Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
File:                     AS45493.roa (raw, json)
Hash identifier:          mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=
Subject key identifier:   2E:97:ED:3F:2A:5D:9D:F1:F9:3F:B8:66:D7:E4:E8:E9:BE:AA:8D:58
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       17A821C21A0465577B721AC2627D0FDDFEA8A91E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
Signing time:             Tue 24 Dec 2024 10:00:54 +0000
ROA not before:           Tue 24 Dec 2024 09:55:54 +0000
ROA not after:            Tue 23 Dec 2025 10:00:54 +0000
asID:                     45493
IP address blocks:        182.253.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
                          rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Mar 2025 12:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:21:c2:1a:04:65:57:7b:72:1a:c2:62:7d:0f:dd:fe:a8:a9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 24 09:55:54 2024 GMT
            Not After : Dec 23 10:00:54 2025 GMT
        Subject: CN=2E97ED3F2A5D9DF1F93FB866D7E4E8E9BEAA8D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:28:4b:8f:f7:c3:dc:9e:af:52:53:a2:f2:
                    77:53:cd:4e:af:2c:45:5f:7d:0f:d7:2a:40:29:0a:
                    f3:ac:4d:c5:a7:3f:54:ed:3c:ec:2f:6e:e0:c4:86:
                    8a:4d:96:73:b9:8c:47:31:39:54:dd:d1:98:47:ef:
                    76:44:e6:21:c1:81:18:21:60:4e:5e:cc:76:67:9f:
                    6f:b2:9c:62:ec:47:69:c5:df:7d:8e:73:33:27:10:
                    51:65:58:bf:5a:5b:1e:4c:a3:28:9a:7b:b5:1c:c1:
                    8e:f1:f6:a1:e7:ee:cc:d4:91:8b:2d:7d:f7:46:06:
                    ec:bd:61:7c:71:27:0a:fe:f8:9f:1c:bd:b6:30:69:
                    5d:b8:a1:de:c4:3a:49:ad:4a:cb:1b:7c:b6:ee:5c:
                    af:1c:8c:0d:1c:0b:22:4d:7c:81:dd:b2:9d:1d:51:
                    b1:9c:d8:1e:77:58:40:88:ec:8d:61:e7:e3:55:76:
                    21:c5:4a:d4:d1:12:a3:a8:c0:25:f2:f0:54:b9:22:
                    88:20:81:e6:e1:f6:61:24:a2:32:a3:c7:f9:20:9b:
                    81:fe:33:3e:67:46:54:6b:8e:d1:d5:5d:5b:65:9a:
                    6d:1a:77:1c:c9:a5:9a:16:f3:fd:41:42:92:46:92:
                    a9:02:09:3a:a8:6d:7b:4f:b0:ec:4b:d5:d8:2d:80:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:ED:3F:2A:5D:9D:F1:F9:3F:B8:66:D7:E4:E8:E9:BE:AA:8D:58
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:de:2b:5a:06:7a:86:ae:fb:5b:a5:54:72:23:81:86:dd:50:
         23:ad:9a:97:cd:3d:47:01:32:a9:6d:a0:5a:eb:12:01:b4:86:
         eb:7c:40:e2:0d:5e:bd:ba:7b:62:88:7a:39:5e:28:3c:de:4b:
         89:cf:8a:54:ea:c7:6e:63:93:cf:f8:c0:d0:f1:1d:13:36:1f:
         66:a2:65:86:0b:ca:bd:a9:d9:8f:83:a3:fa:77:30:22:89:30:
         6a:d1:35:68:99:b4:47:a9:91:ff:e4:f8:8c:1d:dc:7f:3e:39:
         fc:62:ec:fb:02:b3:ae:9f:1b:f1:cc:b8:1f:81:6f:69:39:3e:
         13:bd:9f:d5:ce:a0:5d:cb:02:03:b9:ab:ea:4b:37:34:2e:c4:
         a8:c4:27:b0:9a:96:cb:62:85:aa:d4:9f:2a:d0:d5:fc:2d:32:
         a3:3d:bb:18:19:8a:2d:bc:02:82:9b:23:cd:fd:01:25:86:86:
         05:a4:51:aa:96:9d:5b:fe:f9:f4:3a:f8:b6:d1:c0:f2:a3:d2:
         aa:20:d1:c5:a2:cc:ca:85:3a:19:28:64:6b:d4:70:67:bd:f5:
         0a:e4:f1:e7:02:ca:4a:7b:8e:8b:09:f9:f2:f6:49:e6:eb:28:
         19:96:fc:dd:82:b6:78:59:b6:f5:65:b1:b3:3d:16:a8:f5:4a:
         6f:16:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:37 2025 by rpki-client