Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
File:                     3138332e39312e36342e302f31392d3234203d3e2034383030.roa (raw, json)
Hash identifier:          GNiQLzXIeGw94movUtK/eLEluklIRvQrC22j12eMFeo=
Subject key identifier:   FA:77:44:E2:C9:2A:E1:C6:90:B7:19:91:F4:7D:9E:52:9A:91:74:32
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       0A715B95D413A3F4DA0AF17D60A1C4B659EC1496
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     4800
IP address blocks:        183.91.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:71:5b:95:d4:13:a3:f4:da:0a:f1:7d:60:a1:c4:b6:59:ec:14:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=FA7744E2C92AE1C690B71991F47D9E529A917432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:a0:5c:9d:b7:6e:ef:5c:79:49:b1:52:d5:
                    8f:fb:54:5c:1e:fa:87:4b:86:2c:8b:f7:4f:df:32:
                    49:2b:f2:ab:53:3b:6e:84:47:88:dc:95:de:dd:be:
                    4a:4a:06:c0:06:96:84:78:0a:7f:3c:cc:af:a8:62:
                    34:00:32:a4:2a:65:b1:dd:39:47:8c:d5:13:84:5d:
                    b7:b1:4f:a7:d4:49:86:e9:bf:63:01:56:db:22:82:
                    ad:75:72:c1:fc:de:82:77:32:ab:0b:e8:5a:97:5a:
                    15:b8:3a:ab:24:48:2c:6d:2e:5e:67:a5:5a:ce:68:
                    e8:f3:ae:f2:ca:a9:3e:9d:cb:0a:90:99:fc:db:86:
                    3f:a1:0a:28:2a:c2:25:64:80:9c:83:ef:76:99:1d:
                    40:7c:1c:4f:0f:3e:92:bb:42:fe:7e:cc:66:f8:ac:
                    1b:24:61:83:f6:d8:f1:c0:1c:36:27:2c:4e:f6:84:
                    98:bc:16:ab:b2:27:a5:bb:e0:56:65:4d:b5:c4:3c:
                    6c:cb:8b:6e:5f:08:ee:6e:cf:10:6a:e5:c3:c1:9b:
                    4e:e8:a8:95:f7:b0:4d:49:6c:7e:d2:0a:b2:6a:7e:
                    56:a4:eb:42:fa:c5:91:e1:75:6f:a6:6e:1c:5c:a6:
                    51:be:36:b8:7f:37:18:3d:c2:a4:19:23:26:56:6f:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:44:E2:C9:2A:E1:C6:90:B7:19:91:F4:7D:9E:52:9A:91:74:32
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138332e39312e36342e302f31392d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:57:20:d6:74:b3:70:e4:f7:bb:71:73:c8:e6:c5:9a:95:
         17:63:8b:ee:c3:f8:d9:ce:81:33:91:73:2b:00:51:02:61:77:
         44:5b:e7:7c:fa:68:c8:70:c1:e6:09:67:71:d9:a6:60:de:15:
         75:30:c4:af:4c:11:48:79:87:5f:92:2a:df:54:ff:fb:2f:09:
         19:ee:5a:2a:4c:18:c0:e7:68:c4:43:8a:02:61:56:27:ff:da:
         4c:0c:48:da:64:bd:8b:ea:10:cc:47:ab:25:33:a8:d8:55:5f:
         b9:6d:da:94:1b:c5:80:c9:f8:58:a2:32:58:09:c2:0f:b2:7c:
         b3:c0:94:c3:29:1a:9b:d5:6c:5c:a6:65:7f:52:0a:20:b6:e2:
         e4:d6:04:8b:2d:71:b3:cc:82:1a:9a:79:ea:12:f8:ea:55:6f:
         dd:dd:af:c4:3f:ba:d2:3e:de:3b:df:d8:d2:b0:6b:d6:d5:01:
         6e:1d:13:08:83:4c:2e:91:d0:87:28:38:a6:33:29:43:a8:4b:
         67:c3:d5:96:c7:3b:f5:e6:18:7e:ad:b9:3a:50:83:58:2c:f1:
         73:62:b2:39:f1:87:59:d7:29:c5:53:e4:df:39:28:e7:07:bd:
         69:f4:56:68:79:a8:3f:4e:4b:88:0a:eb:1c:4a:de:ab:4e:28:
         33:65:4e:29
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUCnFbldQTo/TaCvF9YKHEtlnsFJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yNDA3MDEwMDU4MThaFw0yNTA2MzAwMTAzMThaMDMxMTAvBgNV
BAMTKEZBNzc0NEUyQzkyQUUxQzY5MEI3MTk5MUY0N0Q5RTUyOUE5MTc0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWk6Bcnbdu71x5SbFS1Y/7VFwe
+odLhiyL90/fMkkr8qtTO26ER4jcld7dvkpKBsAGloR4Cn88zK+oYjQAMqQqZbHd
OUeM1ROEXbexT6fUSYbpv2MBVtsigq11csH83oJ3MqsL6FqXWhW4OqskSCxtLl5n
pVrOaOjzrvLKqT6dywqQmfzbhj+hCigqwiVkgJyD73aZHUB8HE8PPpK7Qv5+zGb4
rBskYYP22PHAHDYnLE72hJi8FquyJ6W74FZlTbXEPGzLi25fCO5uzxBq5cPBm07o
qJX3sE1JbH7SCrJqflak60L6xZHhdW+mbhxcplG+Nrh/Nxg9wqQZIyZWb3tDAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU+ndE4skq4caQtxmR9H2eUpqRdDIwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTVjZTM2ZGUtZjkyMS00Mjc0LTg0
OTctMjk4N2Q5MDk1NDNlLzAvMzEzODMzMmUzOTMxMmUzNjM0MmUzMDJmMzEzOTJk
MzIzNDIwM2QzZTIwMzQzODMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW3W0AwDQYJKoZIhvcNAQEL
BQADggEBAFDVVyDWdLNw5Pe7cXPI5sWalRdji+7D+NnOgTORcysAUQJhd0Rb53z6
aMhwweYJZ3HZpmDeFXUwxK9MEUh5h1+SKt9U//svCRnuWipMGMDnaMRDigJhVif/
2kwMSNpkvYvqEMxHqyUzqNhVX7lt2pQbxYDJ+FiiMlgJwg+yfLPAlMMpGpvVbFym
ZX9SCiC24uTWBIstcbPMghqaeeoS+OpVb93dr8Q/utI+3jvf2NKwa9bVAW4dEwiD
TC6R0IcoOKYzKUOoS2fD1ZbHO/XmGH6tuTpQg1gs8XNisjnxh1nXKcVT5N85KOcH
vWn0Vmh5qD9OS4gK6xxK3qtOKDNlTik=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org