Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          ed2M6jhJDXZLg8LDHNUq8s9EHuLEBOmUgjGSSCMeAQQ=
Subject key identifier:   01:0C:5C:C6:3B:27:1E:A5:BE:12:70:1A:68:52:A3:55:B0:BA:72:EA
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       62DB1CF5CF2BC6FACF443CC686228FC650467337
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
Signing time:             Wed 27 Mar 2024 00:25:36 +0000
ROA not before:           Wed 27 Mar 2024 00:20:36 +0000
ROA not after:            Wed 26 Mar 2025 00:25:36 +0000
asID:                     45298
IP address blocks:        182.16.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:db:1c:f5:cf:2b:c6:fa:cf:44:3c:c6:86:22:8f:c6:50:46:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Mar 27 00:20:36 2024 GMT
            Not After : Mar 26 00:25:36 2025 GMT
        Subject: CN=010C5CC63B271EA5BE12701A6852A355B0BA72EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:e7:13:9a:06:28:d5:91:d2:8c:d8:e6:52:
                    d7:4e:22:92:22:02:6b:b1:d3:b0:18:9c:91:d8:ff:
                    9d:5f:1d:32:ad:0e:0b:7e:f8:3f:a9:5e:4d:45:4a:
                    19:e7:93:c3:e2:fe:cd:74:bb:ec:45:f2:3a:d1:03:
                    64:13:74:47:97:5b:b4:eb:67:c5:bf:c4:b2:cc:f3:
                    3c:ee:cd:38:76:a8:35:00:4b:36:5d:79:63:3b:91:
                    f7:2c:7c:50:53:85:03:ab:d6:ac:ba:84:4b:fb:a2:
                    8f:63:17:c5:02:68:e7:1e:e8:9c:3c:6e:cd:87:fc:
                    c2:68:e1:33:18:ea:53:8c:2d:dd:b6:98:94:40:86:
                    d7:d1:e2:88:81:33:48:ef:a4:6c:4b:5e:6d:0c:f7:
                    b3:c7:5d:b7:56:95:ef:02:d0:78:c5:6a:e7:c9:a6:
                    58:ed:95:a7:6c:63:44:73:c5:3b:75:28:aa:3d:b9:
                    85:18:45:49:39:03:b1:f4:86:d0:c2:a4:5f:dd:95:
                    04:13:6e:20:dc:98:b1:fe:f1:d0:e0:9b:e2:5c:2a:
                    dc:7c:c9:85:0b:c1:1d:fd:b1:8a:41:aa:a8:69:a4:
                    5c:c9:df:8b:33:cc:45:92:2a:1f:1b:fe:31:5e:38:
                    11:b3:de:f9:6c:33:44:b2:61:a9:9e:ff:e5:06:05:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0C:5C:C6:3B:27:1E:A5:BE:12:70:1A:68:52:A3:55:B0:BA:72:EA
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:06:49:52:72:6f:c1:3e:32:ed:53:33:e1:52:89:68:d3:
         22:28:20:be:da:62:f7:30:ed:49:f8:b0:fb:04:f5:81:49:ce:
         49:94:06:1d:0b:eb:d0:ef:0b:c1:c1:fa:87:44:26:a1:f3:37:
         d0:87:8b:1e:e0:16:45:c9:5b:6f:e5:c8:a3:af:60:d3:8f:53:
         4b:10:73:94:81:28:dc:c7:5f:3d:a1:23:1e:43:d3:d9:f6:8b:
         ec:81:c7:50:0b:83:fe:b0:60:f4:b6:9f:88:d8:80:0b:4f:96:
         77:d7:d9:b9:0d:f5:5a:a5:6c:fb:41:3a:cb:b8:d2:18:bc:48:
         04:07:ce:96:cd:ce:52:e7:40:63:78:bc:91:ef:44:41:0c:e5:
         10:06:f1:1d:ad:18:2f:fb:e0:04:f3:38:e2:8a:3e:f5:b7:ab:
         86:b0:f6:32:b0:ad:59:25:c1:5b:f4:89:63:0c:aa:f4:34:8c:
         f6:95:be:7e:b0:05:88:54:a6:e2:56:40:16:f6:16:3a:8c:ca:
         e6:3c:92:bb:37:74:26:50:46:49:89:16:42:fb:bb:e8:dc:39:
         6a:b0:54:36:8e:11:b9:48:1d:0c:25:03:87:7d:42:90:1d:6c:
         fb:ac:9d:f2:0a:a5:5f:98:d3:0f:96:9e:81:4a:ad:5d:d8:14:
         89:51:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org