Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e322e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          ReHGyi3wPol8w+dXN58JQZ3jKDZy41EdBUQ9KqgqxNE=
Subject key identifier:   BC:A7:E4:1F:04:9D:DB:B2:C5:F4:1A:2A:4D:99:EA:96:FC:75:02:A0
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       497428BAD28C8C1127251983702CF06C546A5C4A
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 18 Jul 2024 07:00:01 +0000
ROA not before:           Thu 18 Jul 2024 06:55:01 +0000
ROA not after:            Thu 17 Jul 2025 07:00:01 +0000
asID:                     46049
IP address blocks:        182.255.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:74:28:ba:d2:8c:8c:11:27:25:19:83:70:2c:f0:6c:54:6a:5c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 18 06:55:01 2024 GMT
            Not After : Jul 17 07:00:01 2025 GMT
        Subject: CN=BCA7E41F049DDBB2C5F41A2A4D99EA96FC7502A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:7d:fb:da:bf:a8:5f:51:34:61:32:f9:fe:
                    13:4d:32:d8:e7:bd:47:40:04:7e:82:c6:de:d1:a2:
                    76:bb:34:a7:b8:fc:ef:13:a0:29:4a:a9:5d:df:3d:
                    19:25:9b:03:0d:62:06:47:ff:41:cd:30:25:88:6e:
                    bf:c9:47:4a:01:5c:86:cf:7f:ae:1a:7e:71:a5:2b:
                    fc:c1:d1:10:30:78:60:f9:4d:0e:f0:c1:15:7e:f8:
                    5f:56:00:34:4e:ca:56:10:5e:2e:0d:43:d6:c1:1c:
                    bf:89:a1:7a:89:85:93:ef:d2:43:ce:c6:6b:c7:b3:
                    a3:9a:0d:25:d2:fc:1e:16:14:b5:e5:69:be:1b:25:
                    f5:f4:34:3b:0c:4e:fc:6e:bf:bf:26:10:63:82:7e:
                    16:2b:1f:fe:e0:d4:d7:f4:c1:f8:e7:9e:a6:98:68:
                    cb:ee:ed:ec:b9:66:91:9c:ac:28:57:dc:d5:ce:9b:
                    fd:d5:e5:01:3e:07:7d:7b:a8:50:b0:38:a2:cf:f8:
                    a4:e7:5f:1c:86:d9:3b:f2:76:3c:64:e2:ff:b4:5b:
                    9c:58:a3:aa:df:c7:83:93:a5:c4:50:c0:9b:25:14:
                    77:48:a6:c3:88:c5:7c:f2:17:76:f2:73:c7:f1:1e:
                    b7:ad:1a:54:ca:07:c9:d6:72:75:e1:80:39:43:db:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:E4:1F:04:9D:DB:B2:C5:F4:1A:2A:4D:99:EA:96:FC:75:02:A0
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:42:b1:55:04:65:3f:6e:66:d5:15:eb:a3:08:e8:24:ad:
         f1:de:e9:27:6b:db:2c:65:44:9f:81:ec:eb:e0:f1:a9:d9:b1:
         b9:95:aa:47:0e:ca:36:aa:15:ed:e2:af:57:b2:88:d7:94:aa:
         10:cc:6a:fa:ea:eb:c8:2a:f6:4f:76:3c:3d:99:64:84:79:72:
         71:72:5e:7e:64:1d:10:11:47:ae:02:ef:60:ac:e8:01:df:ae:
         8d:d4:2a:5b:6f:43:b3:54:79:d2:5d:b1:88:31:fd:67:63:28:
         59:0b:8d:5e:bb:01:b4:ff:a2:b9:d3:8e:6a:27:bf:af:45:dd:
         b7:0b:ac:d6:8d:88:6f:fd:1b:7e:45:4d:a7:2d:f9:9a:02:52:
         c5:53:5a:fa:1f:4b:5c:ec:0f:f3:24:a2:63:5c:9a:07:5f:6f:
         01:99:ca:8b:79:5c:d2:62:b4:23:42:70:d1:b9:96:71:c3:4f:
         30:8f:60:82:6d:e9:59:db:73:52:75:90:18:d1:0a:9f:04:07:
         4c:0f:f1:5b:9b:39:d9:27:0b:de:8d:a0:5d:31:32:51:5c:2f:
         81:6d:ca:31:59:03:71:8a:ff:e2:ad:f8:df:fa:50:9c:a2:bd:
         80:30:4f:f2:0b:ed:ef:df:6b:ec:32:e5:e9:06:75:32:8f:4a:
         24:77:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org