Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa
File:                     AS138885.roa (raw, json)
Hash identifier:          /n3QwdVfZD0QCe9dNF/CT2sxuwEtNa1/FhrwvyPZKsA=
Subject key identifier:   F5:F6:83:59:71:D5:A4:28:34:1C:AB:56:41:9A:03:2B:BF:8C:1B:C7
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       181711847ED5301F78860BC18B68E57BE656846C
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa
Signing time:             Fri 11 Apr 2025 04:09:00 +0000
ROA not before:           Fri 11 Apr 2025 04:04:00 +0000
ROA not after:            Fri 10 Apr 2026 04:09:00 +0000
asID:                     138885
IP address blocks:        182.23.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:11:84:7e:d5:30:1f:78:86:0b:c1:8b:68:e5:7b:e6:56:84:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr 11 04:04:00 2025 GMT
            Not After : Apr 10 04:09:00 2026 GMT
        Subject: CN=F5F6835971D5A428341CAB56419A032BBF8C1BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:0c:d2:9c:36:a0:46:9c:15:f5:47:4a:e0:
                    59:61:94:0e:72:79:47:2c:ac:e6:33:9c:ae:14:31:
                    5e:af:3d:73:bc:eb:fa:2c:88:7d:3f:8c:e9:fd:cb:
                    c6:3c:95:94:ce:60:4a:d2:89:ec:89:c0:4a:0e:95:
                    85:2c:69:d3:97:1a:3a:d5:52:17:62:a7:d3:4a:52:
                    1b:c9:95:01:38:c0:b8:d4:9e:d8:9f:a8:69:e2:5a:
                    03:ac:3d:fb:1e:19:ff:ea:ca:bd:b3:d0:9c:f4:b2:
                    db:9a:08:cb:c0:53:87:f0:0b:63:b3:bc:f4:eb:0f:
                    db:90:1f:41:91:36:b7:ab:fc:02:c7:5a:b6:cc:2c:
                    c1:87:a2:38:25:2e:14:d3:26:53:6e:55:fa:e8:42:
                    9a:4a:9f:95:10:49:d9:98:85:cc:db:ec:5a:11:b8:
                    1e:3e:44:86:be:1f:08:ae:67:90:4f:ae:de:fe:be:
                    b9:23:ce:5e:9e:f0:c6:78:d3:59:9f:d1:48:74:03:
                    c9:14:9f:70:38:52:e2:0a:ad:33:35:fd:29:bf:4e:
                    b6:44:57:69:e2:4f:f6:e6:78:9e:0d:da:3f:0e:c0:
                    bd:59:86:fe:e4:f2:52:7e:e0:51:d9:6b:68:5d:14:
                    1e:57:9c:df:01:b9:d8:0c:b3:e6:9f:72:8f:ec:0d:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:83:59:71:D5:A4:28:34:1C:AB:56:41:9A:03:2B:BF:8C:1B:C7
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:64:e0:fa:cf:42:a1:8f:d0:d0:da:00:44:d0:e2:74:cb:
         de:75:35:aa:3c:24:62:ac:da:a4:83:6b:74:99:c7:bb:de:1d:
         76:e9:56:bf:b5:08:55:51:14:13:cb:a1:c1:bc:be:e8:15:d1:
         bb:07:ae:58:a7:62:8e:0b:c0:42:61:0c:7f:e6:78:3f:69:fd:
         8d:a8:76:a9:70:60:85:e0:fc:95:02:37:c1:f9:fe:c0:de:5d:
         30:1f:ae:02:86:52:78:4e:42:64:96:0b:54:1e:b5:22:a7:27:
         11:37:d7:7c:b0:6d:6f:35:2a:a0:30:36:ab:81:7c:d9:9f:93:
         9a:a9:ca:87:5c:19:5b:8c:2f:9d:98:96:27:0d:63:88:ec:9a:
         03:86:79:e5:00:2f:75:31:fa:a7:86:09:37:e9:57:34:88:ec:
         b8:d2:b8:cd:54:a2:1c:a6:7c:d7:cf:f9:6c:e5:ff:a8:90:6d:
         fe:93:c1:08:1b:97:82:31:6c:7f:ce:38:25:14:0e:b5:ed:fb:
         33:78:0d:61:13:2e:6b:2f:dd:9b:fd:ca:4b:40:9a:22:b8:59:
         cc:c2:b4:fc:8e:06:cd:77:d0:42:51:2c:4f:e9:2c:6c:8c:53:
         c3:8f:dd:29:f2:06:0c:89:bb:d7:7a:06:99:ae:cd:08:f0:48:
         4d:d9:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net