Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e362e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          RmApxSwS4OiDL4aLvXKxIZ6jChDTFwTdBju9POPNyYQ=
Subject key identifier:   03:7C:3A:FC:CC:D5:98:1C:92:DD:7F:E5:FA:0F:C4:BB:9A:CE:DC:50
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       61A216FD8E2B5B630343A8CD2A8D64B83D6C4394
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 17 Aug 2023 06:00:00 +0000
ROA not before:           Thu 17 Aug 2023 05:55:00 +0000
ROA not after:            Thu 15 Aug 2024 06:00:00 +0000
asID:                     46049
IP address blocks:        182.255.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a2:16:fd:8e:2b:5b:63:03:43:a8:cd:2a:8d:64:b8:3d:6c:43:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Aug 17 05:55:00 2023 GMT
            Not After : Aug 15 06:00:00 2024 GMT
        Subject: CN=037C3AFCCCD5981C92DD7FE5FA0FC4BB9ACEDC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:41:b9:e7:64:da:79:a0:cd:6f:6b:e3:10:
                    0c:c6:33:d3:d2:d6:90:2d:32:7c:4f:bd:21:e8:0f:
                    72:d1:39:64:2c:52:7b:8a:b1:be:d3:3b:65:be:bc:
                    96:49:5f:6a:44:5f:42:1b:3c:d5:9f:bc:c2:a2:34:
                    3e:6e:9a:92:e8:97:a8:65:4e:42:a5:53:ee:84:46:
                    f7:bd:b6:8f:ff:9a:19:c2:88:8e:91:a6:09:45:f9:
                    c7:83:39:28:91:d2:58:85:71:6c:4b:40:78:b6:2e:
                    d2:2b:eb:ac:4c:4a:c4:83:f8:f9:67:be:25:85:e8:
                    24:c5:2a:1d:bd:48:5b:6d:9e:1a:66:9e:d0:f6:ae:
                    39:81:28:23:65:9a:e1:bd:df:af:a7:bf:98:8d:ca:
                    f0:7d:51:46:cf:f2:ec:5d:f4:41:86:5a:f1:0b:bf:
                    98:63:36:bf:0b:e2:62:be:df:91:77:66:32:49:a9:
                    84:81:39:0b:b9:bd:e7:ec:63:1c:e1:15:dd:b1:e6:
                    b9:6d:f2:1e:e9:70:e3:8c:5e:05:cd:92:70:86:c9:
                    b0:0f:1b:40:eb:6f:85:91:cf:aa:2d:79:7f:4d:ce:
                    d7:7c:ec:ca:b7:6f:fe:52:1a:71:ff:53:60:87:04:
                    92:e1:e6:be:56:ce:49:6f:37:4d:c0:53:65:20:81:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7C:3A:FC:CC:D5:98:1C:92:DD:7F:E5:FA:0F:C4:BB:9A:CE:DC:50
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:f1:d9:96:3d:bc:a4:49:d6:bc:a6:e7:8e:9a:03:4b:d6:
         97:3b:45:cd:62:ce:d7:93:ed:e8:b9:fc:5d:00:08:06:37:03:
         2a:c2:86:5f:5d:5a:8b:52:47:fc:a4:aa:dd:4f:95:1c:ca:14:
         7d:31:4f:05:39:4b:8f:a8:bc:b7:c7:b2:06:e9:ca:d8:52:87:
         9a:90:64:97:fb:63:0f:4b:53:17:5b:50:f5:9a:c4:f4:85:eb:
         0c:79:f2:76:fc:ef:7e:c1:e1:a7:b1:b2:dd:fd:5f:59:38:17:
         4a:13:ae:74:55:61:ea:7d:b1:5f:69:2c:a6:3b:30:e7:2a:90:
         3c:28:3a:6c:39:5e:72:d3:ab:6c:20:f4:09:c0:59:9d:88:5d:
         ed:fa:97:bf:53:c6:18:f7:71:98:f3:74:9e:45:57:07:a6:18:
         bd:86:4b:12:8d:af:65:f3:3b:99:c8:62:e5:ef:c2:94:3b:0b:
         04:7c:ae:98:bf:14:a9:4b:3f:08:c8:87:52:df:7a:3c:65:7a:
         07:3f:fc:f9:ac:6d:8b:a8:63:a4:77:4f:8c:80:de:6d:f6:21:
         1a:70:a0:f9:20:44:4d:27:49:9e:86:43:37:fc:36:d6:9a:b3:
         b8:c1:b7:79:b1:fd:5f:29:ed:e3:9c:e0:27:e2:c8:8d:46:05:
         93:d1:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org