Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
File:                     3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (raw, json)
Hash identifier:          s19IDj9mMJ0lErBIJsliZ5CjEuGnp4A/oBPXh9EeGJ0=
Subject key identifier:   73:3E:1E:D8:5A:76:39:ED:8F:86:90:C0:40:11:AD:78:14:89:A1:F1
Certificate issuer:       /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
Certificate serial:       4CC86E6D13A47CC9682950036F7173FBE6C0A19F
Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
Signing time:             Mon 01 Jul 2024 01:05:30 +0000
ROA not before:           Mon 01 Jul 2024 01:00:30 +0000
ROA not after:            Mon 30 Jun 2025 01:05:30 +0000
asID:                     17995
IP address blocks:        182.16.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl
                          rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c8:6e:6d:13:a4:7c:c9:68:29:50:03:6f:71:73:fb:e6:c0:a1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
        Validity
            Not Before: Jul  1 01:00:30 2024 GMT
            Not After : Jun 30 01:05:30 2025 GMT
        Subject: CN=733E1ED85A7639ED8F8690C04011AD781489A1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:05:2a:9e:c6:86:c9:d5:61:66:8e:9e:9b:
                    6b:f9:57:8c:3f:9c:56:ef:d1:88:27:cf:15:c5:6c:
                    23:b4:cf:d5:53:ec:3b:c3:f5:25:0d:cb:54:9c:80:
                    73:37:cd:14:57:e7:eb:8e:4a:14:23:d9:78:4e:f9:
                    43:04:6f:5c:16:2c:ad:6f:07:b4:71:b9:4e:d1:54:
                    54:ab:93:96:f6:65:d6:15:de:45:7c:19:52:24:22:
                    d5:fb:dc:02:1b:8d:89:5e:9e:57:ee:2f:67:02:08:
                    fd:52:57:4c:cd:90:c1:73:a4:a9:ce:de:d5:fb:38:
                    7c:b9:92:c2:71:5d:5f:e7:ec:c8:c0:aa:a0:6d:07:
                    d1:95:81:85:7d:ab:e2:21:19:6a:d0:7a:6e:9e:c9:
                    00:90:f4:24:ff:c1:df:de:fb:1c:5c:15:e5:cb:1a:
                    10:62:77:f8:6e:dc:da:d7:86:bd:69:cc:55:b1:c7:
                    84:2e:1e:b3:59:a8:b4:00:76:8e:68:cf:9c:c3:8a:
                    1d:72:d7:8d:f4:34:ab:8f:29:e2:cb:1a:d4:6c:f9:
                    c1:36:b8:f9:b7:29:eb:1a:96:a3:a9:b3:03:25:a6:
                    c8:3b:a5:09:7f:79:8a:60:6e:fe:12:bc:7b:86:9c:
                    8e:c8:e4:80:b2:12:72:a9:0f:dd:e9:5b:65:24:1d:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:1E:D8:5A:76:39:ED:8F:86:90:C0:40:11:AD:78:14:89:A1:F1
            X509v3 Authority Key Identifier:
                keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:e3:aa:97:40:b3:f7:ed:ba:b5:f3:1c:dc:f7:44:92:2c:
         0c:4b:3a:24:d5:86:6e:c3:0f:6d:e9:6f:d2:3e:c9:49:50:8e:
         d6:b9:6d:6b:61:4c:90:2a:21:36:bc:13:2e:0e:ea:fa:65:6a:
         92:aa:44:df:02:eb:9e:ae:85:11:62:69:67:da:52:74:39:f7:
         2a:85:46:e0:45:e3:8a:4c:5e:bf:fb:a0:3d:4f:ba:6b:22:6a:
         e2:f3:6d:5a:76:69:f0:9d:ee:94:5d:48:e5:f4:44:7f:f9:7c:
         2d:ea:d0:f1:c3:29:e1:2c:1a:bd:27:fd:f3:92:04:d7:09:d2:
         f4:29:70:8a:4b:da:95:ef:98:07:59:00:52:d0:2d:ee:9a:05:
         6c:08:94:48:6e:3c:cc:90:6b:ca:7b:a4:65:a2:0a:e0:69:8b:
         a7:c8:bf:5b:35:bc:c4:9b:ce:13:23:7b:aa:7c:56:6f:6c:1e:
         9b:9a:5b:02:21:c5:7a:cc:b9:2e:10:53:d5:90:fd:0d:bd:b7:
         95:18:ef:fb:b8:9d:63:9c:4d:14:de:b7:39:00:b2:4f:a1:93:
         4e:3f:3d:18:cb:22:3e:d9:95:31:ea:55:e1:cb:a1:96:08:86:
         d4:db:a3:2f:29:c0:14:06:1c:de:57:bd:01:87:2f:bb:1b:9a:
         f6:d5:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org