Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3136362e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          JbDrUwImRCLddaCB+CrNEvWW2EOiGiOi9cvdz6ozxiU=
Subject key identifier:   CE:87:C4:EC:6B:B6:F1:3F:F8:6C:13:83:70:3D:C9:52:2C:09:D1:63
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       6DDEE7073EAF3BFED6359F28329698171541779C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 31 Jul 2023 00:09:34 +0000
ROA not before:           Mon 31 Jul 2023 00:04:34 +0000
ROA not after:            Mon 29 Jul 2024 00:09:34 +0000
asID:                     38496
IP address blocks:        182.23.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:de:e7:07:3e:af:3b:fe:d6:35:9f:28:32:96:98:17:15:41:77:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul 31 00:04:34 2023 GMT
            Not After : Jul 29 00:09:34 2024 GMT
        Subject: CN=CE87C4EC6BB6F13FF86C1383703DC9522C09D163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:d2:78:9f:c0:0f:81:1a:96:6a:7b:18:dd:
                    da:97:02:93:3f:00:d4:f1:d9:e2:bb:ce:a2:ef:24:
                    58:cf:54:0d:c3:f6:7e:81:f9:a1:75:5b:28:ac:e4:
                    8a:43:9c:84:9d:25:88:75:e9:15:80:b7:cd:4a:fc:
                    33:26:79:b9:27:3b:17:7c:95:80:23:54:b7:55:9f:
                    f6:a2:ea:e9:ea:a7:7b:31:e1:9b:af:ca:26:8c:6c:
                    78:a2:fd:bb:c7:ca:20:37:16:5f:d1:1c:e5:b5:1f:
                    01:78:68:21:bc:57:d5:1b:88:c6:94:0d:17:31:e4:
                    b0:4b:4d:49:0b:a4:3d:89:9d:a2:61:5b:a1:d2:b2:
                    33:2d:87:1a:94:26:66:13:ca:26:40:2d:82:ed:a1:
                    db:16:12:44:80:ae:59:ef:69:a3:60:89:ad:2d:40:
                    27:6e:75:1a:ce:0d:e4:78:70:7d:e6:2a:ac:50:a4:
                    66:33:33:fe:2a:d5:4d:d2:b9:f2:24:90:2c:7c:f5:
                    a4:9d:13:7f:43:99:5d:c4:35:24:e4:e0:4d:43:6a:
                    d4:eb:70:1e:a2:b0:21:03:82:ae:35:b1:e9:4a:74:
                    c1:87:e1:5b:fd:d0:ea:d6:47:92:e0:83:3a:6c:02:
                    d0:7d:49:51:9c:18:f9:5b:74:da:b7:97:5a:cd:81:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:C4:EC:6B:B6:F1:3F:F8:6C:13:83:70:3D:C9:52:2C:09:D1:63
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3136362e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:f6:6f:34:0a:69:b3:9a:99:8e:e5:db:e3:4e:e2:4c:5d:
         8c:e4:06:3e:38:91:09:67:c6:d0:db:ce:3c:8a:69:05:30:63:
         33:e6:94:11:c2:cb:c4:54:29:66:5a:9a:25:f3:c1:dd:71:be:
         90:ee:ee:6e:c6:dd:62:e2:12:ff:20:64:2e:75:1e:10:cf:1d:
         c1:e0:9b:3e:a4:e3:e4:ff:91:82:e1:45:0d:20:8f:0c:16:84:
         0d:a4:56:af:3a:4a:d9:a5:ce:2f:1d:3e:d5:1d:79:5c:6c:f8:
         e2:50:8a:ae:8f:56:70:9c:59:25:0c:db:97:e9:de:e1:0f:3d:
         d2:7e:21:10:90:85:c2:b6:4a:dc:6e:2e:92:cf:aa:2c:f0:ad:
         63:af:20:53:16:23:ab:0c:1f:e2:d6:ce:4d:8c:86:fd:f1:69:
         c1:79:b3:19:42:c8:26:9e:6b:07:21:92:46:10:2a:ae:51:88:
         07:f2:2f:c1:40:4e:bf:e5:1e:8a:f6:71:c0:18:2b:08:85:92:
         1b:4a:b7:14:4f:a9:da:62:d2:49:c6:00:da:a1:f9:69:cf:16:
         af:08:40:80:f4:b5:f3:da:73:54:87:48:a9:58:13:66:82:8c:
         df:a5:d7:77:38:7f:7c:e4:a6:cc:96:ff:2a:c1:68:ed:8a:88:
         a8:00:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org