Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
File:                     3138322e3235352e342e302f32322d3232203d3e203436303439.roa (raw, json)
Hash identifier:          iL4PMKbvrqXhDgoAoAWusZEJsxlC06RfPP/P+d5o2nI=
Subject key identifier:   5A:7C:37:B3:6B:3D:07:17:1B:4D:C0:9D:63:2E:AD:38:1F:95:29:85
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       5B44030EE3D80838846034C43C0B3D987873978A
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
Signing time:             Thu 18 Jul 2024 08:00:41 +0000
ROA not before:           Thu 18 Jul 2024 07:55:41 +0000
ROA not after:            Thu 17 Jul 2025 08:00:41 +0000
asID:                     46049
IP address blocks:        182.255.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:44:03:0e:e3:d8:08:38:84:60:34:c4:3c:0b:3d:98:78:73:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 18 07:55:41 2024 GMT
            Not After : Jul 17 08:00:41 2025 GMT
        Subject: CN=5A7C37B36B3D07171B4DC09D632EAD381F952985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:8e:bb:07:f2:95:1f:95:00:d8:d4:4e:14:
                    88:b0:95:ee:d3:51:48:4b:c4:e3:66:d6:2c:7e:cc:
                    e8:25:a0:1d:53:14:6a:aa:92:dc:8c:44:17:a9:24:
                    62:3c:a2:9f:15:6c:d3:ad:bd:b2:5d:c0:ff:a8:6e:
                    ff:50:6d:2e:82:72:4e:f2:bc:90:59:ca:6f:6b:aa:
                    93:2b:af:4f:1c:f7:04:a3:a3:1a:5b:71:7d:3e:5f:
                    c6:5b:63:cd:e0:a2:4c:3f:cf:01:79:19:34:11:bd:
                    91:a8:3c:ab:4d:e7:32:23:19:b2:e7:bc:5f:22:fa:
                    85:04:c0:8c:ab:48:cc:79:4c:b4:5e:91:1e:3c:49:
                    b0:d6:7b:07:7f:1d:e3:f4:1e:9d:b5:dc:31:c6:68:
                    fd:42:b5:46:ec:da:20:7d:0b:96:d1:99:59:d0:8a:
                    e6:1e:91:9d:c1:a9:c1:ee:c0:eb:97:f9:e0:46:0d:
                    ec:bc:0e:1a:eb:23:e8:90:81:c4:5e:93:26:37:cb:
                    6a:d7:f6:9e:1b:fd:0b:ba:89:f2:51:c0:18:cf:4d:
                    be:01:2b:cb:90:cd:36:b6:68:69:a7:60:3b:82:6a:
                    bd:0c:91:45:fb:12:f6:95:f7:26:b0:85:3a:6b:c8:
                    02:5a:d0:14:96:af:a1:0c:eb:42:99:fe:2d:0a:b5:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:37:B3:6B:3D:07:17:1B:4D:C0:9D:63:2E:AD:38:1F:95:29:85
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:af:7e:82:51:b8:cb:c9:b6:21:04:fb:42:ac:61:b3:20:
         75:d5:ab:e7:99:39:c7:c2:0e:45:7e:79:14:a8:80:f2:3e:b6:
         dc:1f:ea:f3:e0:fb:83:af:49:18:4a:ee:28:07:03:bd:b8:89:
         3f:01:35:9f:fc:a8:82:d3:d7:08:1c:39:5b:c2:c4:50:7f:ae:
         68:80:0e:1d:e8:f3:a7:b5:00:80:ba:57:ac:9e:b9:48:d0:4b:
         a0:11:ff:bc:89:c7:47:16:fe:3c:38:09:22:37:f8:4b:db:e8:
         e9:bb:d2:2a:8e:8e:e7:ff:03:f3:77:ac:95:38:b2:a2:4e:dd:
         25:d4:42:9c:1e:c3:02:50:76:ad:6e:74:f0:41:cd:df:fc:b1:
         57:f4:43:91:b3:c7:9b:31:20:82:5b:ce:4a:54:cc:16:b0:c6:
         5b:8c:e1:ce:43:80:d8:41:cf:7d:5f:5c:45:87:e7:da:f6:3a:
         5b:4f:9e:05:9f:34:16:db:72:46:f0:ac:fd:18:6f:b4:70:7a:
         44:87:db:3c:b5:fb:5e:cc:93:d8:56:78:31:87:89:f7:70:1b:
         30:ae:ec:f0:43:3a:94:d2:a7:e1:98:af:2e:b0:96:9e:d7:43:
         45:b9:93:8a:b0:ad:f4:14:1c:4b:11:c7:ff:73:36:17:f9:82:
         8d:e7:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org