Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136352e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136352e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          38ioJZW/ABooknHNj0Tjot6sL32L7CkQGE87RP4I9l4=
Subject key identifier:   B0:F9:E8:42:D6:30:3E:E2:13:C8:D7:84:67:4B:8F:CF:52:E4:0B:B1
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       269CBE55CFD772910D059E932DAF3ACA74BBBE15
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136352e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:32 +0000
ROA not before:           Mon 01 Jul 2024 01:00:32 +0000
ROA not after:            Mon 30 Jun 2025 01:05:32 +0000
asID:                     38496
IP address blocks:        182.23.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9c:be:55:cf:d7:72:91:0d:05:9e:93:2d:af:3a:ca:74:bb:be:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:32 2024 GMT
            Not After : Jun 30 01:05:32 2025 GMT
        Subject: CN=B0F9E842D6303EE213C8D784674B8FCF52E40BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:11:f1:2d:05:dd:4d:bf:36:0b:79:16:c0:d1:
                    1b:60:73:14:45:36:ab:7a:03:e1:01:09:96:4d:91:
                    86:34:9a:4e:89:d1:31:fc:97:54:8a:ae:ae:1f:79:
                    bd:cf:bb:7a:62:05:0d:b8:4e:8d:1a:09:99:c4:06:
                    48:b3:17:cd:a0:03:31:7d:5f:13:26:e4:5c:da:5d:
                    71:12:ba:63:c7:ad:cc:f5:ca:96:f5:eb:c9:9c:19:
                    cf:72:10:24:52:00:32:06:06:43:b1:27:4b:9a:21:
                    86:ce:ce:28:91:4b:8b:f6:fe:dd:f5:5a:a1:68:53:
                    61:a7:dc:9b:c1:fb:f4:ca:db:d4:67:11:32:ef:00:
                    f9:a0:df:fe:eb:69:8b:5f:7e:97:69:13:a7:07:93:
                    f7:4b:0f:30:ff:d6:cc:34:4d:dc:4d:d4:0a:07:a9:
                    92:36:cc:3c:95:70:11:5d:42:2f:aa:94:0d:00:b9:
                    7e:7d:d3:46:e6:6b:69:5c:f1:e0:00:d1:58:e9:75:
                    97:bd:8b:7e:93:4b:4b:b6:94:ea:da:5f:0f:66:2d:
                    72:5c:79:f0:10:d6:91:0f:8a:e7:47:06:f2:c9:b0:
                    f3:9f:fe:2f:59:99:c4:53:e1:e1:b4:23:56:37:bb:
                    3e:62:e1:9e:0c:b0:92:0e:23:84:9a:21:74:dc:66:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F9:E8:42:D6:30:3E:E2:13:C8:D7:84:67:4B:8F:CF:52:E4:0B:B1
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136352e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:5b:fc:ab:a5:8b:5a:fc:93:cd:28:f8:f8:a0:3a:0f:c3:
         6c:33:c6:67:61:e4:20:0b:3f:5b:4b:35:9d:47:91:b4:7b:27:
         f6:a0:c9:06:4f:fe:be:78:e2:26:a1:48:e5:48:5e:51:ef:72:
         d9:db:5c:91:bf:cb:90:8d:e1:cf:3f:04:1c:e4:8c:ae:f9:c9:
         c8:0e:15:2d:2b:28:5f:11:0c:c1:57:63:c4:44:ee:db:09:52:
         aa:60:61:9f:af:a2:97:63:24:39:01:cd:bc:55:02:55:3a:c5:
         b1:21:e4:5b:f7:5a:61:cc:1b:8a:04:ff:21:e6:bb:b0:ac:91:
         8f:6b:3b:35:b2:ee:1f:94:ce:16:e9:1c:43:3c:f4:77:e0:cc:
         c5:50:35:71:98:fd:63:08:f3:71:95:c7:e2:2e:a4:d5:e9:98:
         67:be:df:7b:69:a4:9f:3d:d2:6a:01:2a:ce:fb:d2:1e:88:50:
         fc:0b:f1:b9:78:d3:59:63:a2:e4:8e:49:d1:84:c4:e2:ed:a1:
         a1:cc:3e:64:d9:7f:99:25:9a:3a:4c:3d:e6:4e:5f:df:7f:0b:
         97:22:b6:3a:52:e9:db:62:d6:67:b2:be:7e:a8:5b:c2:25:50:
         11:17:c5:30:00:37:93:a8:ab:ba:8d:6b:ed:ec:c7:d3:de:d3:
         c9:50:14:78
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJpy+Vc/XcpENBZ6TLa86ynS7vhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzJaFw0yNTA2MzAwMTA1MzJaMDMxMTAvBgNV
BAMTKEIwRjlFODQyRDYzMDNFRTIxM0M4RDc4NDY3NEI4RkNGNTJFNDBCQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuEfEtBd1NvzYLeRbA0RtgcxRF
Nqt6A+EBCZZNkYY0mk6J0TH8l1SKrq4feb3Pu3piBQ24To0aCZnEBkizF82gAzF9
XxMm5FzaXXESumPHrcz1ypb168mcGc9yECRSADIGBkOxJ0uaIYbOziiRS4v2/t31
WqFoU2Gn3JvB+/TK29RnETLvAPmg3/7raYtffpdpE6cHk/dLDzD/1sw0TdxN1AoH
qZI2zDyVcBFdQi+qlA0AuX5900bma2lc8eAA0VjpdZe9i36TS0u2lOraXw9mLXJc
efAQ1pEPiudHBvLJsPOf/i9ZmcRT4eG0I1Y3uz5i4Z4MsJIOI4SaIXTcZrHtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsPnoQtYwPuITyNeEZ0uPz1LkC7EwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXpTANBgkqhkiG
9w0BAQsFAAOCAQEAj3hb/Kuli1r8k80o+PigOg/DbDPGZ2HkIAs/W0s1nUeRtHsn
9qDJBk/+vnjiJqFI5UheUe9y2dtckb/LkI3hzz8EHOSMrvnJyA4VLSsoXxEMwVdj
xETu2wlSqmBhn6+il2MkOQHNvFUCVTrFsSHkW/daYcwbigT/Iea7sKyRj2s7NbLu
H5TOFukcQzz0d+DMxVA1cZj9YwjzcZXH4i6k1emYZ77fe2mknz3SagEqzvvSHohQ
/AvxuXjTWWOi5I5J0YTE4u2hocw+ZNl/mSWaOkw95k5f338LlyK2OlLp22LWZ7K+
fqhbwiVQERfFMAA3k6iruo1r7ezH097TyVAUeA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org