Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137322e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3137322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          eNTaOf5lG4cijLeEZJ8FLWEIW57Z/OktLxiVGtdS9ec=
Subject key identifier:   1D:E9:43:28:1D:A3:B2:33:B0:C4:FE:D5:44:79:CB:63:AE:B7:E8:3C
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       7D470E00932AE799ED5F581ECD522B37E20DFA7E
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137322e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:31 +0000
ROA not before:           Mon 01 Jul 2024 01:00:31 +0000
ROA not after:            Mon 30 Jun 2025 01:05:31 +0000
asID:                     38496
IP address blocks:        182.23.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 08:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:47:0e:00:93:2a:e7:99:ed:5f:58:1e:cd:52:2b:37:e2:0d:fa:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:31 2024 GMT
            Not After : Jun 30 01:05:31 2025 GMT
        Subject: CN=1DE943281DA3B233B0C4FED54479CB63AEB7E83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:ce:b1:15:3d:82:d7:32:cf:b3:7a:d7:31:
                    66:87:cd:ea:41:5e:f6:7d:8f:68:45:4a:25:68:29:
                    84:b6:41:e2:2f:24:96:a0:fa:30:88:82:fb:8c:b1:
                    7e:5d:59:9f:37:c5:39:bb:84:77:62:9d:24:89:71:
                    69:04:40:85:84:f0:85:1c:60:7a:d6:7c:0e:57:d0:
                    2e:bf:75:3c:3e:60:4a:5a:f9:15:68:51:c0:96:e3:
                    14:af:29:ad:fe:24:7d:94:98:a6:d3:61:8c:a6:63:
                    99:76:06:47:9a:a2:5d:06:cf:49:81:78:3e:0b:b5:
                    34:ea:e5:62:6c:41:5f:72:f1:fb:0d:59:45:ab:b0:
                    57:95:0c:28:84:9e:cf:90:78:5d:cb:63:f3:f7:f6:
                    e4:c5:48:ca:06:35:23:54:4b:16:92:95:1e:19:00:
                    5b:2f:b5:61:ac:6b:b1:ab:77:fd:65:17:0e:2b:61:
                    9e:8e:e7:62:9b:28:6b:04:4f:3e:16:9d:fb:71:4c:
                    cd:db:a5:75:e2:3f:eb:3c:1b:ea:3d:df:75:73:27:
                    0d:fd:58:60:56:e7:c8:03:dc:7a:97:ed:ae:cb:51:
                    7d:1b:85:5a:7f:58:da:bb:6c:17:b3:4b:ef:07:f8:
                    f9:57:d7:7d:6c:f0:bd:1a:69:02:7d:2c:5d:32:f8:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:43:28:1D:A3:B2:33:B0:C4:FE:D5:44:79:CB:63:AE:B7:E8:3C
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137322e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:3a:09:e4:4c:31:c2:97:f1:95:d4:98:46:19:46:b3:34:eb:
         07:b7:a0:4e:b9:e3:ae:94:eb:80:81:1b:af:1c:65:c5:99:b2:
         b9:23:06:f7:e0:25:ca:1a:8d:e5:88:82:de:8a:5c:58:59:b2:
         0a:be:b1:cc:fa:3d:d3:35:e1:67:a0:ec:19:fd:10:56:8e:6a:
         47:36:69:be:a2:fa:42:f0:0c:e1:e4:12:98:69:b4:b7:2b:a6:
         f7:74:89:88:af:bd:c8:f4:dd:32:c4:65:81:70:89:c3:3d:73:
         d3:50:92:1f:1f:7c:f6:cb:6b:e3:18:df:ad:c8:3a:99:13:74:
         53:c3:b0:f5:9e:3e:3d:94:a9:11:87:a2:b0:79:7f:85:68:43:
         7c:d3:9f:39:e7:b6:5b:31:cc:38:02:96:47:ed:fb:a8:3d:02:
         dc:ba:11:9f:a2:da:36:7b:ea:65:72:5e:ad:0d:8d:0c:52:ae:
         9f:e9:86:d6:45:e6:26:ec:60:32:a4:1e:91:35:e7:2d:c6:93:
         05:90:d8:ab:60:d7:25:99:dd:c8:ab:d1:61:7d:e8:bd:57:cd:
         73:a5:26:32:63:b5:4b:d5:48:50:dd:e2:d8:89:f8:82:cb:f8:
         ad:4c:f3:3f:a1:91:f7:75:38:4a:6d:76:68:50:96:ab:92:e8:
         7f:96:fa:2a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfUcOAJMq55ntX1gezVIrN+IN+n4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzFaFw0yNTA2MzAwMTA1MzFaMDMxMTAvBgNV
BAMTKDFERTk0MzI4MURBM0IyMzNCMEM0RkVENTQ0NzlDQjYzQUVCN0U4M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQc6xFT2C1zLPs3rXMWaHzepB
XvZ9j2hFSiVoKYS2QeIvJJag+jCIgvuMsX5dWZ83xTm7hHdinSSJcWkEQIWE8IUc
YHrWfA5X0C6/dTw+YEpa+RVoUcCW4xSvKa3+JH2UmKbTYYymY5l2Bkeaol0Gz0mB
eD4LtTTq5WJsQV9y8fsNWUWrsFeVDCiEns+QeF3LY/P39uTFSMoGNSNUSxaSlR4Z
AFsvtWGsa7Grd/1lFw4rYZ6O52KbKGsETz4WnftxTM3bpXXiP+s8G+o933VzJw39
WGBW58gD3HqX7a7LUX0bhVp/WNq7bBezS+8H+PlX131s8L0aaQJ9LF0y+Nc1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHelDKB2jsjOwxP7VRHnLY6636DwwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXrDANBgkqhkiG
9w0BAQsFAAOCAQEAqToJ5EwxwpfxldSYRhlGszTrB7egTrnjrpTrgIEbrxxlxZmy
uSMG9+AlyhqN5YiC3opcWFmyCr6xzPo90zXhZ6DsGf0QVo5qRzZpvqL6QvAM4eQS
mGm0tyum93SJiK+9yPTdMsRlgXCJwz1z01CSHx989str4xjfrcg6mRN0U8Ow9Z4+
PZSpEYeisHl/hWhDfNOfOee2WzHMOAKWR+37qD0C3LoRn6LaNnvqZXJerQ2NDFKu
n+mG1kXmJuxgMqQekTXnLcaTBZDYq2DXJZndyKvRYX3ovVfNc6UmMmO1S9VIUN3i
2In4gsv4rUzzP6GR93U4Sm12aFCWq5Lof5b6Kg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:32 2025 by rpki-client