Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e342e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          DdfVx1Y4zhGVI0wY6FDIqnJ7U45MXqnwWFPD5ypl2Cc=
Subject key identifier:   79:48:58:82:89:23:02:E6:3F:23:3E:A6:35:72:17:65:34:9C:D4:08
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       36167B1B71469DEF2BAFCAA2B89F8F21D0B90636
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
Signing time:             Wed 26 Jun 2024 02:00:00 +0000
ROA not before:           Wed 26 Jun 2024 01:55:00 +0000
ROA not after:            Wed 25 Jun 2025 02:00:00 +0000
asID:                     46049
IP address blocks:        182.255.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:7b:1b:71:46:9d:ef:2b:af:ca:a2:b8:9f:8f:21:d0:b9:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 26 01:55:00 2024 GMT
            Not After : Jun 25 02:00:00 2025 GMT
        Subject: CN=79485882892302E63F233EA635721765349CD408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:46:c6:d8:a3:88:0f:8f:c1:fc:9f:1f:d4:
                    55:58:ba:02:26:bc:ee:53:7c:1b:df:82:77:3b:71:
                    94:b8:d5:7b:1a:ac:b7:bd:d5:f2:45:de:fc:a7:f5:
                    6f:06:46:f1:62:40:c5:bc:1c:80:28:73:66:a1:14:
                    21:26:ab:5e:58:a4:a5:1e:f0:28:e6:05:58:88:3c:
                    a4:02:28:26:cc:93:6a:4a:91:21:98:11:c9:4f:71:
                    9a:bd:fc:cc:d8:32:1b:db:94:0d:9d:03:cb:af:ec:
                    f0:b7:ed:b4:aa:77:67:27:1c:62:13:45:2b:35:1d:
                    9d:a9:ab:f3:a4:bb:82:ff:11:55:04:25:d0:fa:e9:
                    ea:57:52:56:78:76:ff:72:02:45:92:71:27:23:0c:
                    6b:62:a2:79:30:b1:ad:82:d6:4f:01:73:9c:ad:b2:
                    8d:bf:ae:3d:34:a4:ed:3e:2c:5a:fe:1d:65:38:e8:
                    57:10:63:95:96:14:3e:b7:2e:14:15:70:e3:86:a9:
                    76:36:c4:bd:62:d9:59:8b:c0:4e:cb:6d:36:ff:96:
                    ec:7a:2f:95:6e:ca:d8:e4:db:d9:27:95:13:68:43:
                    0e:bf:3e:79:37:cb:9a:71:69:6c:73:e8:92:24:5e:
                    9b:77:45:6e:f9:08:a9:1d:eb:d4:b5:88:e1:eb:0a:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:58:82:89:23:02:E6:3F:23:3E:A6:35:72:17:65:34:9C:D4:08
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:35:1d:91:71:43:4f:d6:e1:b6:7a:39:2b:4e:13:bf:d4:
         75:31:0a:d1:23:b2:cc:b4:dd:f7:cb:5d:bc:63:29:8a:10:84:
         4f:f6:5e:24:9d:f9:88:29:81:90:6a:65:4d:91:7c:45:7a:96:
         a2:8b:cb:ad:b8:e4:e1:fd:56:92:4a:2f:2c:e8:d7:b3:6f:6a:
         dd:82:65:06:9a:8b:69:44:3b:20:2c:2c:81:24:dc:72:eb:d6:
         80:c5:27:3f:4b:d2:33:13:d6:b1:05:99:ab:a7:cb:0c:54:8f:
         4c:2f:be:f7:46:30:24:5a:91:de:a5:36:8c:19:fe:cd:45:82:
         3c:5a:d4:bd:6a:e7:33:52:38:65:95:2f:bd:f9:54:74:cb:ba:
         66:cd:a1:41:d8:22:53:b2:59:2c:45:43:2b:56:3d:57:57:0b:
         7b:8e:62:2c:8f:68:49:d6:fe:22:76:0f:93:72:d8:6c:a4:ed:
         6b:85:32:78:aa:f2:cc:da:71:31:ed:b0:66:a9:1b:7a:33:87:
         ce:aa:d5:44:80:74:e8:35:77:37:b0:38:7a:d3:dd:b6:22:34:
         8d:f8:ff:47:22:0b:a8:71:42:4e:27:cf:e6:06:58:e1:8a:9f:
         f6:a2:80:d2:8e:f6:94:6c:43:6d:37:e0:94:2a:5a:ff:ab:5a:
         a1:31:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org