Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137352e302f32342d3234203d3e20313338383835.roa
File:                     3138322e32332e3137352e302f32342d3234203d3e20313338383835.roa (raw, json)
Hash identifier:          KoXHTVwiZ6HhDLgDmibAiTegOimv76wA/ZxxJeE16iM=
Subject key identifier:   68:7A:D5:AC:EC:5D:60:B7:30:58:11:BD:B7:E7:24:A8:20:87:4A:30
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       083621553238138CD5D6CEE8F9ECCAE945C5CA4D
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137352e302f32342d3234203d3e20313338383835.roa
Signing time:             Mon 01 Jul 2024 01:05:34 +0000
ROA not before:           Mon 01 Jul 2024 01:00:34 +0000
ROA not after:            Mon 30 Jun 2025 01:05:34 +0000
asID:                     138885
IP address blocks:        182.23.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:36:21:55:32:38:13:8c:d5:d6:ce:e8:f9:ec:ca:e9:45:c5:ca:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Jul  1 01:00:34 2024 GMT
            Not After : Jun 30 01:05:34 2025 GMT
        Subject: CN=687AD5ACEC5D60B7305811BDB7E724A820874A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:a9:37:7b:bb:6a:c1:75:71:15:b2:ba:dd:
                    2a:6a:95:40:60:67:76:69:15:5a:87:b9:af:4d:85:
                    17:db:41:be:e0:9a:79:aa:26:29:69:b4:ae:79:31:
                    df:44:24:30:6a:b9:7b:d1:ec:40:7f:0a:84:53:ff:
                    14:6b:08:3c:e8:45:3f:60:ee:bc:a4:80:0f:fd:3d:
                    8b:e5:e8:79:e4:d5:61:4a:1b:61:a3:95:51:4b:5b:
                    d6:9c:c4:06:02:5e:ce:c8:f3:0e:ff:a5:d3:fb:e2:
                    09:ad:de:ef:21:f2:c4:1a:a6:84:0b:30:1d:57:79:
                    59:d8:38:5a:60:52:e2:10:ca:e0:cf:8e:d0:a4:f6:
                    0f:d5:26:a5:34:0c:4f:4d:e6:77:26:9e:22:3e:bc:
                    9d:a4:38:cc:63:fb:93:a1:db:93:75:0a:1a:51:c3:
                    c2:10:87:87:1a:19:a9:68:45:cb:51:74:58:bf:84:
                    ea:19:42:21:5c:d3:a0:94:78:44:3a:09:0b:78:29:
                    6c:43:3c:85:b5:21:13:11:2c:92:99:e8:41:13:b3:
                    36:c4:3a:d6:9f:0c:dd:a2:29:4b:76:d3:ce:4d:8a:
                    cb:0a:0a:04:2c:32:41:56:a8:fe:f5:10:21:d9:12:
                    ae:92:90:77:97:37:ed:36:0d:a3:23:b4:df:d5:0c:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:D5:AC:EC:5D:60:B7:30:58:11:BD:B7:E7:24:A8:20:87:4A:30
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3138322e32332e3137352e302f32342d3234203d3e20313338383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:b0:bd:6d:e2:1d:59:00:73:8c:95:29:31:c8:7a:7d:34:
         7a:8a:c7:c3:66:23:df:1c:a6:f4:aa:89:65:48:5a:96:6a:09:
         83:9d:eb:22:82:e1:a7:27:a6:1f:31:e9:35:02:5f:e4:4a:4c:
         43:31:b7:9a:78:bf:2a:01:17:d2:ec:57:b2:1e:ad:35:f3:1e:
         12:28:33:6a:1a:42:b6:2c:5b:af:22:4f:aa:d5:b8:94:71:97:
         56:4d:3c:2f:f8:f0:d4:6a:13:f6:5c:cc:3a:81:33:1f:7b:57:
         79:f4:c0:00:70:91:7c:cb:94:c9:cc:9f:8a:c1:15:82:19:33:
         f5:bc:28:e9:03:62:3b:e0:50:c9:bd:3c:30:35:68:e0:3a:fe:
         5a:79:12:d1:e8:37:ab:8e:73:14:ef:8d:cf:af:21:30:13:81:
         6f:2f:fd:3a:ef:24:75:89:14:30:c4:c1:d8:f6:6b:df:a3:55:
         cd:76:a4:fb:f1:ac:36:a4:de:14:4d:e2:c7:5e:45:23:bd:3b:
         e3:c8:0f:92:5c:08:a7:34:6e:a7:2e:6d:0a:7f:f6:7b:ed:1b:
         54:6e:9d:99:47:6e:cc:63:2a:e4:65:34:6a:78:f2:7f:6f:40:
         a1:5d:fc:cd:fa:b0:af:81:03:60:46:64:96:47:b2:29:87:77:
         ab:d6:c6:28
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCDYhVTI4E4zV1s7o+ezK6UXFyk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA3MDEwMTAwMzRaFw0yNTA2MzAwMTA1MzRaMDMxMTAvBgNV
BAMTKDY4N0FENUFDRUM1RDYwQjczMDU4MTFCREI3RTcyNEE4MjA4NzRBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwlKk3e7tqwXVxFbK63SpqlUBg
Z3ZpFVqHua9NhRfbQb7gmnmqJilptK55Md9EJDBquXvR7EB/CoRT/xRrCDzoRT9g
7rykgA/9PYvl6Hnk1WFKG2GjlVFLW9acxAYCXs7I8w7/pdP74gmt3u8h8sQapoQL
MB1XeVnYOFpgUuIQyuDPjtCk9g/VJqU0DE9N5ncmniI+vJ2kOMxj+5Oh25N1ChpR
w8IQh4caGaloRctRdFi/hOoZQiFc06CUeEQ6CQt4KWxDPIW1IRMRLJKZ6EETszbE
OtafDN2iKUt2085NissKCgQsMkFWqP71ECHZEq6SkHeXN+02DaMjtN/VDB9vAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUaHrVrOxdYLcwWBG9t+ckqCCHSjAwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzgzMjJlMzIzMzJlMzEzNzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAthevMA0GCSqG
SIb3DQEBCwUAA4IBAQA/P7C9beIdWQBzjJUpMch6fTR6isfDZiPfHKb0qollSFqW
agmDnesiguGnJ6YfMek1Al/kSkxDMbeaeL8qARfS7FeyHq018x4SKDNqGkK2LFuv
Ik+q1biUcZdWTTwv+PDUahP2XMw6gTMfe1d59MAAcJF8y5TJzJ+KwRWCGTP1vCjp
A2I74FDJvTwwNWjgOv5aeRLR6DerjnMU743PryEwE4FvL/067yR1iRQwxMHY9mvf
o1XNdqT78aw2pN4UTeLHXkUjvTvjyA+SXAinNG6nLm0Kf/Z77RtUbp2ZR27MYyrk
ZTRqePJ/b0ChXfzN+rCvgQNgRmSWR7Iph3er1sYo
-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org