Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e362e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          kuZS7DLLlgmMTpJidQpDkrlhCk8WMeXuEnGoo6NlY4A=
Subject key identifier:   B3:3A:71:13:09:00:62:E4:D5:C8:08:0B:20:92:AD:19:76:5E:B7:D9
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       381E5076D9ECBC2B2EE64FBA84E8B38AD13494DA
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 18 Jul 2024 06:00:00 +0000
ROA not before:           Thu 18 Jul 2024 05:55:00 +0000
ROA not after:            Thu 17 Jul 2025 06:00:00 +0000
asID:                     46049
IP address blocks:        182.255.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1e:50:76:d9:ec:bc:2b:2e:e6:4f:ba:84:e8:b3:8a:d1:34:94:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jul 18 05:55:00 2024 GMT
            Not After : Jul 17 06:00:00 2025 GMT
        Subject: CN=B33A7113090062E4D5C8080B2092AD19765EB7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bc:4f:51:fe:60:41:bb:5c:74:df:cb:59:ee:
                    34:25:02:e1:b4:98:f1:63:03:bd:d0:0b:30:2b:51:
                    4d:b0:77:ee:4e:8c:31:f8:74:7e:75:ea:be:3f:a5:
                    be:73:61:b9:fd:65:0b:25:46:8b:57:b4:cb:bf:11:
                    48:70:21:45:2e:95:39:93:ad:e6:28:03:00:b6:04:
                    cb:86:d8:83:74:f6:c2:60:fd:b6:af:4b:39:8f:85:
                    16:25:6f:83:a3:c2:21:05:ff:83:06:db:b7:5e:b1:
                    94:78:14:ee:84:25:f8:cd:a1:5d:17:76:cd:12:ef:
                    6d:4b:c6:f1:e6:2c:ea:21:6c:b7:5a:cb:83:ca:98:
                    0f:60:8d:c5:15:db:54:47:4a:3b:a4:18:38:e3:6c:
                    5a:2c:34:38:c4:a8:4f:52:6f:c4:20:68:89:28:48:
                    78:e1:5d:05:ad:26:15:44:01:51:77:26:28:11:55:
                    03:d4:88:5b:d5:e8:56:2f:23:15:79:36:88:a8:ba:
                    2a:4e:3a:9c:18:29:53:0a:ad:fe:bb:3c:e7:a4:69:
                    aa:11:18:12:34:dc:c5:cc:93:99:d0:78:a8:d6:94:
                    86:d6:36:e8:b4:ec:69:4a:4d:53:22:96:ca:1c:36:
                    f3:8d:8c:97:27:bb:40:50:5c:56:69:2c:7d:ea:a6:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3A:71:13:09:00:62:E4:D5:C8:08:0B:20:92:AD:19:76:5E:B7:D9
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:41:21:80:de:0b:f6:fc:15:45:87:d0:2e:f3:9a:14:39:
         fe:c1:d3:58:e2:18:c5:18:9e:34:7a:ce:2a:ac:16:1e:a3:82:
         ca:69:76:54:1e:23:b1:0f:7e:46:7e:3d:ac:19:86:af:95:e3:
         4f:be:48:c9:65:ba:76:85:6f:49:89:fa:23:c9:ba:96:17:9c:
         06:c7:f1:07:21:66:50:4c:c4:75:dc:90:ba:3e:c3:b9:75:75:
         98:2d:1e:0e:5b:47:72:86:1b:19:1b:40:85:13:9d:9a:08:91:
         e5:e2:63:35:03:f7:85:48:90:8a:e5:91:73:5d:81:12:9a:ae:
         d5:0e:95:28:f4:29:66:8f:32:45:5a:df:ab:45:3b:00:3c:a1:
         fc:9f:78:ed:2c:bb:fe:49:8e:23:a7:92:d9:c4:b3:e9:14:39:
         72:4d:bd:87:ec:8d:61:02:13:e4:a3:93:c2:ea:41:17:ca:c5:
         aa:e2:e8:11:38:2a:00:bc:fb:57:fa:fe:aa:55:e1:9d:9a:a3:
         a8:35:fa:fc:14:9a:5f:61:4e:c0:e4:4f:4a:d7:29:e7:d8:5c:
         e6:cd:0f:44:67:4a:d3:9d:d3:22:e5:1e:64:67:d3:fb:ba:c5:
         2e:0f:4a:d5:16:63:45:88:94:c9:59:26:77:db:c6:bd:c7:e9:
         73:f2:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org