Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e352e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          gYdBbEHqi/8GEIbwa19GzLrLlojYDwF4Guaq4yqtU1w=
Subject key identifier:   83:61:CF:0F:C6:B1:D7:BB:38:90:11:54:6C:B9:1C:E0:A3:9D:80:31
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       44258E028A7DCB9790C8AD300154ABD0D832AE59
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 18 Jul 2024 08:00:41 +0000
ROA not before:           Thu 18 Jul 2024 07:55:41 +0000
ROA not after:            Thu 17 Jul 2025 08:00:41 +0000
asID:                     46049
IP address blocks:        182.255.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:25:8e:02:8a:7d:cb:97:90:c8:ad:30:01:54:ab:d0:d8:32:ae:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 18 07:55:41 2024 GMT
            Not After : Jul 17 08:00:41 2025 GMT
        Subject: CN=8361CF0FC6B1D7BB389011546CB91CE0A39D8031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:3a:c1:69:4c:c5:ad:36:b6:28:19:d6:19:
                    d3:38:6a:dc:a1:81:43:2f:09:d6:44:fd:50:28:57:
                    bb:9b:0e:49:e5:ed:a6:18:59:2b:0c:02:ad:78:00:
                    86:26:f5:e9:5e:bc:55:4d:7d:71:e5:ba:3a:f0:b7:
                    88:de:fd:c5:40:fb:7d:ee:c5:ac:b3:94:de:c4:a6:
                    62:1d:6c:99:42:e7:e5:01:68:9e:ee:bd:ff:db:9f:
                    e1:de:d5:a6:66:6d:2b:b5:b1:89:4a:46:11:18:03:
                    2e:de:72:14:8c:8b:02:29:d9:ef:c6:da:8b:74:57:
                    af:9b:5c:e3:f9:47:b3:4f:e4:e7:4c:d8:ce:1a:94:
                    11:86:b7:6b:ea:a6:04:e9:1a:cd:66:5c:c5:47:2d:
                    77:ae:52:65:b1:1c:f1:f5:5d:a8:b0:8b:39:a4:2d:
                    f4:f5:41:bd:4d:dc:f7:65:a6:30:f5:df:37:97:9a:
                    02:c9:1d:2e:9d:88:98:2d:50:19:fc:a4:3b:06:63:
                    1a:c7:43:ab:9b:71:83:3f:e2:a4:37:31:86:fa:f1:
                    a8:33:13:be:b3:f7:44:5b:eb:aa:a2:70:0d:61:63:
                    34:f7:53:bc:77:c7:83:3b:47:84:f0:db:59:b4:5a:
                    52:1a:66:fb:e4:73:9f:c9:e7:db:b1:b4:7d:90:65:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:CF:0F:C6:B1:D7:BB:38:90:11:54:6C:B9:1C:E0:A3:9D:80:31
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:8c:57:9e:1b:69:de:ac:8d:39:e5:e9:a3:be:11:0e:f4:
         09:80:45:7b:93:af:d5:13:91:18:47:8f:8c:98:5b:6a:c4:13:
         70:ce:a5:30:0d:b4:c7:e8:64:d1:d0:e0:83:89:13:0d:8d:9c:
         71:a9:67:a8:bc:02:f3:a3:73:2a:f8:9f:60:7e:f1:85:ba:86:
         7c:56:7b:d4:b3:cd:ac:d9:00:a0:a5:45:ff:b4:8e:3e:c1:98:
         cb:da:38:cb:63:d3:02:9a:fa:28:83:27:92:18:11:2d:e9:8b:
         fa:36:a1:e0:f5:b7:8f:5f:7f:b7:91:be:c9:0e:24:72:9f:9f:
         a6:2c:8a:91:dd:9e:01:a8:98:44:e2:09:99:7d:8d:5b:b8:27:
         01:2d:79:19:df:a6:1d:9f:d5:f2:96:ec:56:2e:61:83:37:77:
         99:cf:98:52:b1:89:6b:7a:25:56:0b:9b:5a:47:1b:ea:cf:73:
         16:fe:26:2c:61:d3:11:9e:32:c2:2e:94:23:5f:0e:b2:d2:f8:
         5b:f9:7c:22:e6:9f:2c:8f:71:1a:98:a5:ca:9c:a6:47:07:0e:
         4a:3f:9f:3b:62:82:4c:15:ad:e8:0b:71:ce:6c:df:9c:b6:01:
         7a:49:e9:c2:8b:cb:c4:f8:71:00:01:c0:16:bc:d4:4b:de:fb:
         14:28:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org