Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          jq1wxk+4SSSZEvUGemWEU13KpFHNZQbbP2s96wFMsA0=
Subject key identifier:   A4:E9:70:52:93:82:67:CA:C1:0F:16:45:82:90:F1:D3:9A:BC:5A:45
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       3C50E4B51F6A2FA53A52EF8790F3F479367BF427
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
Signing time:             Tue 26 Mar 2024 03:43:15 +0000
ROA not before:           Tue 26 Mar 2024 03:38:15 +0000
ROA not after:            Tue 25 Mar 2025 03:43:15 +0000
asID:                     45298
IP address blocks:        182.16.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:50:e4:b5:1f:6a:2f:a5:3a:52:ef:87:90:f3:f4:79:36:7b:f4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Mar 26 03:38:15 2024 GMT
            Not After : Mar 25 03:43:15 2025 GMT
        Subject: CN=A4E97052938267CAC10F16458290F1D39ABC5A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:fb:bc:3f:11:c6:9f:1f:b0:58:91:5e:b5:
                    1f:6d:fc:e5:d1:85:1c:6d:f2:0d:f6:70:56:6a:48:
                    83:81:61:43:dd:91:bc:e5:56:3d:e6:24:68:91:d3:
                    dd:24:6c:9a:be:e1:d8:47:2a:c7:55:1f:54:37:da:
                    94:a5:6f:af:c0:84:eb:f7:a5:57:fe:73:0c:5b:40:
                    4d:bf:39:be:28:5a:8c:2d:27:1d:c2:a8:fc:1a:01:
                    e5:bf:7a:ec:4e:cf:84:3a:e9:51:96:be:77:c2:b2:
                    19:9f:20:d3:f6:fd:f9:5c:9a:47:71:eb:47:d5:37:
                    77:ea:4f:f4:56:d2:c1:29:64:2c:e1:8c:a8:36:19:
                    56:7b:d1:a5:22:11:18:b2:1a:86:86:2b:9b:18:d0:
                    1f:97:14:56:cb:76:f5:26:01:e7:d2:f7:d3:3a:d6:
                    f2:fc:b8:4a:51:4f:4f:ff:f4:26:10:a5:10:c1:d2:
                    ee:4b:31:47:f3:e9:b9:75:31:e0:d9:1c:d0:ab:c2:
                    d7:1f:2c:57:70:c2:89:40:75:02:70:8f:94:96:c0:
                    d2:0b:bc:d5:0a:fc:8b:86:6c:0d:1c:89:bf:34:32:
                    b1:11:51:f3:b3:c8:69:e7:68:72:36:08:2e:d1:62:
                    63:6a:86:69:ce:9b:91:e2:19:f8:4c:42:c9:de:8b:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:70:52:93:82:67:CA:C1:0F:16:45:82:90:F1:D3:9A:BC:5A:45
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:51:f9:16:23:c0:6f:f3:eb:7a:80:8d:42:d0:4d:99:52:ca:
         e9:9c:c2:47:86:17:df:b7:86:28:b0:53:dd:35:8d:74:05:81:
         19:c3:8b:27:e3:d9:fd:bf:ad:15:88:6f:ed:a1:87:f0:e6:75:
         dc:39:dc:40:68:5c:1f:32:d9:d9:10:ee:81:6c:22:ef:c5:0e:
         82:bc:64:ae:d4:a3:72:8e:53:26:c1:98:91:06:20:49:2f:af:
         ae:d3:b1:56:f8:38:28:3a:16:75:5b:dc:4c:96:4a:3e:ec:be:
         f3:b9:1f:92:3e:33:02:4c:8e:c1:bc:d8:47:1f:a9:bb:78:b4:
         73:99:5e:bf:10:ad:e5:4b:1e:46:a7:14:1c:a1:ed:8d:84:9b:
         ce:13:39:51:e0:72:fa:9b:67:78:18:14:dd:51:5c:0c:5d:cf:
         a0:9e:89:79:73:10:86:52:62:4d:34:f4:e7:d5:aa:55:06:d6:
         82:2a:85:97:f1:a9:fc:8e:3f:e3:8d:dc:22:3e:af:a3:d9:da:
         4c:66:2c:90:96:19:c2:0f:a0:df:32:ec:7c:1d:8b:62:62:1b:
         80:10:be:39:7a:54:b8:f6:7b:ef:eb:ce:a6:25:60:0d:ee:e3:
         6f:30:03:4b:d7:88:f3:5b:e1:f0:8c:3d:54:42:45:03:df:71:
         81:93:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org