Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36362e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36362e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          YTDsacPqKd1PSOb3gDQc2HHJsv1hObST4eQCBzfeqYw=
Subject key identifier:   93:F3:FA:AC:7D:8A:58:D4:F9:02:B5:27:39:6B:4E:83:AB:F0:3C:4C
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       29F4BE1F7BE6E3419DE6F0C9438D71A02D4D2EE8
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36362e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     38513
IP address blocks:        182.23.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:be:1f:7b:e6:e3:41:9d:e6:f0:c9:43:8d:71:a0:2d:4d:2e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=93F3FAAC7D8A58D4F902B527396B4E83ABF03C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:5d:1e:07:f2:81:07:e9:84:a0:8b:23:b7:
                    45:5f:3e:25:0b:6a:f1:70:ac:74:dc:6d:31:a3:6d:
                    7d:90:15:1e:e0:b4:6c:1a:44:39:a7:f0:7d:09:99:
                    ba:27:b2:f7:d1:3c:09:c6:b1:f8:96:9b:f0:00:3b:
                    dd:5a:69:5b:b3:a3:ec:42:7a:13:0e:1d:4f:77:ca:
                    fc:29:68:f9:f6:df:1b:89:69:c2:7e:01:ca:bb:79:
                    cc:2d:c0:74:e0:2e:df:81:8a:5d:9c:e6:13:27:85:
                    eb:9c:00:60:03:61:ee:f0:41:5b:d3:0f:96:9b:53:
                    d9:4a:f3:af:fc:ac:d4:59:94:42:88:91:e5:8a:b7:
                    e8:d2:50:c2:19:1e:1b:a8:f4:4f:72:52:6c:7c:97:
                    75:bc:c2:d8:55:28:f3:3b:49:31:82:70:44:30:e0:
                    b6:69:2f:20:cb:be:cc:bf:2f:fe:02:6f:bf:e3:0b:
                    a6:d5:00:1d:01:cc:46:cb:86:1b:fa:32:82:cc:3a:
                    66:1b:21:28:a9:fc:2d:51:cd:5b:67:8b:66:18:2d:
                    10:78:40:9a:e1:f6:55:ac:66:ad:d8:8e:9b:ac:b0:
                    74:48:73:3c:e3:2a:f3:01:56:ed:a8:a9:b3:0a:f7:
                    b0:9c:9b:43:43:44:04:f5:4e:0c:12:f8:bb:03:f7:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:FA:AC:7D:8A:58:D4:F9:02:B5:27:39:6B:4E:83:AB:F0:3C:4C
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36362e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:91:28:20:2f:ff:65:15:54:f8:5c:fb:89:be:39:0b:90:c1:
         2b:a8:fc:1c:88:a6:f1:8a:8e:7b:09:90:41:cc:01:81:59:e7:
         51:f9:00:76:0a:83:18:66:c8:5d:58:fd:63:7b:0d:be:a0:0f:
         a6:65:2d:37:8d:e3:a2:b1:19:97:db:9f:f3:34:26:b2:91:e8:
         6f:74:62:4d:39:28:fa:e3:27:31:74:2d:e2:ee:a3:4f:34:c0:
         c3:a2:c9:12:a0:72:fe:d6:9a:85:30:a0:00:58:1d:1c:9a:b9:
         0b:c2:64:e6:4c:d8:3b:c3:1b:2e:af:b2:37:7b:9f:7d:f6:52:
         d5:8b:da:cc:dd:8d:c6:3d:6e:e6:e3:c0:61:a2:af:58:32:63:
         d0:14:e5:e9:55:3d:aa:bf:43:c1:24:f3:8c:63:f3:49:11:3a:
         46:8e:87:e2:a8:d1:70:87:70:90:52:cb:ad:af:93:1e:fe:ff:
         c0:bf:3c:3b:43:4b:a4:18:02:77:88:54:cc:38:42:b9:7a:c8:
         04:e9:4b:77:00:f7:a8:ce:17:f5:75:a1:7e:50:e2:3c:85:c1:
         82:d6:9e:89:0f:c4:72:c9:8b:29:11:86:cd:22:de:bf:17:20:
         f1:77:eb:68:65:f0:c5:a1:18:c6:a8:41:40:b9:70:f3:da:7b:
         16:33:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org