Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          YR/aSWzA3iy7cMotzJDf2iaXJcceIRaeCeQzx956QgY=
Subject key identifier:   19:06:70:EE:95:C5:F4:0B:6B:5A:53:9A:E5:8F:92:38:75:C6:CC:36
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       456E8C320508CCE9F340FA39F3D4583B45600540
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa
Signing time:             Wed 27 Mar 2024 00:24:22 +0000
ROA not before:           Wed 27 Mar 2024 00:19:22 +0000
ROA not after:            Wed 26 Mar 2025 00:24:22 +0000
asID:                     45298
IP address blocks:        182.16.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6e:8c:32:05:08:cc:e9:f3:40:fa:39:f3:d4:58:3b:45:60:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Mar 27 00:19:22 2024 GMT
            Not After : Mar 26 00:24:22 2025 GMT
        Subject: CN=190670EE95C5F40B6B5A539AE58F923875C6CC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:aa:9f:ff:f7:fc:15:ec:f5:ca:8b:de:1a:
                    6b:10:4f:b6:f1:29:77:f4:a9:01:42:78:12:67:48:
                    e3:cd:8a:e9:58:80:c0:dc:9e:77:f6:b7:7e:3f:cf:
                    b7:d9:1d:1a:92:ec:d2:28:7f:78:99:ff:e4:86:5e:
                    91:4f:ad:18:33:0e:ec:ee:1b:25:70:e6:44:b6:3d:
                    17:d4:24:6d:21:d0:57:ba:0a:d0:66:52:59:43:d8:
                    4e:72:14:09:e6:f6:36:3b:29:9e:54:17:cf:8d:cd:
                    4b:61:37:56:71:de:8e:8e:1d:ee:24:8d:27:92:8b:
                    96:54:70:25:a0:b0:01:05:77:6e:b0:ec:ef:e9:1a:
                    f1:0c:b3:17:27:96:d8:36:81:9b:3f:e0:18:b3:c5:
                    b5:f7:0c:1f:17:33:a9:2c:8a:46:66:5b:2c:26:51:
                    6c:7a:d0:7e:a8:6c:6c:8c:1a:9c:fc:7d:1e:09:12:
                    6e:5d:13:fd:4b:27:11:a1:55:57:dd:bc:df:ac:61:
                    54:fe:ca:7a:42:08:0e:9b:03:0a:5d:ab:3d:13:cb:
                    f7:53:dd:80:80:77:1f:8c:58:e9:52:9a:c0:46:b8:
                    3c:58:a3:bc:27:98:c0:33:8f:c6:75:b4:2a:b0:1d:
                    ee:91:3e:f0:89:84:99:34:f4:39:d3:07:34:0e:91:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:06:70:EE:95:C5:F4:0B:6B:5A:53:9A:E5:8F:92:38:75:C6:CC:36
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234392e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:8e:03:45:3a:8e:91:b8:c9:c9:b4:e8:82:26:6d:2e:91:99:
         5c:16:e4:4a:dd:0e:0c:6c:26:07:67:b6:6c:de:53:17:6f:27:
         6e:d0:25:79:e1:50:7d:8c:5c:c9:8d:80:50:25:14:c6:4c:97:
         8c:77:2e:44:16:95:68:c0:0f:ab:35:9b:24:9f:5c:9c:d2:8a:
         dc:3d:43:dc:69:2a:c0:b8:84:2c:c2:20:28:de:07:43:1d:1a:
         0a:7d:22:08:80:86:89:d5:4a:8f:1e:a3:97:9d:c8:6a:43:52:
         3f:f2:d8:34:85:a4:d4:d1:c0:7c:bb:6b:2e:0c:2e:fb:f5:29:
         19:81:36:3e:12:3e:d3:de:25:3f:55:8a:0b:f5:91:d7:bc:f3:
         1e:d9:07:20:65:82:1b:75:1d:b6:93:28:a2:e2:6b:44:d2:a7:
         f6:d9:8f:b1:2c:e7:48:9b:97:10:59:4c:01:06:51:e9:86:2d:
         4e:00:bd:13:df:a9:0b:5b:d1:d0:2c:75:e1:e8:f0:e7:99:27:
         ed:6a:d4:20:d1:3a:de:4c:e5:a2:85:69:08:e0:b8:04:ed:f3:
         ec:3f:6a:e7:fc:ec:f3:46:0b:80:03:fb:d2:6d:8f:a4:5c:af:
         13:36:98:76:ad:02:95:cc:de:3c:b8:12:c7:e6:42:cc:35:73:
         b3:77:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org