Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
File:                     3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (raw, json)
Hash identifier:          CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=
Subject key identifier:   92:14:DC:B9:F8:83:EF:CB:37:22:D1:98:D2:6B:1E:55:92:98:94:E3
Certificate issuer:       /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
Certificate serial:       1B7F487ADD88ABF6320B988B8202667B02A69CF0
Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
Signing time:             Mon 02 Jun 2025 02:04:33 +0000
ROA not before:           Mon 02 Jun 2025 01:59:33 +0000
ROA not after:            Mon 01 Jun 2026 02:04:33 +0000
asID:                     17995
IP address blocks:        182.16.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl
                          rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 19:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7f:48:7a:dd:88:ab:f6:32:0b:98:8b:82:02:66:7b:02:a6:9c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
        Validity
            Not Before: Jun  2 01:59:33 2025 GMT
            Not After : Jun  1 02:04:33 2026 GMT
        Subject: CN=9214DCB9F883EFCB3722D198D26B1E55929894E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:aa:15:72:26:96:cd:9e:fc:4f:80:9e:80:ad:
                    fb:42:bf:e1:a6:cb:04:7c:10:42:d2:0e:ae:18:16:
                    dc:79:6c:7d:49:64:e6:82:f2:e3:19:2c:5f:7c:93:
                    85:81:89:16:89:e8:ec:25:ce:45:0a:fd:02:08:42:
                    46:c0:2e:08:91:b0:31:8c:cb:25:09:6d:69:5a:ef:
                    4c:8e:1e:47:cd:3d:58:32:b2:d8:ae:29:59:49:2d:
                    db:5d:52:57:14:9b:cf:6c:7c:2d:5f:74:3d:f4:76:
                    01:64:65:4d:a5:bb:0e:91:53:55:13:2c:2e:54:47:
                    31:d2:f1:2e:1a:bd:7b:35:9f:be:48:f4:40:fc:e1:
                    9c:ff:9c:5f:f9:79:6a:47:9d:88:10:be:5e:5f:55:
                    f6:9f:c2:9d:d8:91:ad:49:25:25:33:47:28:f8:4c:
                    9d:55:8a:46:f4:76:df:aa:0b:6a:3f:5e:b0:40:c7:
                    99:92:6c:c3:87:6b:21:36:e9:5d:88:5f:cc:7a:16:
                    98:d1:e6:24:a0:6a:c3:69:56:7d:86:7b:69:7b:b9:
                    64:83:1e:a1:6c:21:a2:4b:14:df:31:68:b0:2c:8b:
                    82:1f:91:2d:09:20:79:e3:ad:70:fe:b3:5e:3f:0e:
                    7f:df:9a:43:06:0b:8c:77:fc:f1:52:70:fe:0e:ee:
                    39:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:DC:B9:F8:83:EF:CB:37:22:D1:98:D2:6B:1E:55:92:98:94:E3
            X509v3 Authority Key Identifier:
                keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:54:b3:3d:38:ce:6c:c6:d6:56:f0:eb:5c:48:1e:66:01:ba:
         b0:da:df:86:b1:25:06:b9:c1:3a:3d:b8:a1:2e:29:d8:5f:c9:
         19:3d:a4:bc:29:1f:41:49:1f:dc:3f:e2:39:0b:cf:8c:b0:d7:
         c3:24:5c:07:fb:7e:82:c2:b7:2f:30:de:7b:01:ac:91:0c:8d:
         50:71:75:e8:66:71:77:5f:9a:2a:1d:fa:25:36:0d:59:19:95:
         34:bf:dd:ae:49:b6:d8:a1:84:a4:7e:83:b8:24:5a:c8:8f:5c:
         69:5d:01:d7:4f:3c:f3:5a:b8:a6:d3:e8:48:66:ee:1e:52:8b:
         6c:8b:3b:88:d2:92:2e:b4:3c:f9:8e:2c:b9:05:4a:e7:64:4d:
         a9:dd:bb:90:de:96:8f:f3:aa:77:d1:d1:b0:a8:db:ff:94:47:
         80:49:32:9d:da:c7:39:e0:8d:83:ef:7e:97:f3:6b:2e:f1:0d:
         f1:cb:aa:91:da:c7:78:cb:43:d0:77:1a:bf:3e:43:9b:5c:bb:
         11:31:a2:f0:46:77:fb:01:d3:57:3f:7e:d4:f3:43:8e:02:37:
         86:62:ae:ab:3a:35:3f:20:21:4d:38:61:fb:96:7e:21:93:86:
         08:25:de:d3:10:6c:7f:47:41:8c:1c:f5:f1:f1:f7:1a:c4:61:
         14:78:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:40:06 2025 by rpki-client