Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
File:                     3138322e32332e302e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          yIh78uXMji4Sd9FM0ocBqmXaOMuKkA6UpwBAZycjGDE=
Subject key identifier:   15:42:B5:E2:3A:5A:24:B2:25:ED:3F:33:D0:1B:BF:54:78:D8:00:F6
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       28FF336D6A36A68EA137CD0468856B9B40E7AF8A
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 02:01:38 +0000
ROA not before:           Mon 02 Jun 2025 01:56:38 +0000
ROA not after:            Mon 01 Jun 2026 02:01:38 +0000
asID:                     4800
IP address blocks:        182.23.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ff:33:6d:6a:36:a6:8e:a1:37:cd:04:68:85:6b:9b:40:e7:af:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 01:56:38 2025 GMT
            Not After : Jun  1 02:01:38 2026 GMT
        Subject: CN=1542B5E23A5A24B225ED3F33D01BBF5478D800F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:ae:47:16:2e:d5:58:54:f9:58:e1:1b:44:
                    f8:c2:f3:c6:17:0a:e3:34:dd:0d:88:cd:b9:4c:ce:
                    47:05:30:2a:36:f6:4f:ca:0c:28:e9:2c:34:ae:4b:
                    14:43:a1:cf:e5:be:a8:05:84:95:eb:ad:f4:53:d1:
                    a2:9c:13:f1:da:1f:d3:ca:84:6e:a4:7d:11:b7:58:
                    3f:3f:23:a6:20:86:01:2e:d3:34:de:d6:3d:45:a3:
                    47:05:a7:fa:17:2b:62:86:bd:6b:72:33:89:fd:9c:
                    b1:e2:dd:ab:ff:4e:d7:67:bb:20:a4:0e:85:c2:84:
                    57:f3:fa:fc:8d:cc:79:fe:5d:f2:ce:48:af:d2:e9:
                    04:af:e9:5d:5c:91:f6:7e:b5:93:14:8d:03:84:46:
                    4c:55:24:f4:a9:75:f7:72:03:2a:98:f7:0b:93:4e:
                    2f:6c:26:76:ae:b3:0f:cb:c0:4f:6e:20:26:f7:59:
                    f4:b2:c6:bb:40:2c:c5:a1:b3:d8:e3:0f:79:c0:12:
                    a3:c5:eb:ed:cb:e9:e2:70:5b:93:6b:c3:2d:64:30:
                    5f:c1:63:9f:cc:00:57:f5:ec:35:57:11:cc:26:8a:
                    76:b2:de:d9:21:e8:c3:c6:f1:9b:6d:70:7a:25:04:
                    9d:44:8d:0f:5b:3e:19:df:b3:40:8a:6d:7c:fc:ba:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:B5:E2:3A:5A:24:B2:25:ED:3F:33:D0:1B:BF:54:78:D8:00:F6
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:29:71:fd:00:03:04:b6:05:42:28:6a:d7:6c:31:2f:0d:87:
         81:36:75:99:c6:b6:25:6a:74:cf:0b:9e:7a:c4:74:92:f7:24:
         93:5d:83:67:66:2e:a6:9a:f3:bf:44:e0:ef:3d:5e:58:2b:1e:
         fd:eb:e7:78:cb:7a:91:51:bd:ee:e6:43:37:e4:4d:c9:25:42:
         44:e2:8c:cd:98:b8:8c:17:5d:25:4e:40:40:5c:21:f4:69:00:
         56:be:3b:26:5b:34:d4:2d:94:36:f6:93:d4:cf:94:1c:9a:93:
         8d:5b:17:77:02:3a:93:a1:a0:49:9b:f4:3e:31:5c:54:dc:9c:
         88:09:82:d1:08:fe:f1:ca:e9:4d:5a:00:00:1c:62:7e:51:15:
         82:3c:ad:96:e2:88:14:6f:3e:4d:54:17:a9:e5:37:97:86:8b:
         5c:85:b0:c6:40:4c:a1:21:0b:bf:25:65:08:85:82:10:76:1a:
         e0:be:2e:01:b1:01:54:00:72:18:79:cd:d6:15:18:8e:52:fc:
         c4:16:0f:11:35:9e:b9:cf:2c:5b:22:83:4e:4b:a1:2c:17:b3:
         5d:25:fe:77:5c:e4:1b:f2:8e:50:0d:93:11:12:21:e8:ab:b5:
         93:01:39:6f:24:58:e7:72:53:00:7b:d6:db:9d:a8:fd:91:f4:
         db:3a:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:03:24 2025 by rpki-client