Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e312e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          fXbydr0lI+HHNPvjLX4nygccsVR/keBN4bYS8i9xQUM=
Subject key identifier:   DB:76:CA:EA:8F:04:29:5E:F4:93:FC:16:3F:5E:FC:D3:E8:71:42:BB
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       3117200BA78822DE7D6350EAE4B0BA8C8C277472
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 17 Aug 2023 07:00:00 +0000
ROA not before:           Thu 17 Aug 2023 06:55:00 +0000
ROA not after:            Thu 15 Aug 2024 07:00:00 +0000
asID:                     46049
IP address blocks:        182.255.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:17:20:0b:a7:88:22:de:7d:63:50:ea:e4:b0:ba:8c:8c:27:74:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 17 06:55:00 2023 GMT
            Not After : Aug 15 07:00:00 2024 GMT
        Subject: CN=DB76CAEA8F04295EF493FC163F5EFCD3E87142BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:36:44:b3:53:60:2e:aa:8f:b9:b1:7f:11:
                    59:45:e3:12:79:5e:4c:c9:a0:50:44:99:1c:7e:55:
                    c0:c6:60:83:6a:8e:d4:ba:58:6e:e4:4e:82:a1:95:
                    57:c8:bd:ea:dd:7b:54:f0:78:29:d7:d9:d0:fd:21:
                    8e:ab:75:d7:aa:f9:83:45:fe:8e:60:db:db:9c:ef:
                    d6:51:5b:44:83:04:26:5e:4f:80:45:42:3e:71:20:
                    79:bc:0a:36:1d:2a:07:5c:ef:29:e4:40:bf:12:e0:
                    df:97:fc:40:3d:bf:c6:69:59:2c:e9:4f:1e:7b:6e:
                    58:1d:8f:2c:ed:6f:17:2f:d0:b7:10:a7:3c:0f:6f:
                    0d:61:73:2f:fc:1b:41:de:e7:c9:67:e4:b4:e4:b9:
                    30:31:62:14:b1:2a:e7:ba:25:d4:9d:e2:48:b8:47:
                    e2:cf:af:66:0f:03:6c:3e:be:ef:9c:19:a2:94:60:
                    d3:44:51:e6:8d:1c:e6:f5:5c:99:a8:4e:c6:9a:70:
                    f8:95:d4:77:2b:94:29:77:c7:53:5e:d6:bd:6b:a7:
                    58:26:4e:4a:1a:7c:84:45:e7:69:99:99:aa:e3:3f:
                    71:c5:40:b3:a5:8f:ad:6c:b2:5b:f4:c3:1a:6a:11:
                    72:fa:fa:b1:a8:a8:93:04:d4:4a:3d:6b:32:81:ca:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:76:CA:EA:8F:04:29:5E:F4:93:FC:16:3F:5E:FC:D3:E8:71:42:BB
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:5f:2a:c8:e0:bd:5b:16:ae:f8:ce:59:f2:36:a6:41:ad:
         e0:bb:b3:28:af:cb:38:31:97:af:25:49:7e:6e:f5:d9:da:80:
         0e:c5:ad:c2:64:8e:19:ee:d7:78:4d:e4:a8:ab:7e:ce:bb:31:
         5d:3f:09:28:09:43:1e:c9:8e:41:74:de:b1:c7:f1:64:8b:d5:
         94:d8:94:24:2d:08:bc:75:25:50:66:a9:10:77:9f:40:55:91:
         52:5f:a0:ba:eb:8c:c2:c0:8c:c1:24:9c:3d:4b:f3:c8:df:8a:
         ac:04:cc:d9:59:2a:19:73:47:1f:b2:1c:54:b1:0e:e3:88:99:
         91:ce:01:f2:75:8f:c6:b3:93:e0:fc:0d:57:8f:e8:35:5d:3c:
         50:9b:ed:30:69:fb:f5:3a:04:2d:a2:c3:1f:dc:f6:ef:67:5d:
         08:50:cd:c6:cd:ab:04:d4:49:c8:2b:a8:80:0b:b6:26:9c:80:
         84:27:6d:13:4a:3d:5c:06:36:5e:5c:25:bb:26:70:a9:b2:5a:
         5d:64:42:a8:f4:95:37:98:39:8a:6e:72:42:d4:1a:fb:fc:89:
         cb:19:d7:37:eb:c6:d3:e6:75:ad:c2:16:57:dd:35:c5:ea:21:
         e1:c9:5e:e3:ab:2a:bc:21:4d:1d:dd:eb:48:30:18:bb:e1:ca:
         a5:93:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org