Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3138322e34382e3136302e302f31392d3234203d3e2039333431.roa
File:                     3138322e34382e3136302e302f31392d3234203d3e2039333431.roa (raw, json)
Hash identifier:          QiDi+jrvJQG19qKdWCAJLXJvNGkO/rNFDJgHvxtkMhM=
Subject key identifier:   2E:2D:7A:33:5C:F0:18:E7:8D:5E:73:4E:9B:14:B9:16:30:10:A8:4D
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       0945784A0C3C364F6A0EF3DB068412E1C20D9E14
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3138322e34382e3136302e302f31392d3234203d3e2039333431.roa
Signing time:             Tue 09 Jul 2024 05:02:41 +0000
ROA not before:           Tue 09 Jul 2024 04:57:41 +0000
ROA not after:            Tue 08 Jul 2025 05:02:41 +0000
asID:                     9341
IP address blocks:        182.48.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:45:78:4a:0c:3c:36:4f:6a:0e:f3:db:06:84:12:e1:c2:0d:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul  9 04:57:41 2024 GMT
            Not After : Jul  8 05:02:41 2025 GMT
        Subject: CN=2E2D7A335CF018E78D5E734E9B14B9163010A84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:e1:ae:37:10:f4:9c:31:65:f1:8f:30:f6:
                    f5:01:e3:85:50:4f:66:ad:c6:04:1b:5a:bf:63:78:
                    6a:70:b0:10:92:25:6e:c3:4f:85:47:a3:e9:33:33:
                    29:cb:b0:7d:14:e6:8b:be:55:aa:59:36:04:8e:d5:
                    86:9e:d6:46:8c:0a:e8:a9:68:00:0a:73:75:22:3c:
                    1c:e3:63:82:7e:10:4a:88:96:6f:86:f4:86:ae:71:
                    06:60:4b:11:83:6d:88:1a:e4:46:c6:d2:6d:5c:c0:
                    0b:52:d4:bf:2b:99:9e:84:25:2f:ca:ce:a2:a7:e8:
                    94:16:17:17:40:80:c4:57:ff:a8:9c:a3:ac:ea:28:
                    1d:91:67:08:25:6a:a6:f5:19:8a:f4:a9:e3:20:6b:
                    2d:7c:f2:12:3b:1c:e0:a9:23:a5:d3:b7:c8:51:a1:
                    9f:fa:77:3f:f7:cf:ab:54:08:91:7f:65:01:ed:a6:
                    8c:e0:b6:ee:41:04:a4:a1:99:11:be:f6:20:08:67:
                    50:49:f6:4f:50:d7:70:f3:19:6f:9f:bc:20:6a:7e:
                    c9:07:2a:ad:0a:f9:97:c1:04:88:b8:49:9a:fc:4a:
                    1b:e3:93:2f:75:da:e9:7e:57:ff:78:8f:7f:23:72:
                    e8:5e:47:9b:b7:7b:f1:fd:50:72:a4:03:b1:5b:25:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2D:7A:33:5C:F0:18:E7:8D:5E:73:4E:9B:14:B9:16:30:10:A8:4D
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3138322e34382e3136302e302f31392d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:9b:1b:dd:e6:60:d3:f2:ec:44:53:6d:c4:c0:b4:b5:49:
         bd:32:ac:33:74:f0:f9:46:07:a6:ad:7a:ff:29:e5:8a:39:c8:
         51:e9:5f:79:a8:6e:69:cd:fe:89:25:66:e3:06:84:08:eb:ba:
         b6:22:e6:28:9a:b9:96:75:cb:2b:ae:4f:ef:95:72:51:86:f1:
         27:38:e6:c3:8d:31:11:53:80:78:a0:80:e9:81:00:2a:81:ee:
         94:5d:c9:bb:31:11:fc:f2:b4:f8:9f:64:09:fb:25:8c:ba:51:
         48:e0:06:f5:01:ef:3a:f9:eb:bd:aa:c7:91:c5:7e:1d:d3:e1:
         22:56:2e:e0:37:36:ce:99:a9:43:5f:ab:b4:4d:15:f6:b9:c7:
         00:e5:49:5f:9b:5d:e3:38:8f:4a:f0:cd:b9:39:43:8d:7c:51:
         86:b8:15:0b:25:f2:e9:48:10:4f:65:98:40:bb:0a:23:1a:55:
         be:b0:c3:cc:10:f8:89:27:79:e3:1a:0f:7e:93:30:82:55:79:
         ab:7b:6e:51:14:46:41:3d:85:e6:d4:a0:61:bd:a1:19:3e:d6:
         a3:c7:8c:fc:79:2b:7e:02:3a:69:74:e2:58:02:3c:e4:20:14:
         23:b6:19:45:5c:13:18:e8:9b:56:5e:da:6b:c5:5c:fc:5e:5b:
         9b:4e:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org