Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37322e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          i9jw1AEdsxwlTjvUvyFBVw1V3pQ2MA9x8JUHGZvaSmE=
Subject key identifier:   C2:A4:02:C1:27:35:1C:60:A5:F6:5E:51:CB:ED:92:99:38:E7:C9:42
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1B6E9DC3D019D9486391E66E0BE16499C5D80D64
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 02 Jun 2025 02:01:38 +0000
ROA not before:           Mon 02 Jun 2025 01:56:38 +0000
ROA not after:            Mon 01 Jun 2026 02:01:38 +0000
asID:                     38513
IP address blocks:        182.23.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:9d:c3:d0:19:d9:48:63:91:e6:6e:0b:e1:64:99:c5:d8:0d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 01:56:38 2025 GMT
            Not After : Jun  1 02:01:38 2026 GMT
        Subject: CN=C2A402C127351C60A5F65E51CBED929938E7C942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:63:8c:f4:88:96:bc:1d:ac:29:1d:06:25:
                    07:20:f4:79:c3:2f:45:92:23:03:9c:b0:fa:15:a4:
                    e5:c9:05:d4:c3:ee:33:5f:75:23:c2:e8:b8:9f:ce:
                    a7:0c:46:bd:10:a1:c2:b0:3d:3a:ac:d2:4b:cd:49:
                    e8:75:f3:0a:a2:f8:a8:13:a7:32:09:ef:37:55:01:
                    54:0b:40:89:ae:e5:12:59:0b:39:5a:f8:78:18:84:
                    34:23:e1:f0:96:e7:af:23:ba:d1:ec:33:96:db:3c:
                    82:42:bf:c7:de:c1:3c:30:53:4e:ee:fa:28:da:c4:
                    a3:76:68:05:cb:1f:7e:f8:12:ba:aa:af:7d:26:ca:
                    3a:14:4f:b8:32:7a:ec:a3:56:c3:b4:0d:b6:1c:2a:
                    c2:78:02:28:f5:fc:e8:4d:34:6b:01:16:b0:3f:03:
                    86:10:16:8e:1c:a1:98:41:26:d5:5b:7a:45:96:43:
                    dc:96:87:97:24:8c:b4:6f:02:20:06:c2:62:e2:9c:
                    ec:03:4f:77:8d:4f:3a:50:c4:cb:5a:21:f6:1b:b2:
                    f9:65:64:e3:f4:2d:13:5c:8c:48:1c:aa:22:97:ba:
                    3f:7c:35:28:89:b3:10:44:3c:a5:0c:98:e6:1d:b0:
                    aa:9f:5a:7a:c9:74:61:d5:a3:13:0b:65:7f:15:54:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A4:02:C1:27:35:1C:60:A5:F6:5E:51:CB:ED:92:99:38:E7:C9:42
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:16:5b:52:6c:8b:23:34:54:58:1d:e7:8a:f9:56:27:05:
         95:bd:a8:c5:01:0c:11:d6:dc:e7:f4:1c:9c:c9:55:3c:01:aa:
         69:f3:86:8a:cd:07:e3:92:ad:4f:3b:36:8a:eb:f4:bf:9b:8c:
         90:4b:2c:78:3f:27:6b:35:c9:b0:5b:ee:5e:45:d6:88:af:ac:
         29:bc:7e:34:99:ba:6e:29:54:3d:8f:8e:cc:80:23:57:63:c4:
         f3:8d:ea:9e:e6:a7:83:5a:8c:52:78:98:f9:40:c8:1e:c7:53:
         5a:a3:4f:e9:07:a2:72:f7:fc:94:a2:1e:61:2d:5b:8a:78:e1:
         25:9f:d9:11:3d:05:5b:41:d9:b8:79:89:e2:a3:c3:3b:19:8d:
         b4:d2:3a:da:6d:4e:1e:e3:81:a3:24:11:ae:2b:fa:82:3c:64:
         b1:6b:93:f6:d8:9c:26:f8:e3:92:bf:6a:9c:69:8c:95:16:5f:
         dd:71:99:4e:fe:67:70:5e:1e:09:fb:3b:0a:2a:dd:f7:0f:5d:
         7f:4e:d4:95:06:d4:be:22:9b:bf:f1:70:7a:4f:87:5d:fb:37:
         f3:1f:be:e9:2c:1a:90:15:51:79:f8:de:44:87:31:38:fb:ad:
         8f:ae:8e:1d:a8:50:fc:d5:04:00:22:20:24:7d:5b:b6:39:87:
         90:26:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:02 2025 by rpki-client