Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          pVJQZljsx9qe4O0kDAmKt/cvWFFCNRZtj2sQTr87IaE=
Subject key identifier:   D5:FE:6C:2E:7A:6C:FE:25:D7:2B:B6:76:6D:1A:23:E0:9F:A5:0D:C2
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7F21F1949C3770E9B953700ADEE0FD307FDF8EBB
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:17 +0000
ROA not before:           Mon 01 Jul 2024 00:58:17 +0000
ROA not after:            Mon 30 Jun 2025 01:03:17 +0000
asID:                     38513
IP address blocks:        182.23.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:21:f1:94:9c:37:70:e9:b9:53:70:0a:de:e0:fd:30:7f:df:8e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:17 2024 GMT
            Not After : Jun 30 01:03:17 2025 GMT
        Subject: CN=D5FE6C2E7A6CFE25D72BB6766D1A23E09FA50DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:05:f5:41:5c:2b:8c:c6:91:0d:a9:c1:d6:
                    33:81:48:ae:4a:93:54:e8:8c:07:5f:0a:89:b5:bd:
                    79:65:e1:dc:7a:2d:ca:1f:8f:ac:cd:c6:e5:b5:7c:
                    46:ff:49:3a:64:dd:ff:cd:1e:70:a6:7b:43:96:b3:
                    b0:18:e9:1f:92:cb:4a:18:69:06:52:93:2b:27:e8:
                    86:54:2a:30:55:30:53:83:2a:de:33:4e:48:1e:6a:
                    f2:59:e1:f1:07:8d:c7:9e:af:1e:bb:93:a7:fe:a5:
                    cb:6f:49:84:28:5c:ae:a2:ad:71:e4:08:f5:6c:1d:
                    84:bb:10:57:da:82:1b:54:4b:15:a8:c1:d8:01:f1:
                    73:c0:0c:78:e2:17:be:4b:9b:26:3b:66:95:22:e6:
                    2c:c4:7d:03:5a:56:43:04:8f:58:aa:28:b7:a7:26:
                    32:92:12:11:52:68:dc:2f:1d:2c:c9:f5:b4:34:33:
                    ca:bf:db:91:65:65:89:69:b4:b9:e3:bb:01:c1:d1:
                    f9:60:55:be:ba:eb:b6:aa:17:51:7a:fe:ac:ff:8e:
                    90:ec:d5:f8:75:55:b8:43:eb:54:4a:68:bf:a9:e4:
                    d8:6c:f1:76:e1:fb:f2:0d:1f:de:93:ff:5d:95:f3:
                    eb:01:07:b0:76:0a:bb:1e:d3:11:12:11:d2:17:7d:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FE:6C:2E:7A:6C:FE:25:D7:2B:B6:76:6D:1A:23:E0:9F:A5:0D:C2
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:97:eb:51:be:53:2e:f3:fe:8c:7a:01:07:f7:26:89:0b:75:
         44:3b:40:3a:31:c3:1e:03:cb:09:3a:da:ee:38:06:8c:07:f9:
         0a:84:3d:27:95:f2:9b:9f:f1:59:3d:e9:d5:4a:94:b9:9e:63:
         4b:c5:c5:dc:ef:8c:3b:f6:eb:b2:a5:c2:dc:53:3c:66:ea:9c:
         82:74:26:6a:ef:de:a7:db:a4:4a:c6:ca:88:22:e8:34:de:9e:
         ba:fd:ef:f4:d3:0d:9c:76:d4:19:c7:78:16:de:ae:6f:a5:0b:
         74:99:68:0b:03:c1:44:69:b2:5b:2d:66:1f:6a:09:e9:8b:b1:
         d0:62:9c:d9:0c:0b:ce:f6:d9:59:d2:03:fb:84:f7:b1:5d:15:
         3f:3e:ed:c4:a2:b4:15:6f:d9:0c:ca:7f:16:a4:15:26:d6:9a:
         75:d3:6e:53:d8:2b:6d:c3:ec:8e:76:f4:ff:94:90:ef:be:21:
         cd:f6:fc:23:f1:9f:dd:9c:e3:17:fb:5d:aa:56:f2:ed:8e:94:
         64:7d:6d:fa:a5:3e:56:e0:34:96:fa:d3:82:99:4e:53:9d:c2:
         d6:02:08:dd:2e:01:4f:8b:c5:e0:49:aa:0a:a7:9e:29:e2:36:
         da:00:c6:82:f4:7f:3a:ec:49:f7:7a:0d:81:cd:7c:c9:5c:57:
         1e:b9:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org