Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137332e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3137332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          K/lZjyB5X9rJyGMC2ZDQ8xGgWfbwk1BXutuL7YxFAf4=
Subject key identifier:   4D:D1:51:C7:B4:51:15:7D:7D:12:BB:63:D3:68:EB:AD:77:25:86:EA
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       17E08B3B3887A32B4378886E5B7E6534A4627003
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137332e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:34 +0000
ROA not before:           Mon 01 Jul 2024 01:00:34 +0000
ROA not after:            Mon 30 Jun 2025 01:05:34 +0000
asID:                     38496
IP address blocks:        182.23.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:8b:3b:38:87:a3:2b:43:78:88:6e:5b:7e:65:34:a4:62:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:34 2024 GMT
            Not After : Jun 30 01:05:34 2025 GMT
        Subject: CN=4DD151C7B451157D7D12BB63D368EBAD772586EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:2b:de:77:65:0b:8c:b3:84:e8:25:ec:a6:
                    d3:77:99:e6:02:68:66:da:5e:8b:61:0a:fa:73:78:
                    a4:eb:50:40:cc:1a:0a:eb:6d:66:3f:fe:a0:6e:0b:
                    05:dd:7a:9c:da:98:10:5a:f5:09:9f:8c:54:64:4d:
                    04:cd:c0:e1:2c:8b:6b:b7:9a:45:00:89:dd:a2:7d:
                    a0:94:be:5a:9d:9e:e8:e5:c2:0d:27:14:18:6e:57:
                    9a:87:d6:d1:78:09:a9:b7:97:9f:62:12:30:95:2a:
                    7a:78:7a:db:a2:75:bc:f7:c4:31:25:30:ca:62:14:
                    3d:40:fe:ec:da:db:93:f8:0e:2c:2e:99:e1:75:6b:
                    bd:b4:09:a9:c6:e0:8f:aa:51:21:14:51:f4:19:bc:
                    cb:04:66:4b:b9:9a:c2:9b:71:fc:f1:8c:29:d2:af:
                    e0:77:5d:0f:59:90:cb:b3:85:dc:e9:ae:13:71:0d:
                    04:cf:76:8c:d6:20:9f:a5:1c:db:bc:19:90:f2:c3:
                    a6:83:01:d5:a6:7c:38:82:0a:43:8c:d1:08:e5:92:
                    d3:74:12:db:3a:e4:6f:43:d4:72:67:b0:55:7a:8c:
                    1d:33:af:ef:4b:8d:ca:28:b8:6b:a3:a5:7d:1e:cb:
                    a8:8f:04:7c:d5:63:21:3c:f0:1e:3d:44:4c:96:60:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D1:51:C7:B4:51:15:7D:7D:12:BB:63:D3:68:EB:AD:77:25:86:EA
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:cd:eb:7b:0b:00:15:2b:87:43:bf:35:2e:e6:d9:5b:91:
         a4:a9:11:61:e5:00:20:88:47:e7:2e:e2:6f:e1:1f:1c:56:2a:
         b0:33:ab:9a:84:00:97:94:76:84:37:42:40:45:83:d9:bb:4e:
         c5:7f:46:8e:fd:6d:43:df:1f:93:6f:cf:8d:fd:40:dd:e4:df:
         d2:32:45:ca:77:32:81:b6:42:69:5a:af:b7:30:22:aa:fa:50:
         70:13:76:0e:4b:ff:c6:22:0e:73:c2:71:33:53:33:17:75:c4:
         9f:cb:7d:7c:63:d9:47:70:55:9d:d8:da:d0:5b:99:f8:88:59:
         24:03:f4:37:05:60:5b:04:71:a6:2b:af:a0:80:b3:60:b1:65:
         c7:9e:1f:19:51:31:bf:c0:3e:a4:15:65:82:c6:04:a8:b3:9a:
         71:05:d1:80:d6:76:62:a4:69:f1:8c:75:aa:b9:94:d4:85:f7:
         7d:89:94:44:99:e3:eb:91:fe:bd:9b:32:bd:22:bb:50:de:93:
         00:fe:8b:c5:e9:15:33:df:40:e1:93:4d:71:87:bb:c2:f4:93:
         8c:60:bb:0c:cd:07:5f:33:b8:d4:01:a0:ce:19:6f:9a:7e:da:
         09:75:b9:37:38:eb:ae:85:82:7e:47:f9:f2:bc:e3:da:e0:67:
         07:c8:43:b2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUF+CLOziHoytDeIhuW35lNKRicAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzRaFw0yNTA2MzAwMTA1MzRaMDMxMTAvBgNV
BAMTKDRERDE1MUM3QjQ1MTE1N0Q3RDEyQkI2M0QzNjhFQkFENzcyNTg2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhived2ULjLOE6CXsptN3meYC
aGbaXothCvpzeKTrUEDMGgrrbWY//qBuCwXdepzamBBa9QmfjFRkTQTNwOEsi2u3
mkUAid2ifaCUvlqdnujlwg0nFBhuV5qH1tF4Cam3l59iEjCVKnp4etuidbz3xDEl
MMpiFD1A/uza25P4DiwumeF1a720CanG4I+qUSEUUfQZvMsEZku5msKbcfzxjCnS
r+B3XQ9ZkMuzhdzprhNxDQTPdozWIJ+lHNu8GZDyw6aDAdWmfDiCCkOM0QjlktN0
Ets65G9D1HJnsFV6jB0zr+9LjcoouGujpX0ey6iPBHzVYyE88B49REyWYK4zAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTdFRx7RRFX19Ertj02jrrXclhuowHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXrTANBgkqhkiG
9w0BAQsFAAOCAQEAHi7N63sLABUrh0O/NS7m2VuRpKkRYeUAIIhH5y7ib+EfHFYq
sDOrmoQAl5R2hDdCQEWD2btOxX9Gjv1tQ98fk2/Pjf1A3eTf0jJFyncygbZCaVqv
tzAiqvpQcBN2Dkv/xiIOc8JxM1MzF3XEn8t9fGPZR3BVndja0FuZ+IhZJAP0NwVg
WwRxpiuvoICzYLFlx54fGVExv8A+pBVlgsYEqLOacQXRgNZ2YqRp8Yx1qrmU1IX3
fYmURJnj65H+vZsyvSK7UN6TAP6LxekVM99A4ZNNcYe7wvSTjGC7DM0HXzO41AGg
zhlvmn7aCXW5NzjrroWCfkf58rzj2uBnB8hDsg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org