Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137312e302f32342d3234203d3e20313337333436.roa
File:                     3138322e32332e3137312e302f32342d3234203d3e20313337333436.roa (raw, json)
Hash identifier:          siOr2wjjprfrpgpsXa+EX3Hn3ciUEFP4lPaZ0iUrXP0=
Subject key identifier:   FB:A4:CE:C7:D1:6F:DC:78:D9:BC:DD:75:0E:48:BE:B5:42:AB:41:3B
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       64E36CFD61D8F22E6ADAF58EFDB2D03EB9D3544F
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137312e302f32342d3234203d3e20313337333436.roa
Signing time:             Mon 01 Jul 2024 01:05:33 +0000
ROA not before:           Mon 01 Jul 2024 01:00:33 +0000
ROA not after:            Mon 30 Jun 2025 01:05:33 +0000
asID:                     137346
IP address blocks:        182.23.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e3:6c:fd:61:d8:f2:2e:6a:da:f5:8e:fd:b2:d0:3e:b9:d3:54:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:33 2024 GMT
            Not After : Jun 30 01:05:33 2025 GMT
        Subject: CN=FBA4CEC7D16FDC78D9BCDD750E48BEB542AB413B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:b2:00:41:0f:8b:fa:af:48:0a:c5:4f:a0:
                    c5:f7:5c:63:dc:39:9d:64:e2:c3:8f:fb:e2:a4:87:
                    e0:74:3f:7f:fe:ce:a7:0b:fc:7e:a5:ec:b4:c0:b0:
                    34:20:f7:24:47:5e:ec:7c:c6:2c:b3:cf:47:5a:25:
                    fe:8b:d3:7b:b7:30:76:a7:cc:95:93:e0:12:15:b4:
                    03:8a:9f:27:3d:44:fa:97:07:47:6d:de:3b:aa:f2:
                    f0:d0:8c:4b:9c:54:51:fc:12:86:0c:c8:01:04:97:
                    c0:26:38:05:38:ce:01:1a:27:59:48:76:19:2b:1b:
                    53:f2:dc:77:93:cd:69:f8:22:85:75:7f:2b:80:e5:
                    4e:2c:25:5c:7c:73:50:62:55:9f:b5:00:46:3f:90:
                    37:1a:93:8d:e9:3a:a7:7b:9d:14:dc:2f:c4:c9:b7:
                    05:6d:7f:35:86:42:b4:57:88:eb:45:d4:ab:2a:78:
                    bb:fe:20:58:e1:1b:5f:da:97:5e:54:dc:99:f8:3c:
                    50:da:e5:42:2f:89:d6:73:c3:ee:84:63:ae:42:5e:
                    07:54:de:e1:6a:b3:1a:c0:08:d7:72:35:d0:97:03:
                    43:07:99:5b:bd:c4:b7:8d:61:08:7d:68:a4:aa:7f:
                    6f:b5:a7:ec:f8:61:46:f2:6d:fd:6a:90:b8:22:ee:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A4:CE:C7:D1:6F:DC:78:D9:BC:DD:75:0E:48:BE:B5:42:AB:41:3B
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137312e302f32342d3234203d3e20313337333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:ff:e0:f1:32:94:f2:a9:73:ff:62:05:07:e5:7b:11:bf:
         ea:99:00:04:45:2b:70:a4:20:f9:01:03:5a:38:40:51:1d:3e:
         d9:0f:1c:5c:09:ed:d6:f8:8e:13:c7:6b:02:75:f9:b9:be:52:
         a8:a9:3f:5e:8e:dd:4e:80:8c:e6:5c:44:08:51:07:a1:53:dc:
         2a:30:ab:da:1e:5c:00:99:71:c9:d8:5c:26:92:63:66:af:1f:
         fe:4f:c0:ce:4f:a1:30:ef:25:13:90:37:17:ed:b9:26:c1:03:
         b5:ba:7c:0e:1a:0d:52:6f:51:e4:37:7c:7a:c3:bb:f1:16:5b:
         21:ce:78:4d:0d:a9:8e:f9:ed:ca:b4:74:6a:e0:a2:e0:a7:b1:
         1d:0f:98:c8:6e:10:88:51:22:83:63:8b:dc:51:14:51:88:f3:
         4c:74:e5:79:a0:ab:2b:12:25:19:dc:b2:d3:3e:20:32:8d:79:
         c8:bf:9e:6f:2b:ab:9f:34:1c:38:7c:ab:fc:f0:f3:78:23:1c:
         60:d0:cb:e8:57:74:a9:5c:6c:db:e4:03:26:56:8b:0c:51:07:
         e3:f0:a9:3d:d7:ce:9b:32:12:53:09:d8:b3:36:d3:a8:a1:eb:
         32:72:fb:41:76:4b:60:06:b6:d9:89:70:01:69:b9:01:a4:15:
         a6:5a:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org