Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
File:                     3138332e39312e36342e302f31392d3234203d3e2034383030.roa (raw, json)
Hash identifier:          jaDwMWvrdEMFTq9AXrDMI4dGRDRUEMYKiCGElm5zoEg=
Subject key identifier:   E5:2A:87:18:F9:A6:CA:B5:37:3C:70:62:B9:2D:53:64:A0:9D:B9:24
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1967381BFDE2F94F0305FA5EF687E46B69C39DD1
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
Signing time:             Mon 02 Jun 2025 01:03:20 +0000
ROA not before:           Mon 02 Jun 2025 00:58:20 +0000
ROA not after:            Mon 01 Jun 2026 01:03:20 +0000
asID:                     4800
IP address blocks:        183.91.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:67:38:1b:fd:e2:f9:4f:03:05:fa:5e:f6:87:e4:6b:69:c3:9d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:20 2025 GMT
            Not After : Jun  1 01:03:20 2026 GMT
        Subject: CN=E52A8718F9A6CAB5373C7062B92D5364A09DB924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:55:80:90:dc:b1:e3:8e:32:80:25:c5:3f:
                    84:7f:b5:a3:17:b9:42:11:7e:91:27:66:49:4a:68:
                    81:3d:4f:19:11:f4:bc:b9:c0:03:5d:27:70:d8:82:
                    d2:72:ca:d5:90:d6:ef:29:f0:3d:bf:6f:83:0e:b9:
                    d9:61:6f:1a:4e:dc:f5:3d:2f:87:8c:68:64:64:93:
                    c2:c6:da:dc:dd:04:5d:fa:ab:8d:0e:4d:a7:91:9c:
                    41:32:da:52:8e:1d:5c:bf:c6:2b:87:6f:91:00:aa:
                    a5:89:b2:f4:cd:9f:5d:a1:c1:68:e4:3b:dc:70:c3:
                    3a:d6:51:1f:fb:29:08:a6:ec:74:e3:9e:a1:54:81:
                    40:0c:a7:e8:f2:e3:7d:e1:0c:26:4b:e7:f8:2f:67:
                    32:2c:f8:fd:91:95:9c:f4:21:ec:b4:4c:7c:2f:be:
                    ad:4c:c6:33:83:34:22:5c:ce:0c:63:6c:cd:25:78:
                    28:49:d7:01:bf:c3:00:39:65:54:ab:df:c4:3f:e2:
                    3c:72:a3:45:83:38:dc:3e:1e:b4:bc:f3:bd:f7:05:
                    4d:e6:dc:97:56:1b:4a:54:8d:f3:84:f4:b0:1e:06:
                    7b:45:50:91:12:ca:10:be:17:1a:57:7e:b8:41:f3:
                    9a:88:25:6a:e9:71:9b:2b:7a:11:7f:63:4a:ef:45:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:87:18:F9:A6:CA:B5:37:3C:70:62:B9:2D:53:64:A0:9D:B9:24
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:61:c9:92:f4:4e:2c:4b:55:e9:da:c5:a8:c5:ed:e0:94:20:
         3b:aa:32:e6:74:97:69:ce:08:93:71:b4:76:0e:11:87:5d:39:
         ad:1f:12:96:85:8c:3a:a9:08:d5:6d:22:cd:1c:f4:d3:a4:a5:
         ad:a8:98:e1:86:ef:ff:be:f1:38:60:6d:2b:94:a9:1c:fd:76:
         d3:82:27:6b:e1:0c:4f:be:81:94:e1:2f:26:83:c1:16:e8:3d:
         d3:53:d5:db:1e:e3:5c:c8:02:75:67:e8:55:7c:40:b0:58:27:
         dc:9a:34:9f:de:b5:88:a0:f7:4d:f8:5a:c8:2d:be:90:28:de:
         56:98:f1:ef:57:f2:65:ef:91:ed:19:38:7f:08:67:79:30:d5:
         44:19:c9:0a:0a:33:22:c4:9d:86:b4:f5:25:23:ee:9b:0b:64:
         26:04:04:47:e5:2e:ae:60:81:66:6b:dc:68:d4:4b:9c:94:ed:
         c8:50:ac:37:a5:f3:b4:dc:46:20:79:4a:58:86:28:a0:de:b4:
         65:c1:fb:fd:ca:9a:8d:c9:85:ba:93:be:55:bc:3f:0c:31:a9:
         b5:32:9c:13:e9:a2:ee:4d:3f:da:58:75:32:4f:e4:47:ad:28:
         9d:43:d4:72:8d:20:81:dc:43:13:74:3c:1c:1b:65:0a:5f:27:
         43:9d:aa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:25 2025 by rpki-client