Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e352e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          upWKnAyhhkwHNV3BKUxgOBfykb9AihjubJj0E/CxtCQ=
Subject key identifier:   22:72:46:17:50:F7:A5:93:F2:B1:51:55:14:E2:A5:4A:26:88:B0:FF
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       049F99848B21AB08F78BCAA41F48DD7575596342
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 17 Aug 2023 07:00:01 +0000
ROA not before:           Thu 17 Aug 2023 06:55:01 +0000
ROA not after:            Thu 15 Aug 2024 07:00:01 +0000
asID:                     46049
IP address blocks:        182.255.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9f:99:84:8b:21:ab:08:f7:8b:ca:a4:1f:48:dd:75:75:59:63:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 17 06:55:01 2023 GMT
            Not After : Aug 15 07:00:01 2024 GMT
        Subject: CN=2272461750F7A593F2B1515514E2A54A2688B0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:c5:53:46:96:f6:58:13:b6:7b:05:d8:1a:
                    18:ee:26:c3:1e:f3:13:43:c4:f7:c7:a5:03:c5:d8:
                    51:21:66:4b:49:1e:c6:16:6c:f2:e8:23:fb:e9:25:
                    58:35:96:c7:37:67:93:26:8b:14:ed:08:65:45:8d:
                    d4:20:dd:0b:d0:0e:0a:c0:cd:9b:ff:de:dc:2d:3c:
                    19:ec:6e:cc:82:9c:71:32:3b:0a:19:f5:b2:42:3a:
                    e4:d8:b8:6b:09:1f:d5:ca:a1:22:a7:b5:68:46:bd:
                    19:bf:7d:a8:16:fd:b7:39:a4:05:e4:a6:88:97:6e:
                    0b:a6:60:e9:72:b5:a9:3f:2d:13:cc:cf:3d:71:0c:
                    f0:85:29:19:50:db:4a:de:45:e4:4c:c5:09:d8:ee:
                    ef:59:26:43:11:70:a3:90:ff:7f:4b:c7:29:b8:01:
                    79:a9:21:b9:a7:dd:5a:11:94:59:2d:b2:a9:a5:42:
                    6b:49:5b:61:83:48:1d:a5:97:80:2d:96:b1:23:f0:
                    0c:48:4b:47:9d:38:49:d8:df:6f:e4:a8:00:36:1d:
                    4a:60:1e:97:9f:3c:86:09:b7:70:05:92:63:a3:32:
                    60:26:89:45:09:97:94:ca:7d:4f:35:b1:da:0f:47:
                    8c:ff:7e:71:0f:95:16:a0:dc:33:0d:eb:46:bf:37:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:46:17:50:F7:A5:93:F2:B1:51:55:14:E2:A5:4A:26:88:B0:FF
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e352e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:2b:2e:5b:5c:34:d4:0e:11:57:da:eb:c1:23:5b:4d:da:
         61:d2:56:7e:ca:ad:60:87:6f:29:0b:7b:7a:f1:ee:56:07:be:
         1f:a3:80:d0:d5:1e:2e:2e:46:0e:f9:38:79:d5:91:ce:23:cb:
         b2:af:60:0c:41:11:4d:fc:66:ad:1f:cf:c6:b5:74:75:58:d8:
         fd:19:4b:37:d7:2f:c6:d3:6f:9d:78:1e:bc:d7:d4:7e:0b:0a:
         fa:02:ee:23:47:38:58:f4:5d:f7:1a:99:63:2b:6d:21:ed:90:
         ed:ce:c5:64:ca:ab:6a:b8:c1:58:51:98:c0:0d:d5:9b:e4:14:
         ef:c7:84:6c:36:8c:58:04:a3:b5:e7:7f:b7:89:27:63:4f:5c:
         e0:1e:88:f3:71:76:3d:67:a7:80:9b:b6:bd:c1:f2:7f:4c:08:
         8d:30:f8:05:09:bc:9b:e5:54:c3:00:5b:ff:b0:0f:48:d0:81:
         0b:6e:6e:7d:d1:0c:43:3b:61:b4:18:08:bf:62:0e:bd:98:d4:
         1c:63:a3:a3:fd:8a:c5:2c:72:f2:04:7e:67:9f:84:da:50:c6:
         5b:20:e0:d2:d8:5d:a2:5c:1f:f8:97:f1:ce:37:44:c3:c1:e9:
         ef:85:a7:cb:f7:c2:3d:75:6c:72:7a:59:4f:5b:62:86:47:19:
         5a:94:b4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 07:36:21 2024 by rpki-client on console-ams.rpki-client.org