Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136342e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          CWz40LhynfJ+8Iju39+rqLk61ZuFekbzxpa+fuTTP5w=
Subject key identifier:   7C:D6:05:AC:20:A1:CD:34:40:2E:31:F1:B1:98:BB:51:FF:48:A1:45
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       2DF224F048014F4288296339E8632E1FBEB08994
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136342e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:31 +0000
ROA not before:           Mon 01 Jul 2024 01:00:31 +0000
ROA not after:            Mon 30 Jun 2025 01:05:31 +0000
asID:                     38496
IP address blocks:        182.23.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:24:f0:48:01:4f:42:88:29:63:39:e8:63:2e:1f:be:b0:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:31 2024 GMT
            Not After : Jun 30 01:05:31 2025 GMT
        Subject: CN=7CD605AC20A1CD34402E31F1B198BB51FF48A145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5c:77:b7:c3:36:4b:95:d5:60:6f:54:28:bd:
                    ce:31:2e:e2:89:20:1e:5b:96:43:5f:73:63:1c:7f:
                    13:9c:47:59:52:45:28:08:da:5a:f3:3b:5d:4f:00:
                    73:27:5a:b1:2d:eb:c9:98:a4:34:53:f2:fc:4d:d6:
                    b9:b8:67:23:84:23:5d:7b:04:e6:2c:44:37:ec:b3:
                    d8:82:1f:23:f1:c8:38:96:f2:b5:06:18:d4:2a:a5:
                    48:cc:3d:eb:76:59:d6:d9:16:74:38:ed:53:5c:10:
                    2c:2c:e9:84:cd:c5:9d:5d:bd:ea:2c:7f:f6:39:b4:
                    ef:af:36:b6:57:99:89:89:58:2d:0e:1b:47:90:75:
                    a0:ca:85:78:e6:ab:32:3c:80:68:75:06:3f:0d:ee:
                    d4:47:97:54:82:33:fb:30:62:c9:d5:ad:2c:50:d5:
                    86:c6:82:3c:07:92:e0:c6:85:d9:ba:11:51:09:bc:
                    34:df:2a:1f:7d:e7:d4:90:81:77:1c:1d:e7:f9:d2:
                    6f:2e:0b:80:02:06:b8:02:17:0c:f1:fa:8a:50:ff:
                    d9:26:3c:44:8a:4d:c3:73:9b:59:38:25:23:d6:1b:
                    0d:52:e4:2b:64:07:fa:02:a4:1d:57:5c:0b:14:94:
                    d6:d9:81:bf:44:69:b3:41:d6:de:c3:fc:85:87:0e:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D6:05:AC:20:A1:CD:34:40:2E:31:F1:B1:98:BB:51:FF:48:A1:45
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136342e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:59:87:de:7c:bc:ba:ce:b4:f8:2e:a6:32:7b:05:6f:b4:
         65:c7:00:67:ba:16:da:d4:e1:97:c7:4d:61:10:2e:15:6a:19:
         39:e8:9d:16:03:90:d2:81:96:2f:67:bc:c7:6d:c5:27:72:59:
         3e:3d:0f:8d:80:9a:77:f7:ad:7e:2d:f5:3a:57:8a:07:5c:32:
         37:67:24:1b:0e:d6:1b:a5:48:a8:e8:67:47:1e:c0:d1:fc:86:
         28:76:f9:68:9a:89:72:b2:5a:0b:86:e7:35:12:6b:24:26:72:
         2e:40:6e:07:54:45:4f:d2:3c:59:fc:79:ce:67:6a:0b:1c:60:
         8e:29:dc:b0:b8:76:f8:5b:f1:9d:94:fd:18:c4:b2:47:97:ce:
         46:17:46:be:f3:2e:8e:74:0b:24:ea:16:f0:b6:ee:72:d4:b1:
         74:95:81:22:b3:57:18:56:23:dd:09:fa:40:78:63:2f:f6:dc:
         e8:fa:b2:38:02:cb:cb:b1:8a:3f:1e:57:b2:42:f9:62:77:23:
         43:0c:55:7f:c7:11:0b:aa:6c:f1:ca:b9:12:00:9e:53:5c:50:
         d9:0c:27:c7:b8:69:6f:a0:f4:96:26:4b:a7:21:fe:4e:52:26:
         93:99:90:8e:82:ad:51:22:d4:48:18:45:cf:22:8f:e3:f7:2b:
         5c:26:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org