Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36372e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          aQi8csAmKJQTuSO8OtLqPplkI5c7oDzv1m8k9S48HS4=
Subject key identifier:   11:AD:B0:43:81:49:E0:36:AA:27:DE:6A:95:B7:EB:C7:53:DA:E7:9B
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       18B202B2F2A75B5BBA432580B6B72F7D5DAE908B
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 02 Jun 2025 02:01:38 +0000
ROA not before:           Mon 02 Jun 2025 01:56:38 +0000
ROA not after:            Mon 01 Jun 2026 02:01:38 +0000
asID:                     38513
IP address blocks:        182.23.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b2:02:b2:f2:a7:5b:5b:ba:43:25:80:b6:b7:2f:7d:5d:ae:90:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 01:56:38 2025 GMT
            Not After : Jun  1 02:01:38 2026 GMT
        Subject: CN=11ADB0438149E036AA27DE6A95B7EBC753DAE79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:de:e0:c0:92:4c:88:13:27:65:fc:c9:1b:
                    6c:9f:17:05:09:cc:57:23:50:d7:11:c6:8d:b0:80:
                    ca:f3:a1:c6:e8:d1:72:49:4d:d4:f0:82:a8:cf:53:
                    53:32:02:a6:0b:f2:7d:5b:77:3e:f0:ab:da:d1:b6:
                    53:4e:d6:a4:f3:bc:a1:4f:7e:c1:5c:45:38:62:f6:
                    30:e7:62:20:1f:5a:77:a2:3b:a5:b2:80:38:5e:3d:
                    7f:25:ee:25:cd:21:16:c4:3c:42:9e:2a:0c:be:af:
                    4a:14:d4:90:ff:88:44:8e:4f:e9:d8:46:7f:3a:b2:
                    da:64:c7:7a:dc:06:36:a9:fa:02:48:70:e1:f8:5a:
                    32:4f:2c:c1:01:34:67:ec:fc:01:02:cb:76:56:63:
                    1a:81:45:7c:53:d1:1b:6a:94:fa:61:04:dc:63:db:
                    b2:44:37:88:d4:9d:7b:6a:fd:a5:9a:06:f7:50:87:
                    4b:bb:96:fa:5a:eb:ae:21:71:8a:e3:b4:28:74:50:
                    8b:be:c6:ad:d4:ee:f6:05:5f:d3:5f:84:cb:44:92:
                    10:44:19:7e:b9:10:34:6d:c9:49:c7:7d:09:9a:bc:
                    28:9c:66:64:62:d6:8b:97:9e:7a:43:03:48:ab:73:
                    60:8f:9c:3e:42:9b:dc:7d:29:49:3a:0e:ff:45:d6:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:B0:43:81:49:E0:36:AA:27:DE:6A:95:B7:EB:C7:53:DA:E7:9B
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:d1:57:b0:69:11:b4:7c:5c:f0:4c:96:e5:26:cd:42:91:
         05:06:92:63:70:4a:8d:88:a0:8a:4f:7e:50:29:c6:66:0c:e0:
         1a:f7:1b:82:a5:ee:1e:5a:97:f9:da:2e:f1:a7:cb:7e:e2:ac:
         cf:cc:49:62:39:4a:14:4a:27:5c:4b:f5:13:47:5e:6a:96:43:
         4e:56:86:f3:95:a3:a0:44:62:fd:a8:9b:9d:88:57:a5:7f:9f:
         a3:82:c6:1f:75:03:2f:de:27:7b:59:e5:c4:22:a8:bc:0f:61:
         1b:21:f2:fb:3e:a1:0d:f6:2d:01:94:22:2c:f0:2f:b0:ba:68:
         0d:46:2d:b9:3e:85:c3:75:4a:a5:1d:83:36:71:4e:48:a7:e7:
         db:d8:07:b1:bd:19:1a:7c:d3:91:95:44:9d:c3:ca:c5:2d:5d:
         a5:ce:a4:59:0c:00:ba:43:bb:31:73:2e:11:31:65:a8:99:51:
         28:e1:bd:9e:18:14:73:9e:60:59:39:d0:e4:16:d9:cb:ef:3c:
         1a:c6:57:86:10:ac:48:dc:f1:8e:fb:06:a4:bd:11:ef:2c:37:
         f4:4d:86:3e:ed:12:94:7f:30:d9:95:b1:51:27:45:c2:4c:b4:
         33:44:dc:ef:6d:4e:a2:04:20:a9:84:77:0d:21:29:a5:73:cb:
         83:5b:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:51:57 2025 by rpki-client