Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e342e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          XKjHUpsZUWcw6X3CEnfY8hI9/+9Nm3RGtoeNWQIpJow=
Subject key identifier:   35:B9:62:2E:70:A0:EB:8F:23:64:0E:93:57:B6:9D:BA:2F:D5:0A:4B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       34D1CA99013DC866D9E78B98BF2D022C51BEAFFF
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
Signing time:             Wed 26 Jul 2023 02:00:00 +0000
ROA not before:           Wed 26 Jul 2023 01:55:00 +0000
ROA not after:            Wed 24 Jul 2024 02:00:00 +0000
asID:                     46049
IP address blocks:        182.255.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d1:ca:99:01:3d:c8:66:d9:e7:8b:98:bf:2d:02:2c:51:be:af:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 26 01:55:00 2023 GMT
            Not After : Jul 24 02:00:00 2024 GMT
        Subject: CN=35B9622E70A0EB8F23640E9357B69DBA2FD50A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:33:89:82:67:21:2d:62:81:47:7c:43:22:97:
                    68:13:e7:05:6d:e7:05:8d:5e:d5:71:ba:d3:18:32:
                    ed:a4:25:ce:f7:c7:d3:e9:8e:be:1b:4f:a7:16:03:
                    0a:86:ae:95:8f:37:86:ea:f5:e7:4b:c9:61:34:7e:
                    1e:d8:49:a4:68:82:5c:57:aa:23:cd:b9:a8:4b:9e:
                    71:86:3a:f8:24:37:34:98:92:81:18:5c:5d:27:de:
                    66:1b:fc:a6:f3:ff:73:67:36:3e:4d:27:fc:df:34:
                    27:73:14:9e:d9:ff:0c:77:d4:dd:13:9a:48:dc:34:
                    67:aa:01:a4:72:36:29:29:5f:ca:b4:cf:20:87:8c:
                    6e:47:07:bd:39:1e:00:80:8e:49:b4:34:01:47:0d:
                    ca:5e:b4:b0:f2:16:9e:e0:c0:82:80:54:6a:f2:a6:
                    50:f7:54:4a:ee:f7:8f:b9:5c:1a:79:6d:d7:ad:16:
                    43:75:ee:2a:41:cd:2c:4b:53:56:f6:d0:0f:9e:54:
                    f4:3a:73:56:f7:1f:f0:a9:e7:1a:06:4b:ef:4d:d1:
                    03:21:a6:f1:29:73:c1:5d:91:16:62:2e:1c:7b:bc:
                    e7:dd:0f:ac:ab:4f:3d:86:54:45:f5:8d:43:38:67:
                    a1:39:9d:72:3c:57:9c:10:62:f9:01:3b:ca:a5:c7:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:62:2E:70:A0:EB:8F:23:64:0E:93:57:B6:9D:BA:2F:D5:0A:4B
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:83:7b:85:ee:d0:58:35:0c:90:8a:ca:61:02:ba:9b:cc:
         53:12:2d:1f:85:e8:9b:4e:28:da:3f:e2:0d:31:b6:dc:5f:a8:
         14:1a:a9:35:84:31:23:0d:24:4c:db:e6:24:f6:44:d5:0b:ae:
         df:2e:2b:41:d8:ba:57:e9:fe:d7:7e:44:37:6e:12:86:3a:a9:
         18:b4:31:a5:2b:6f:bd:68:27:57:a2:d7:cd:81:46:64:1c:54:
         a8:30:a6:80:c1:1f:44:9b:ba:1a:5b:d8:29:e3:80:11:ab:81:
         55:a5:05:0d:3f:ac:0d:76:58:04:60:a7:9d:84:11:e1:04:4b:
         81:ff:be:75:56:b8:85:1f:d3:a6:d8:8e:f3:9b:36:5d:e4:73:
         30:92:20:be:51:55:17:df:1e:81:21:21:9b:4f:2e:4a:c9:28:
         2f:a5:34:84:8d:37:bb:1b:38:b3:92:fd:54:87:b1:3f:31:e4:
         32:c9:2c:06:6c:fe:df:d2:4b:d6:ca:8b:7e:3e:dd:19:8f:c3:
         e8:e4:79:67:27:71:1f:a1:d5:dc:a6:9f:53:2b:be:63:6b:69:
         4e:c5:7e:c5:f5:5c:a8:7e:d1:d9:68:08:15:fb:79:29:38:74:
         35:33:30:1c:f3:86:c9:2c:75:e4:0a:77:e4:81:38:14:c7:d4:
         78:4f:02:23
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNNHKmQE9yGbZ54uYvy0CLFG+r/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz
MDlCM0YzQjAeFw0yMzA3MjYwMTU1MDBaFw0yNDA3MjQwMjAwMDBaMDMxMTAvBgNV
BAMTKDM1Qjk2MjJFNzBBMEVCOEYyMzY0MEU5MzU3QjY5REJBMkZENTBBNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxM4mCZyEtYoFHfEMil2gT5wVt
5wWNXtVxutMYMu2kJc73x9Ppjr4bT6cWAwqGrpWPN4bq9edLyWE0fh7YSaRoglxX
qiPNuahLnnGGOvgkNzSYkoEYXF0n3mYb/Kbz/3NnNj5NJ/zfNCdzFJ7Z/wx31N0T
mkjcNGeqAaRyNikpX8q0zyCHjG5HB705HgCAjkm0NAFHDcpetLDyFp7gwIKAVGry
plD3VEru94+5XBp5bdetFkN17ipBzSxLU1b20A+eVPQ6c1b3H/Cp5xoGS+9N0QMh
pvEpc8FdkRZiLhx7vOfdD6yrTz2GVEX1jUM4Z6E5nXI8V5wQYvkBO8qlx55/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUNbliLnCg648jZA6TV7adui/VCkswHwYDVR0j
BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx
RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC
M0YzQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDkyLTUyN2QtNDg4Zi1h
OWY3LTI0Nzk3ZDk3NzRjYi8wLzMxMzgzMjJlMzIzNTM1MmUzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC2/wQwDQYJKoZIhvcN
AQELBQADggEBAAnTg3uF7tBYNQyQisphArqbzFMSLR+F6JtOKNo/4g0xttxfqBQa
qTWEMSMNJEzb5iT2RNULrt8uK0HYulfp/td+RDduEoY6qRi0MaUrb71oJ1ei182B
RmQcVKgwpoDBH0Sbuhpb2CnjgBGrgVWlBQ0/rA12WARgp52EEeEES4H/vnVWuIUf
06bYjvObNl3kczCSIL5RVRffHoEhIZtPLkrJKC+lNISNN7sbOLOS/VSHsT8x5DLJ
LAZs/t/SS9bKi34+3RmPw+jkeWcncR+h1dymn1MrvmNraU7FfsX1XKh+0dloCBX7
eSk4dDUzMBzzhsksdeQKd+SBOBTH1HhPAiM=
-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org