Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137342e302f32342d3234203d3e203338343936.roa
File:                     3138322e32332e3137342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          Q6eu+aqjDdf6H0toFbgA82f3aQGxbN4jVT0eImRNIXc=
Subject key identifier:   D1:98:D6:B9:3B:E8:B2:34:2E:0D:B5:A0:CA:B3:B0:AC:0E:39:95:3A
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       4C74E8122C391443345B145D51718C2AC4D3679C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137342e302f32342d3234203d3e203338343936.roa
Signing time:             Mon 01 Jul 2024 01:05:33 +0000
ROA not before:           Mon 01 Jul 2024 01:00:33 +0000
ROA not after:            Mon 30 Jun 2025 01:05:33 +0000
asID:                     38496
IP address blocks:        182.23.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:74:e8:12:2c:39:14:43:34:5b:14:5d:51:71:8c:2a:c4:d3:67:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:33 2024 GMT
            Not After : Jun 30 01:05:33 2025 GMT
        Subject: CN=D198D6B93BE8B2342E0DB5A0CAB3B0AC0E39953A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:9c:93:72:4e:f0:da:0d:84:78:4d:81:6d:
                    ca:05:e6:df:ca:3d:63:aa:83:26:52:4c:8e:76:2e:
                    90:1b:de:44:93:61:cb:d5:03:90:e1:c3:1a:0d:f4:
                    d9:73:f2:b8:70:43:31:d8:80:66:f8:02:e0:5c:68:
                    e9:19:f6:11:c5:46:7d:94:a9:04:3e:90:2e:be:f4:
                    2a:16:53:88:07:c0:46:1a:cf:7e:05:da:e4:e2:fd:
                    e2:4d:42:5e:5a:5a:17:b9:87:09:85:86:38:af:0c:
                    ff:01:a2:01:0d:fd:8a:e4:f2:f4:08:a0:7e:7a:fd:
                    5e:a2:84:04:a7:2a:b7:c5:8e:e8:c8:76:8f:3d:83:
                    34:e3:cc:bf:49:7b:0e:64:10:63:f3:e3:e9:a2:40:
                    69:8a:a8:94:95:29:de:f9:f9:1e:5f:cf:fb:88:c5:
                    e7:2e:b2:bf:a7:c9:da:24:76:e9:81:b6:f0:06:6e:
                    31:64:fb:ad:bc:8f:d3:f0:a0:94:bc:05:2d:da:7f:
                    73:e1:c2:ca:02:a1:ef:43:79:8d:db:b5:6d:a6:4d:
                    7a:3c:2f:5a:b1:7c:5f:e7:c4:b8:79:37:2e:d7:64:
                    b6:52:b0:36:62:d1:b3:98:18:50:cb:e0:f1:ee:9d:
                    bf:c9:ea:ee:b5:79:b5:09:73:22:32:57:ae:94:32:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:98:D6:B9:3B:E8:B2:34:2E:0D:B5:A0:CA:B3:B0:AC:0E:39:95:3A
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137342e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:26:78:18:df:ba:83:33:67:2b:92:da:78:c3:9d:48:0b:
         82:dc:05:f9:b3:1e:5a:89:df:1c:5d:47:f1:7f:65:57:32:00:
         73:01:12:58:06:83:aa:b4:2d:65:27:10:51:42:1c:d5:be:44:
         0e:4b:99:57:32:4c:a6:b0:e4:dd:c6:ef:6c:31:4b:65:bd:84:
         84:d8:d4:33:9a:22:53:11:3a:97:78:3f:35:67:97:69:7f:74:
         04:f5:ff:45:ac:0e:e3:fd:bc:57:35:9c:c5:59:24:f7:63:ff:
         3e:70:54:ee:56:b7:64:ef:f8:39:49:60:a7:bd:fc:e4:4e:2c:
         e2:cb:c5:cc:e4:f8:45:2b:a0:15:50:c5:ab:c4:e0:22:2a:aa:
         60:53:62:8c:0c:f1:3d:86:51:1d:79:14:92:cd:50:3f:92:4e:
         32:a4:0b:07:5f:07:fb:20:7a:95:10:6d:4b:2c:8c:2c:0d:4e:
         85:46:e9:85:e7:38:f5:f7:78:78:c9:0b:df:45:77:d7:83:6d:
         08:f0:24:14:93:c1:d5:7e:30:7f:e5:f1:ca:65:82:10:91:38:
         e8:d5:4b:41:e9:4b:2d:1b:ca:66:39:2e:8b:a6:0d:45:65:61:
         e3:a5:39:ae:1a:52:16:f6:74:e3:5c:d4:72:df:3e:aa:b2:57:
         c8:b1:c3:9e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTHToEiw5FEM0WxRdUXGMKsTTZ5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzNaFw0yNTA2MzAwMTA1MzNaMDMxMTAvBgNV
BAMTKEQxOThENkI5M0JFOEIyMzQyRTBEQjVBMENBQjNCMEFDMEUzOTk1M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT5yTck7w2g2EeE2BbcoF5t/K
PWOqgyZSTI52LpAb3kSTYcvVA5DhwxoN9Nlz8rhwQzHYgGb4AuBcaOkZ9hHFRn2U
qQQ+kC6+9CoWU4gHwEYaz34F2uTi/eJNQl5aWhe5hwmFhjivDP8BogEN/Yrk8vQI
oH56/V6ihASnKrfFjujIdo89gzTjzL9Jew5kEGPz4+miQGmKqJSVKd75+R5fz/uI
xecusr+nydokdumBtvAGbjFk+628j9PwoJS8BS3af3PhwsoCoe9DeY3btW2mTXo8
L1qxfF/nxLh5Ny7XZLZSsDZi0bOYGFDL4PHunb/J6u61ebUJcyIyV66UMsfRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0ZjWuTvosjQuDbWgyrOwrA45lTowHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYXrjANBgkqhkiG
9w0BAQsFAAOCAQEAHOsmeBjfuoMzZyuS2njDnUgLgtwF+bMeWonfHF1H8X9lVzIA
cwESWAaDqrQtZScQUUIc1b5EDkuZVzJMprDk3cbvbDFLZb2EhNjUM5oiUxE6l3g/
NWeXaX90BPX/RawO4/28VzWcxVkk92P/PnBU7la3ZO/4OUlgp7385E4s4svFzOT4
RSugFVDFq8TgIiqqYFNijAzxPYZRHXkUks1QP5JOMqQLB18H+yB6lRBtSyyMLA1O
hUbphec49fd4eMkL30V314NtCPAkFJPB1X4wf+XxymWCEJE46NVLQelLLRvKZjku
i6YNRWVh46U5rhpSFvZ041zUct8+qrJXyLHDng==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org