Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136302e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136302e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          H1+C0SfAkDMXmGqIpAyAaujelKKWcwPzk7nppwH8x1A=
Subject key identifier:   41:F6:53:E1:66:6E:F2:5C:EE:7E:06:01:9F:2A:C5:1A:B7:0B:DD:AA
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       7B7DE85CE0240CB82585C54D8B64F89F0010A99B
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136302e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:32 +0000
ROA not before:           Mon 01 Jul 2024 01:00:32 +0000
ROA not after:            Mon 30 Jun 2025 01:05:32 +0000
asID:                     38496
IP address blocks:        182.23.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:e8:5c:e0:24:0c:b8:25:85:c5:4d:8b:64:f8:9f:00:10:a9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:32 2024 GMT
            Not After : Jun 30 01:05:32 2025 GMT
        Subject: CN=41F653E1666EF25CEE7E06019F2AC51AB70BDDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:31:86:be:77:c8:bf:48:7d:ad:64:e3:f5:
                    fb:60:81:ec:38:63:db:29:61:ff:66:39:47:3e:f3:
                    7c:c1:0e:51:10:68:a9:56:65:a3:36:e1:3f:a4:1f:
                    a7:fa:84:a2:82:62:49:f5:c4:57:4a:28:76:ec:e7:
                    28:e8:61:b6:70:bf:fd:0e:90:9a:fa:c5:0c:b6:69:
                    b4:16:68:1c:06:7f:64:f5:d9:dd:b7:e5:b7:d5:3f:
                    ed:9c:d7:68:df:35:ed:c0:ab:80:be:58:c6:25:92:
                    6a:74:36:e6:b5:08:40:60:fd:dd:ac:07:15:40:fd:
                    d7:6c:12:c4:83:73:d9:bd:0d:8f:f9:37:23:e8:2a:
                    61:2f:9a:54:2a:b1:0a:40:b4:9d:c9:9c:7d:75:0f:
                    f3:9d:f3:0c:08:7a:a3:5f:94:2e:81:81:25:3f:de:
                    67:08:65:53:2c:8e:af:55:b2:ca:61:92:7c:5f:ae:
                    70:e8:36:48:cf:c2:28:af:4a:48:73:e9:da:3b:ef:
                    67:d0:7e:65:75:13:dd:b8:6f:bf:84:a9:45:ec:b1:
                    24:16:f5:d1:41:db:93:5b:36:26:07:50:b1:7f:76:
                    d7:17:d1:2a:6d:c9:b8:bd:94:ff:ef:66:60:e6:5f:
                    f6:c5:9e:51:71:8d:e3:f7:e2:cf:58:9f:ac:20:66:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:53:E1:66:6E:F2:5C:EE:7E:06:01:9F:2A:C5:1A:B7:0B:DD:AA
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136302e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:dd:5d:30:20:aa:ad:eb:d9:98:4e:4f:01:4a:d9:51:36:
         88:94:fc:10:c8:cc:a6:30:5e:11:1f:47:3d:0d:00:27:db:2f:
         26:90:31:69:2c:b0:05:c6:4e:e5:f1:03:14:3f:50:cf:04:f0:
         fb:0a:a3:68:68:56:b4:00:fa:1d:e7:42:4a:5d:1d:51:8b:ab:
         69:06:ca:aa:bc:02:4d:a1:f3:4e:bf:f3:4c:03:18:17:c7:79:
         a5:ca:e1:ab:a4:a8:9f:7a:97:d1:4b:49:02:10:ab:90:3e:44:
         5e:c0:d7:12:d4:c4:98:43:33:be:00:8c:0f:d1:c8:4e:98:39:
         53:61:b6:86:59:d3:7a:32:f6:e7:68:f8:79:f0:41:24:1b:a4:
         c9:af:f8:f6:d2:e8:06:ff:28:42:02:c0:0f:f6:36:01:9a:f1:
         9f:80:23:9a:15:5a:c8:d8:da:56:7a:e7:4a:81:be:67:9b:a6:
         72:ae:ea:f3:16:96:be:9b:6c:4b:1c:fb:a3:6c:47:1c:5f:05:
         14:4d:45:1f:ce:42:21:f3:02:0a:7a:53:df:6d:4b:3d:27:59:
         58:b6:e3:a0:56:fd:30:95:76:31:b6:40:28:74:62:2f:20:f9:
         14:6b:06:64:eb:71:7c:44:a2:76:10:19:8f:61:8d:99:0e:e1:
         74:c2:65:4d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe33oXOAkDLglhcVNi2T4nwAQqZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzJaFw0yNTA2MzAwMTA1MzJaMDMxMTAvBgNV
BAMTKDQxRjY1M0UxNjY2RUYyNUNFRTdFMDYwMTlGMkFDNTFBQjcwQkREQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErTGGvnfIv0h9rWTj9ftggew4
Y9spYf9mOUc+83zBDlEQaKlWZaM24T+kH6f6hKKCYkn1xFdKKHbs5yjoYbZwv/0O
kJr6xQy2abQWaBwGf2T12d235bfVP+2c12jfNe3Aq4C+WMYlkmp0Nua1CEBg/d2s
BxVA/ddsEsSDc9m9DY/5NyPoKmEvmlQqsQpAtJ3JnH11D/Od8wwIeqNflC6BgSU/
3mcIZVMsjq9VssphknxfrnDoNkjPwiivSkhz6do772fQfmV1E924b7+EqUXssSQW
9dFB25NbNiYHULF/dtcX0Sptybi9lP/vZmDmX/bFnlFxjeP34s9Yn6wgZvGpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQfZT4WZu8lzufgYBnyrFGrcL3aowHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXoDANBgkqhkiG
9w0BAQsFAAOCAQEAU/PdXTAgqq3r2ZhOTwFK2VE2iJT8EMjMpjBeER9HPQ0AJ9sv
JpAxaSywBcZO5fEDFD9QzwTw+wqjaGhWtAD6HedCSl0dUYuraQbKqrwCTaHzTr/z
TAMYF8d5pcrhq6Son3qX0UtJAhCrkD5EXsDXEtTEmEMzvgCMD9HITpg5U2G2hlnT
ejL252j4efBBJBukya/49tLoBv8oQgLAD/Y2AZrxn4AjmhVayNjaVnrnSoG+Z5um
cq7q8xaWvptsSxz7o2xHHF8FFE1FH85CIfMCCnpT321LPSdZWLbjoFb9MJV2MbZA
KHRiLyD5FGsGZOtxfESidhAZj2GNmQ7hdMJlTQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org