Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136332e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          eB6uyTAV4vW6vtQDrSQtXmAdV+WPcSwuyB4nHhz9oEs=
Subject key identifier:   5E:31:BC:8A:75:DD:87:A4:2B:75:63:9D:FA:F5:E7:67:35:43:AF:11
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       737D274F0EFFFB1F96D8C2536B611A9A831D0308
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136332e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:32 +0000
ROA not before:           Mon 01 Jul 2024 01:00:32 +0000
ROA not after:            Mon 30 Jun 2025 01:05:32 +0000
asID:                     38496
IP address blocks:        182.23.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:27:4f:0e:ff:fb:1f:96:d8:c2:53:6b:61:1a:9a:83:1d:03:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:32 2024 GMT
            Not After : Jun 30 01:05:32 2025 GMT
        Subject: CN=5E31BC8A75DD87A42B75639DFAF5E7673543AF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e4:76:d1:41:8d:63:e9:d0:99:f2:bc:75:b4:
                    55:3d:7b:fa:c6:36:ef:99:79:58:10:1f:86:fe:8e:
                    d3:7a:d5:3c:84:a2:bc:2d:ad:e7:3a:be:b4:7c:1e:
                    49:85:6c:f5:27:9f:3b:6d:f0:3a:34:a0:e6:b0:65:
                    99:49:3f:42:e1:af:a8:8b:1a:7b:21:06:18:b2:de:
                    b5:95:58:e3:f1:db:ce:3d:16:59:aa:5d:c7:83:91:
                    85:7e:cc:fc:4d:d9:88:43:2e:d6:87:c7:cf:ec:91:
                    5b:dc:e0:5d:25:df:4d:37:63:2e:0b:4f:cf:b3:f8:
                    fa:d9:1d:4b:b8:ac:78:be:c9:87:1c:3e:6a:30:fb:
                    bb:97:67:d7:57:01:48:f0:af:74:c0:c9:91:cb:89:
                    04:9a:c1:3c:b7:2b:2d:e4:79:4a:c6:24:bd:b5:f6:
                    b6:00:6d:ee:55:4f:ca:4b:6b:88:8b:76:34:dd:4b:
                    f2:6b:ee:e4:b3:62:04:8c:0b:8d:bb:4c:79:9a:02:
                    c6:a3:dd:f8:38:8f:ad:d8:98:2f:4b:e2:f2:71:c0:
                    27:09:03:af:63:eb:53:13:d9:3d:cb:1d:04:93:4f:
                    ca:2c:ec:13:5c:10:f3:3d:69:fa:1a:42:7c:dd:12:
                    db:39:b9:c7:ae:84:f1:ac:c8:71:ba:97:58:9b:7f:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:31:BC:8A:75:DD:87:A4:2B:75:63:9D:FA:F5:E7:67:35:43:AF:11
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8e:fe:04:f4:5f:33:14:12:ef:27:50:d1:18:85:e8:40:c2:
         10:56:ac:24:ce:f5:97:3a:0e:f7:6c:b5:bf:e2:f5:1a:9a:01:
         f7:96:94:cf:78:9f:f4:5e:b5:69:20:f9:fd:4f:ee:17:3d:da:
         68:43:36:05:ca:38:e3:c8:02:4c:dc:dc:4c:a8:ed:6b:44:6b:
         c4:9d:4d:90:b1:1b:9c:16:c6:fe:a4:ff:2b:1f:db:55:bc:28:
         90:91:8c:2c:15:52:a1:8e:53:a4:a2:b2:8b:09:ac:fb:3f:8e:
         2a:a1:27:e3:1c:50:be:c2:ba:80:ca:11:ee:2d:97:ed:11:79:
         6f:fd:51:fa:f8:15:e2:53:3b:02:9b:93:20:1e:61:37:e3:6e:
         33:6e:ca:9a:90:7b:0e:ce:01:3f:7d:53:79:3f:59:dc:42:51:
         82:4f:3e:4c:7a:56:14:94:4f:e9:b1:40:de:d6:d9:fa:6a:75:
         6e:02:06:e9:88:1f:84:d2:07:84:4d:7f:48:45:52:74:6c:ef:
         f4:6a:11:af:e7:3e:b6:ba:ee:69:e8:f2:c0:e9:5a:9b:0f:49:
         fd:80:3d:54:4c:bc:a9:06:35:71:d8:3e:3a:b4:98:3f:cc:22:
         62:b1:5f:1d:fd:97:fa:b1:c0:2f:e9:7c:a3:08:21:18:bc:f5:
         74:63:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org