rpki-client on console-ams.rpki-client.org