Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          uqHQK1i4at+YRbQKPp9nCOZWuomqh/0ErADJ9NJSjx0=
Subject key identifier:   8B:9F:99:6D:4A:03:C2:16:35:3B:58:5B:F3:57:33:68:62:E0:CA:64
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       0D54D8082F97EFEBB801E67D06EC34E24957DFCE
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
Signing time:             Tue 25 Feb 2025 04:00:48 +0000
ROA not before:           Tue 25 Feb 2025 03:55:48 +0000
ROA not after:            Tue 24 Feb 2026 04:00:48 +0000
asID:                     45298
IP address blocks:        182.16.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 23:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:54:d8:08:2f:97:ef:eb:b8:01:e6:7d:06:ec:34:e2:49:57:df:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Feb 25 03:55:48 2025 GMT
            Not After : Feb 24 04:00:48 2026 GMT
        Subject: CN=8B9F996D4A03C216353B585BF357336862E0CA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:75:2b:1f:5a:62:9b:98:f0:27:8a:8c:5f:
                    6e:7a:2c:a5:33:c1:c0:f2:11:7e:ff:94:8e:a9:a8:
                    aa:a9:7c:df:74:38:07:1d:ac:d0:e5:eb:dc:50:46:
                    7e:72:82:31:08:fd:27:91:4e:8b:69:ae:01:a9:8d:
                    9d:23:4a:37:85:6c:71:ae:be:85:9b:76:a0:c4:42:
                    80:36:ca:71:fe:7b:b0:ef:56:63:b0:20:f3:9c:77:
                    5f:45:b9:fe:58:a8:48:2a:f3:e6:ae:7e:ac:39:33:
                    e8:dc:0c:ce:09:4e:3e:03:67:b1:94:f6:1c:e9:6b:
                    48:4c:da:83:11:19:c4:b2:79:25:96:31:c3:16:e3:
                    b9:5c:6a:44:93:76:36:94:55:51:e6:f6:fc:e0:c6:
                    d7:87:db:e3:0e:fc:b0:0a:31:9f:d7:a0:0c:55:af:
                    9f:5a:f0:7f:a7:b5:cb:f7:5d:7d:be:7d:51:b3:aa:
                    5a:9a:27:a6:cf:5e:c4:55:de:a3:bc:0f:06:d4:a2:
                    33:2e:dc:67:d8:a2:f3:60:61:41:86:fb:77:cb:72:
                    37:db:1a:bf:03:7e:3a:cc:2a:88:89:93:53:fa:25:
                    5b:69:28:0d:a1:b7:2f:fc:c5:66:5f:21:9f:f1:11:
                    fd:f5:42:9a:4f:c5:0e:87:32:87:42:0b:e2:fd:96:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:99:6D:4A:03:C2:16:35:3B:58:5B:F3:57:33:68:62:E0:CA:64
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:a0:c7:4b:e6:97:d8:fb:99:c3:46:3d:5b:ae:de:65:e2:
         ef:45:d6:36:ab:bd:bc:b9:4a:92:c8:68:3c:4e:ac:a5:6c:c4:
         29:0d:5b:c1:dc:94:fd:5c:31:f8:6b:67:27:f2:97:00:75:28:
         d3:42:7c:53:5b:4b:cb:6f:a6:be:34:0b:a1:e5:07:07:c1:e1:
         47:0a:c5:d1:dc:ec:99:6d:6a:fc:be:51:b6:7b:8a:4d:fa:8c:
         13:c1:7d:f3:b9:c7:22:85:b2:e9:87:6e:68:11:8a:8e:12:03:
         53:7a:19:f5:be:67:94:b0:bf:48:71:f3:49:44:ac:16:6e:53:
         85:df:35:bf:44:1b:c4:d4:2b:08:97:8f:57:d2:4a:4c:5d:66:
         df:32:3f:dd:73:89:3f:91:eb:7c:84:08:15:46:92:de:bb:0c:
         77:eb:ce:b8:82:14:44:ff:42:79:8f:8a:3f:ae:5e:67:0d:0f:
         01:80:3a:03:c5:a7:6d:2f:dd:1e:cb:5b:50:72:f0:1d:e5:3a:
         f8:7e:da:28:d0:45:46:12:9e:e0:6f:15:b5:a3:bf:ff:bd:88:
         c0:82:91:c3:27:b6:5b:02:a6:15:f9:29:07:2f:a6:46:11:ca:
         69:9d:a3:9d:84:06:95:d9:1f:4f:92:c9:12:de:47:44:f6:a5:
         72:cb:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:02 2025 by rpki-client