Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
File:                     3138322e3235352e342e302f32322d3232203d3e203436303439.roa (raw, json)
Hash identifier:          kbbgPajRwPuexjkCHMZgbdrHF8gqeW2iiNcCGaQA2KA=
Subject key identifier:   B0:AD:F9:15:2B:9D:F6:05:71:DD:E4:FE:80:97:26:CA:0D:1B:FF:F7
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       42C0819E827AC509E888F72C2FCE1D017A073EC6
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
Signing time:             Thu 17 Aug 2023 07:00:01 +0000
ROA not before:           Thu 17 Aug 2023 06:55:01 +0000
ROA not after:            Thu 15 Aug 2024 07:00:01 +0000
asID:                     46049
IP address blocks:        182.255.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c0:81:9e:82:7a:c5:09:e8:88:f7:2c:2f:ce:1d:01:7a:07:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 17 06:55:01 2023 GMT
            Not After : Aug 15 07:00:01 2024 GMT
        Subject: CN=B0ADF9152B9DF60571DDE4FE809726CA0D1BFFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:c5:58:75:00:be:3e:b3:46:c7:e9:50:41:
                    33:65:fc:c1:44:41:ce:80:76:82:93:5e:e0:36:4c:
                    5a:33:a1:75:b2:75:1b:be:ba:33:ea:ce:fa:ce:28:
                    03:31:ef:ec:17:fa:01:4b:0b:29:2e:fa:72:f9:f0:
                    5f:2d:fc:7e:12:fe:3b:cb:17:44:a3:5d:2e:49:51:
                    ca:6b:b1:96:16:83:88:2a:69:2e:a2:80:8a:8f:a9:
                    74:0e:2a:ae:7b:ae:8e:14:ad:96:34:e8:e3:3f:9d:
                    18:38:60:3e:af:fa:8d:36:01:69:da:b2:c1:19:bf:
                    f7:ec:87:dd:39:24:4c:10:bc:57:30:96:07:c8:6d:
                    c9:fe:5c:d2:1e:37:75:52:77:45:4f:40:ca:0e:93:
                    b3:ec:a1:a2:64:2a:58:ce:67:9b:5d:fd:8c:35:fe:
                    43:15:06:52:60:7b:6a:dc:d6:eb:e8:e2:82:31:da:
                    3f:dd:c2:ec:de:41:b6:9e:13:7a:d1:3a:02:db:ec:
                    8a:30:0e:84:bb:ab:86:b6:75:99:d4:17:d2:90:a0:
                    35:2c:3c:c6:ed:85:a1:b8:57:80:4b:ce:55:b5:1b:
                    c8:5b:c2:48:81:82:89:99:91:bb:97:94:66:25:1b:
                    50:4f:30:0a:a0:17:39:38:90:0d:f6:14:28:3b:d9:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:F9:15:2B:9D:F6:05:71:DD:E4:FE:80:97:26:CA:0D:1B:FF:F7
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:02:6a:d2:0c:63:55:7f:00:b5:4b:93:8e:32:3f:ea:a8:
         d6:dc:86:23:0b:62:37:8d:5e:da:f6:37:50:2a:1b:a7:f1:52:
         2a:f2:40:bf:0c:12:73:a7:6a:53:e4:b2:20:ac:13:1a:7b:dc:
         dc:99:3d:91:8b:3f:ae:8f:aa:3e:e6:86:0a:d1:6d:c3:73:1b:
         00:9c:3f:09:55:4f:67:b5:52:3a:6d:5f:10:e2:4b:b1:c8:08:
         7e:3f:ae:7d:26:a0:b3:7c:46:9d:4c:fd:87:b6:36:ff:d4:7d:
         30:2e:2f:1e:4e:7b:a2:06:a1:a7:61:ac:aa:ad:46:04:b7:1c:
         77:c0:e3:9a:2e:49:90:fa:dc:85:92:cb:d2:81:91:cc:c4:90:
         06:72:74:8a:b6:21:b1:16:9d:04:4b:fe:9c:34:6b:27:77:37:
         bc:97:7a:bf:d6:f3:f4:6f:db:81:a5:7a:3d:41:0c:af:3c:7c:
         a0:88:46:19:ac:5c:d5:be:fe:b9:9c:ed:80:6f:f8:8e:df:60:
         f4:2f:e3:e8:3f:72:1e:b8:2e:3b:89:0d:39:44:13:ae:83:3d:
         52:1e:77:cd:18:fd:bc:68:33:da:84:56:5f:74:03:46:92:7e:
         9f:22:96:7c:66:46:b0:1b:39:a0:bf:45:f5:70:65:3d:a6:ae:
         ba:62:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 06:23:38 2024 by rpki-client on console-fra.rpki-client.org