Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338373535.roa
File:                     3138322e32332e3137302e302f32342d3234203d3e203338373535.roa (raw, json)
Hash identifier:          TWsolJGVdak3fM9hiAdGtcQQjkxkqUomczCTjem2h0I=
Subject key identifier:   5A:20:BF:40:C2:76:9C:ED:8A:E8:93:38:EA:0A:1D:22:04:9D:6C:35
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       7945694A6019C61887A73B655ED4AFB74BBFA328
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338373535.roa
Signing time:             Fri 29 Dec 2023 07:17:44 +0000
ROA not before:           Fri 29 Dec 2023 07:12:44 +0000
ROA not after:            Fri 27 Dec 2024 07:17:44 +0000
asID:                     38755
IP address blocks:        182.23.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:45:69:4a:60:19:c6:18:87:a7:3b:65:5e:d4:af:b7:4b:bf:a3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Dec 29 07:12:44 2023 GMT
            Not After : Dec 27 07:17:44 2024 GMT
        Subject: CN=5A20BF40C2769CED8AE89338EA0A1D22049D6C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:76:94:9f:ec:85:8c:29:45:16:b6:20:88:
                    1a:f3:f7:04:2f:24:55:3b:49:47:11:91:bd:79:af:
                    0a:a6:05:34:d1:7c:6a:ff:59:0b:ec:d6:c7:7e:85:
                    77:e8:42:3e:cd:64:31:e0:8f:05:1e:df:e2:47:2f:
                    b7:69:29:35:ae:cf:a8:e2:93:4a:5c:b9:82:12:a0:
                    96:68:e3:67:ff:a1:7d:4b:54:51:f5:23:a1:62:1c:
                    f7:c7:73:ed:91:16:56:7b:ac:90:07:29:bd:23:14:
                    35:49:f2:56:5b:74:13:42:c3:58:22:a8:6b:44:64:
                    90:b4:43:fe:01:b1:93:fc:d3:07:eb:16:89:0c:cf:
                    7f:b9:f4:d8:9f:2b:dd:6f:1e:27:76:87:11:94:47:
                    71:e2:e3:bb:c1:c7:13:79:4a:1e:b4:04:72:b7:10:
                    1e:67:54:8d:c1:60:3c:33:ae:08:1d:1f:98:08:ea:
                    eb:2f:83:88:2d:2e:95:be:b2:e0:16:25:7d:c1:15:
                    c8:56:71:ef:b2:ae:4b:4c:c7:f5:ce:fe:fa:ad:86:
                    a8:06:ef:dd:30:4d:22:d0:89:f3:4a:60:31:f6:93:
                    d6:f5:88:10:9a:66:10:d6:a0:92:7d:1e:13:d3:bf:
                    90:ec:ce:81:21:f1:a4:bf:7e:a6:8e:da:8a:4c:a9:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:BF:40:C2:76:9C:ED:8A:E8:93:38:EA:0A:1D:22:04:9D:6C:35
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137302e302f32342d3234203d3e203338373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:25:57:dd:2b:1f:99:4e:4a:45:ba:95:a0:dd:fe:18:3a:92:
         54:5c:33:e3:29:83:2d:6d:6e:ce:fb:9e:48:f5:ef:db:eb:90:
         61:5e:1d:63:70:28:ca:3e:95:1e:d2:87:34:51:38:18:13:e2:
         48:46:f6:a8:3d:d6:dc:d5:45:3f:ad:c2:5d:3d:8c:ef:f7:4d:
         07:99:aa:11:17:51:ae:21:f2:05:2a:4b:a4:e5:87:b8:e7:2d:
         37:a0:58:4e:62:7a:1e:4c:5d:4f:51:a6:53:fb:db:a9:a5:e9:
         73:b6:15:4a:b5:f3:d0:2b:55:a9:de:af:27:63:f8:6b:8f:39:
         1d:27:08:53:5c:22:9b:fc:1b:0e:be:a1:98:07:bd:63:10:aa:
         ce:cc:1a:dd:77:56:74:d3:86:05:58:ba:48:1b:8c:c8:8c:3a:
         c9:81:48:ee:35:74:49:a8:5f:2a:2e:dc:2f:5b:3e:c8:3c:e7:
         2b:88:34:cc:de:0d:e6:03:db:bd:7e:ae:59:5a:12:42:8c:01:
         8c:9e:4e:96:57:33:50:eb:60:7a:98:8d:b6:69:64:dc:08:7e:
         ee:7a:15:f0:91:38:70:40:fe:87:62:c0:a0:02:49:aa:f6:07:
         95:04:ff:06:01:2d:c8:35:2f:cc:fe:9b:4f:6d:d2:10:f6:63:
         5e:05:57:2b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeUVpSmAZxhiHpztlXtSvt0u/oygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yMzEyMjkwNzEyNDRaFw0yNDEyMjcwNzE3NDRaMDMxMTAvBgNV
BAMTKDVBMjBCRjQwQzI3NjlDRUQ4QUU4OTMzOEVBMEExRDIyMDQ5RDZDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jnaUn+yFjClFFrYgiBrz9wQv
JFU7SUcRkb15rwqmBTTRfGr/WQvs1sd+hXfoQj7NZDHgjwUe3+JHL7dpKTWuz6ji
k0pcuYISoJZo42f/oX1LVFH1I6FiHPfHc+2RFlZ7rJAHKb0jFDVJ8lZbdBNCw1gi
qGtEZJC0Q/4BsZP80wfrFokMz3+59NifK91vHid2hxGUR3Hi47vBxxN5Sh60BHK3
EB5nVI3BYDwzrggdH5gI6usvg4gtLpW+suAWJX3BFchWce+yrktMx/XO/vqthqgG
790wTSLQifNKYDH2k9b1iBCaZhDWoJJ9HhPTv5DszoEh8aS/fqaO2opMqUdzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWiC/QMJ2nO2K6JM46godIgSdbDUwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXqjANBgkqhkiG
9w0BAQsFAAOCAQEAgSVX3SsfmU5KRbqVoN3+GDqSVFwz4ymDLW1uzvueSPXv2+uQ
YV4dY3Aoyj6VHtKHNFE4GBPiSEb2qD3W3NVFP63CXT2M7/dNB5mqERdRriHyBSpL
pOWHuOctN6BYTmJ6HkxdT1GmU/vbqaXpc7YVSrXz0CtVqd6vJ2P4a485HScIU1wi
m/wbDr6hmAe9YxCqzswa3XdWdNOGBVi6SBuMyIw6yYFI7jV0SahfKi7cL1s+yDzn
K4g0zN4N5gPbvX6uWVoSQowBjJ5OllczUOtgepiNtmlk3Ah+7noV8JE4cED+h2LA
oAJJqvYHlQT/BgEtyDUvzP6bT23SEPZjXgVXKw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org