Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          hxEkAcIpN/fq10prPJNHze/bl0yKNTTzxoDLYi2yUq4=
Subject key identifier:   F7:6C:0A:48:D8:EA:2D:3F:D8:5D:60:F8:78:8B:0D:F6:37:9C:16:55
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       748B52BE5E4AC1ABD01376E7D3C16FA1ADEEF077
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa
Signing time:             Tue 26 Mar 2024 03:33:43 +0000
ROA not before:           Tue 26 Mar 2024 03:28:43 +0000
ROA not after:            Tue 25 Mar 2025 03:33:43 +0000
asID:                     45298
IP address blocks:        182.16.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8b:52:be:5e:4a:c1:ab:d0:13:76:e7:d3:c1:6f:a1:ad:ee:f0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Mar 26 03:28:43 2024 GMT
            Not After : Mar 25 03:33:43 2025 GMT
        Subject: CN=F76C0A48D8EA2D3FD85D60F8788B0DF6379C1655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:c8:bd:01:4a:87:fb:cb:c5:c8:18:79:c5:
                    01:87:ad:d3:af:1d:e2:3e:c6:cb:d5:fc:a1:e5:f0:
                    ff:c9:43:e2:b2:0c:82:e5:64:02:6d:d1:69:15:98:
                    a5:a5:0f:dd:39:62:95:42:f2:57:72:97:ff:68:3c:
                    1e:4e:a7:f4:a0:ea:1e:bd:d3:0b:c4:ab:12:80:0c:
                    50:e6:41:04:e1:c7:51:09:81:c2:99:66:d6:6d:32:
                    c3:02:4f:c6:0f:c9:50:b4:d2:fe:5a:44:aa:10:9a:
                    b6:d3:40:c7:8b:98:2e:4a:5d:2e:b0:66:59:a1:a1:
                    bf:62:7a:ad:aa:bc:57:fc:ac:f3:d4:7c:16:ac:68:
                    dd:67:59:d5:80:61:91:35:fd:00:a7:e1:6b:4c:00:
                    fb:92:97:8c:48:be:8c:b4:83:b2:61:51:28:6c:34:
                    39:fe:2e:b0:69:fb:61:0a:14:8d:dc:0a:6a:7f:fe:
                    60:9c:f3:99:ec:af:13:6d:07:fd:3e:a0:3d:69:8e:
                    5c:0a:0e:bf:37:50:c4:4e:7c:66:47:3d:43:a7:3d:
                    77:71:7c:39:74:bc:55:62:39:c5:d2:e0:d1:ef:58:
                    6b:c0:a0:37:39:f0:d8:29:93:90:72:05:04:76:4a:
                    2b:c0:6f:67:bd:f8:a7:2d:ad:55:65:99:01:45:89:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:0A:48:D8:EA:2D:3F:D8:5D:60:F8:78:8B:0D:F6:37:9C:16:55
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234352e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:8a:4d:7d:73:26:c7:a3:b2:65:f1:89:12:b8:1e:10:a0:
         c8:a1:a9:84:79:02:86:b6:05:bb:60:91:93:08:4a:da:3e:29:
         74:01:74:ab:cc:9a:81:31:ad:b4:8e:28:4f:e0:14:66:66:a8:
         68:f2:ea:63:00:10:63:99:fc:d7:d8:77:d8:28:91:fd:06:23:
         12:58:94:0b:99:fa:40:41:e1:9d:b1:f8:88:6d:04:d3:af:ae:
         81:da:24:e6:c2:43:64:a5:8a:70:6f:f8:6b:5c:a8:31:c8:b3:
         37:ae:4f:c6:84:c8:67:46:bd:f6:2c:c5:b0:e1:00:61:80:88:
         a8:3f:d1:26:85:da:e4:c4:29:e8:91:a1:06:a6:b0:82:04:6d:
         10:12:77:a6:57:75:85:45:df:97:27:02:c7:3c:16:90:64:9b:
         c5:28:37:aa:7b:45:6f:57:58:f5:6f:a0:58:39:9a:c5:d9:e8:
         cb:fc:e7:dc:84:d0:4c:dc:32:24:ff:8f:a6:18:9c:89:46:d7:
         d7:b0:c6:1f:04:ca:ca:38:5d:46:db:52:bc:8a:49:a4:0f:a0:
         61:d4:cb:fc:d9:a4:d9:bf:0e:89:5a:15:7d:2b:43:6d:1e:49:
         d7:e2:71:ef:87:05:42:83:40:89:fa:5f:74:7f:41:4b:74:98:
         10:07:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org