Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          qDi1iSMJe3lUKOXBwY0h9wbDkwPo20gO/ePT1gxgcdQ=
Subject key identifier:   57:69:B7:4E:0B:30:E0:29:DF:74:0A:5B:58:5A:F9:33:A6:B6:AC:AB
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       2162E78A574BCDE11E4BA3E769C0D267014ED34E
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:32 +0000
ROA not before:           Mon 01 Jul 2024 01:00:32 +0000
ROA not after:            Mon 30 Jun 2025 01:05:32 +0000
asID:                     38496
IP address blocks:        182.23.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 08:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:e7:8a:57:4b:cd:e1:1e:4b:a3:e7:69:c0:d2:67:01:4e:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:32 2024 GMT
            Not After : Jun 30 01:05:32 2025 GMT
        Subject: CN=5769B74E0B30E029DF740A5B585AF933A6B6ACAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:9c:8d:16:44:b0:71:83:37:88:b0:fe:5c:
                    7c:52:9d:d6:fd:f3:9e:38:4a:13:15:82:e3:8a:70:
                    cb:74:57:21:55:46:a4:1b:93:55:29:47:fc:85:a1:
                    85:66:44:61:60:76:cc:c0:df:a5:e6:ce:75:a6:52:
                    49:c3:13:45:12:aa:b7:19:d8:59:1c:51:74:3a:55:
                    45:a6:29:55:e4:c1:db:e5:89:22:a9:ad:b5:76:b6:
                    4d:93:f6:f8:b2:b7:8b:73:53:3f:19:73:fc:d9:b9:
                    c8:65:91:cf:6f:ea:ef:7b:ef:80:ca:94:7b:ab:32:
                    bd:4b:8a:b1:ae:ed:bf:37:e7:71:bc:2a:eb:89:f2:
                    20:7c:29:d9:19:47:77:08:4e:60:f1:7a:aa:6c:52:
                    e7:bb:66:b2:77:66:b9:82:0b:be:9d:61:f1:3b:d0:
                    92:85:58:25:aa:b0:a2:59:76:3c:3b:3e:cc:70:4d:
                    eb:c2:78:96:0b:c6:57:7a:d7:c8:2e:17:2b:3d:f6:
                    02:67:2f:e0:3b:1a:3a:5d:d4:9c:8d:5e:4c:bb:d0:
                    e5:81:cc:18:07:47:ad:2c:42:90:b0:a1:89:a3:8a:
                    94:7a:d2:9c:05:6b:28:ba:37:07:45:d4:cd:b8:76:
                    ad:98:04:6f:40:ed:08:6d:51:b8:3e:84:13:87:3f:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:B7:4E:0B:30:E0:29:DF:74:0A:5B:58:5A:F9:33:A6:B6:AC:AB
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:de:39:f8:1e:3f:77:e1:b0:d1:d0:dc:9f:61:b6:36:78:
         62:05:e2:7e:e8:3d:42:e9:73:1d:50:59:d8:07:8f:26:9e:89:
         7d:b3:01:89:a7:68:b4:a6:f9:c0:5a:5e:8c:63:fc:1e:ec:e6:
         6c:43:b3:9e:90:b4:9e:3b:54:b2:b4:51:05:70:fb:5f:b9:c6:
         70:6a:d0:8d:8e:21:ab:cc:60:d8:87:c1:1c:43:59:2c:9b:54:
         29:72:32:36:b7:3c:05:f9:00:95:eb:c7:96:e5:72:8b:04:ee:
         fc:db:2e:a0:27:42:4c:65:1a:a3:85:a8:81:0c:1d:c6:73:04:
         2c:b6:85:b9:9a:73:09:0c:7c:31:cc:f9:c5:66:0a:05:76:23:
         40:c1:af:a6:b2:cb:c9:f6:04:72:e9:ff:25:4c:40:79:cc:ae:
         cf:6c:e2:01:9c:b0:7f:b0:45:dc:1d:23:f9:90:60:1d:3b:ea:
         b6:9f:05:41:6e:cc:b0:10:d0:e2:9d:08:ac:4d:85:5a:9c:b4:
         2b:ff:10:b9:6c:2a:cf:2e:7f:cd:c4:a5:21:30:8b:6f:3b:7d:
         48:c7:26:41:e0:1a:b0:bf:75:2a:66:c5:6b:69:01:ca:3d:ce:
         a3:bb:5f:2f:f8:40:c9:4a:d3:ee:b8:b6:97:75:c9:18:a6:ec:
         3b:3e:61:57
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIWLnildLzeEeS6PnacDSZwFO004wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzJaFw0yNTA2MzAwMTA1MzJaMDMxMTAvBgNV
BAMTKDU3NjlCNzRFMEIzMEUwMjlERjc0MEE1QjU4NUFGOTMzQTZCNkFDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYJyNFkSwcYM3iLD+XHxSndb9
8544ShMVguOKcMt0VyFVRqQbk1UpR/yFoYVmRGFgdszA36XmznWmUknDE0USqrcZ
2FkcUXQ6VUWmKVXkwdvliSKprbV2tk2T9viyt4tzUz8Zc/zZuchlkc9v6u9774DK
lHurMr1LirGu7b8353G8KuuJ8iB8KdkZR3cITmDxeqpsUue7ZrJ3ZrmCC76dYfE7
0JKFWCWqsKJZdjw7PsxwTevCeJYLxld618guFys99gJnL+A7Gjpd1JyNXky70OWB
zBgHR60sQpCwoYmjipR60pwFayi6NwdF1M24dq2YBG9A7QhtUbg+hBOHP2RdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV2m3Tgsw4CnfdApbWFr5M6a2rKswHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXpjANBgkqhkiG
9w0BAQsFAAOCAQEAD+zeOfgeP3fhsNHQ3J9htjZ4YgXifug9QulzHVBZ2AePJp6J
fbMBiadotKb5wFpejGP8HuzmbEOznpC0njtUsrRRBXD7X7nGcGrQjY4hq8xg2IfB
HENZLJtUKXIyNrc8BfkAlevHluVyiwTu/NsuoCdCTGUao4WogQwdxnMELLaFuZpz
CQx8Mcz5xWYKBXYjQMGvprLLyfYEcun/JUxAecyuz2ziAZywf7BF3B0j+ZBgHTvq
tp8FQW7MsBDQ4p0IrE2FWpy0K/8QuWwqzy5/zcSlITCLbzt9SMcmQeAasL91KmbF
a2kByj3Oo7tfL/hAyUrT7ri2l3XJGKbsOz5hVw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:29 2025 by rpki-client