Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa
File:                     3138322e3235352e302e302f32312d3231203d3e203436303439.roa (raw, json)
Hash identifier:          bdWoKWF5soO//Gk5ZBGB0znUdD0OENcmx7zhDcxOEew=
Subject key identifier:   B3:40:24:80:44:D0:EC:CB:37:CE:F9:2F:24:06:C5:8A:4F:F0:5A:3A
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       210A54888FEAA2C9CC55A68CA6639C6DE903F217
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa
Signing time:             Thu 17 Aug 2023 09:00:31 +0000
ROA not before:           Thu 17 Aug 2023 08:55:31 +0000
ROA not after:            Thu 15 Aug 2024 09:00:31 +0000
asID:                     46049
IP address blocks:        182.255.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 16:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0a:54:88:8f:ea:a2:c9:cc:55:a6:8c:a6:63:9c:6d:e9:03:f2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 17 08:55:31 2023 GMT
            Not After : Aug 15 09:00:31 2024 GMT
        Subject: CN=B340248044D0ECCB37CEF92F2406C58A4FF05A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:3c:61:11:c9:11:57:6c:aa:62:56:9c:60:
                    1e:31:ba:13:11:e2:eb:d6:fa:32:a7:09:15:40:c4:
                    a4:95:9e:72:47:7a:47:97:7a:62:26:c7:a2:d7:17:
                    ad:0d:e2:e5:c4:e1:ea:e6:87:6b:10:3b:15:63:84:
                    4c:53:d5:52:13:4e:10:25:24:e9:bd:d5:79:d0:f0:
                    7d:74:48:30:60:17:4c:0a:c8:c7:2f:35:69:dd:e6:
                    a1:ac:f7:7c:35:24:73:f5:2c:95:54:c2:0a:a3:cb:
                    05:a1:b3:a6:e3:09:af:25:3f:8f:c6:68:4f:59:3c:
                    90:62:6b:09:28:10:1c:09:0a:8a:91:e8:1a:57:a0:
                    d3:17:5b:55:b2:7a:19:a6:ea:9b:c3:07:e2:ec:46:
                    d9:5c:58:31:3c:20:f7:78:58:ba:27:c8:3b:6c:83:
                    cf:c8:78:fd:ba:45:21:c5:93:23:32:af:77:71:36:
                    25:eb:0a:b6:8c:a8:60:4b:92:37:03:46:ce:e1:e6:
                    da:45:2c:48:18:34:ed:31:38:ef:9f:4c:33:df:d4:
                    0b:a0:85:49:19:dd:bc:5f:2d:22:05:d8:1b:70:7b:
                    02:25:48:c1:d8:a4:7b:2f:e8:42:3a:ec:4b:2f:a2:
                    af:71:99:80:a7:40:54:43:81:95:f0:1b:8b:42:cc:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:24:80:44:D0:EC:CB:37:CE:F9:2F:24:06:C5:8A:4F:F0:5A:3A
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:f9:26:58:1a:dd:d4:cb:e0:29:83:a1:c9:5d:67:da:d7:
         67:80:87:ee:07:1a:dc:9c:ea:ea:b4:5b:81:09:ae:f6:0c:44:
         70:20:5d:d7:e4:e6:4c:2d:25:34:2c:df:03:5d:75:15:3c:fe:
         65:06:1c:d8:8a:13:ec:c9:86:4d:6f:0d:00:52:23:26:9e:5a:
         eb:aa:1d:8e:60:36:be:b4:4e:45:3a:92:c4:ca:9e:fa:bd:3a:
         f7:e8:8d:41:56:6d:fb:e7:24:11:5e:5b:e9:2b:c4:79:78:c8:
         74:9a:a7:f5:cb:6d:5d:31:61:9b:a6:19:6c:07:a2:a0:14:9c:
         22:ca:06:d4:04:21:fe:f2:35:39:10:18:74:86:0d:17:5c:f2:
         04:bc:f1:f5:89:68:ab:95:69:80:c5:5b:54:0d:ce:93:b3:a6:
         cd:0c:81:d4:07:3d:85:69:8e:30:32:b7:66:26:84:67:35:c0:
         b8:bf:b5:a5:3f:b3:5a:24:8d:ae:98:0a:d0:c0:03:9f:e6:49:
         b5:8e:99:82:1c:20:c3:ac:66:17:01:29:37:bd:70:cc:38:30:
         83:2c:a4:da:24:72:b6:ec:12:1b:a5:e1:72:6d:14:87:4d:6e:
         40:b7:46:3e:09:d8:bf:78:60:6e:13:62:0a:57:e3:58:ae:a2:
         01:77:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:38:18 2024 by rpki-client on console-ams.rpki-client.org