Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36342e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          gs0NWyAC6x14vl65GdmTB8HcPqy7gwj8XVdRVfiA+78=
Subject key identifier:   82:A2:24:58:0A:2B:15:CE:8F:9A:56:00:82:CE:B0:21:B4:58:FE:FA
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       51A8472AEBA26E44D783FA5CDF72C68E4CF918AB
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 02 Jun 2025 02:01:37 +0000
ROA not before:           Mon 02 Jun 2025 01:56:37 +0000
ROA not after:            Mon 01 Jun 2026 02:01:37 +0000
asID:                     38513
IP address blocks:        182.23.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:47:2a:eb:a2:6e:44:d7:83:fa:5c:df:72:c6:8e:4c:f9:18:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 01:56:37 2025 GMT
            Not After : Jun  1 02:01:37 2026 GMT
        Subject: CN=82A224580A2B15CE8F9A560082CEB021B458FEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:e4:f3:cd:7d:de:a1:ef:65:ee:79:a3:79:
                    50:e3:2c:ba:79:d7:3c:a4:c4:18:ac:73:ea:57:0e:
                    6c:44:c8:ed:4e:c6:4c:56:03:df:18:2a:de:8f:72:
                    24:68:11:4e:6e:22:be:ff:5e:df:ae:54:e1:c2:42:
                    cd:a3:6f:93:74:0a:9b:af:6d:b6:40:66:c5:bb:0d:
                    08:26:50:5d:35:d5:37:c1:46:ba:5b:77:fa:d0:2a:
                    ae:b4:16:23:8a:23:62:06:06:92:19:ff:8b:8b:b1:
                    4f:dd:36:0a:c6:f4:64:bd:6e:ca:3c:68:2b:3c:4d:
                    4f:1a:14:33:ac:cd:1c:70:29:f1:f1:50:ab:48:b2:
                    3c:60:89:6c:1f:ed:ed:c8:a2:91:ed:25:c7:0b:59:
                    be:8d:93:f0:c6:61:e0:97:7f:71:2d:73:2f:52:9b:
                    42:a1:5a:aa:ef:d0:a1:ce:68:70:2a:0e:92:62:bb:
                    b6:66:d8:8d:a1:9f:50:60:cf:ec:f5:bf:77:7c:bb:
                    ef:13:65:ef:0c:95:57:65:3e:b6:0b:62:bc:d2:85:
                    71:d0:29:a3:09:3c:fc:b9:8a:b5:4e:b1:b3:16:31:
                    90:c3:8e:62:64:b8:a7:a4:46:ef:03:21:2e:29:a5:
                    3c:9c:e0:6f:49:db:ab:54:b0:2d:19:a4:c1:93:21:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A2:24:58:0A:2B:15:CE:8F:9A:56:00:82:CE:B0:21:B4:58:FE:FA
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36342e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:f0:a0:c9:31:50:50:69:36:f9:54:06:17:6c:41:ce:08:
         92:5c:96:97:da:f8:ec:04:8d:d7:64:80:06:e8:b9:b9:95:f2:
         83:b2:11:c5:3a:4f:8e:8d:4b:c1:84:75:c7:45:41:69:17:30:
         2a:98:f3:b2:5e:fb:04:3a:af:07:4b:d2:88:33:fe:96:0c:92:
         ab:4f:53:bd:e0:d5:0a:4d:13:0d:33:99:15:31:3c:e6:f7:ca:
         63:fd:7c:b1:1e:69:44:8e:9c:b4:8d:5f:ad:9e:5a:4b:46:19:
         04:00:fd:5f:40:a2:9b:78:cd:a9:1b:96:19:4a:ab:f6:83:bf:
         82:f3:e4:e6:57:b3:a4:cf:87:85:f8:5d:7a:77:73:c0:3c:0f:
         83:79:c9:3f:bf:5d:82:af:60:8b:f2:59:f7:7c:92:76:70:71:
         08:da:90:af:fb:45:72:aa:fe:84:b0:f3:02:78:7e:9a:68:8b:
         08:22:c0:b5:30:1e:de:0b:30:fe:85:97:92:d5:f7:b6:29:95:
         d8:96:e1:6a:8a:8b:8b:1c:07:9b:64:ed:54:08:7f:c1:7a:a8:
         ce:11:f4:fc:da:8d:8b:91:20:d3:fa:8f:a2:af:d8:9a:f4:61:
         87:eb:3c:14:f9:98:9c:e2:1f:95:68:dd:19:99:f4:a0:86:19:
         58:0e:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:17:13 2025 by rpki-client