Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa
File:                     AS38755.roa (raw, json)
Hash identifier:          js+OcGH/znL82r1Bq/i751nV9v0ky8Qg2sTbyo8OyDQ=
Subject key identifier:   0C:F7:F5:B3:88:4F:1A:D0:EB:9D:08:C6:A9:23:2A:7E:64:2F:08:6D
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       74DFC51938BEBF150CD38269D52845D5D16B8D9D
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa
Signing time:             Fri 11 Apr 2025 04:09:00 +0000
ROA not before:           Fri 11 Apr 2025 04:04:00 +0000
ROA not after:            Fri 10 Apr 2026 04:09:00 +0000
asID:                     38755
IP address blocks:        182.23.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:df:c5:19:38:be:bf:15:0c:d3:82:69:d5:28:45:d5:d1:6b:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr 11 04:04:00 2025 GMT
            Not After : Apr 10 04:09:00 2026 GMT
        Subject: CN=0CF7F5B3884F1AD0EB9D08C6A9232A7E642F086D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:b9:73:4d:dc:06:73:da:aa:d1:2c:a8:db:
                    d3:69:2f:e5:5d:53:68:4c:49:bd:49:ea:95:4b:1d:
                    c6:7f:19:c4:40:39:50:21:f8:f7:25:48:41:35:f0:
                    03:cc:01:f3:85:81:03:8b:ba:ce:ec:f9:73:c8:98:
                    a8:61:20:f5:12:f3:a7:d3:7e:b3:23:e2:1d:5d:51:
                    5a:aa:66:d8:f8:e0:28:c4:3a:4a:47:6b:d9:f1:be:
                    5c:c3:77:c8:a6:13:5e:cf:20:6d:66:73:9f:b8:8c:
                    e1:5a:bd:42:eb:43:a8:99:04:c8:a4:b2:2a:58:bb:
                    39:de:b2:48:a1:2f:50:5f:3f:49:43:11:c8:8b:43:
                    0d:ab:05:92:f3:de:f3:59:4f:30:ec:cb:ae:86:17:
                    66:1c:71:a7:51:d5:64:32:14:ac:04:a0:76:ab:dd:
                    2e:2d:df:10:40:da:34:05:73:73:cc:9a:ce:33:a5:
                    30:7c:70:23:3a:ef:c5:0c:2c:7c:d3:b7:5a:08:3a:
                    23:03:56:8e:42:4b:95:2f:22:86:15:2c:95:05:f8:
                    79:4c:2a:04:82:67:f8:13:31:07:81:90:bf:ac:da:
                    3e:8a:65:15:60:f7:da:5f:83:3d:cd:80:d8:ef:9e:
                    91:49:65:6f:f3:b1:65:d5:3e:47:cd:92:e8:78:e4:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:F5:B3:88:4F:1A:D0:EB:9D:08:C6:A9:23:2A:7E:64:2F:08:6D
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:60:b7:c7:73:bf:11:22:80:a8:f1:5c:24:fd:2b:0a:bc:
         8e:69:67:7d:81:2a:0d:c2:bc:90:9a:46:18:23:4b:c0:76:fa:
         e9:9a:fb:dd:90:22:dd:9d:b5:12:e1:f4:ee:c8:b8:01:cb:81:
         95:1a:03:3a:d2:a2:ec:88:c9:0a:09:52:be:bd:da:96:d1:70:
         13:6f:dc:e8:e8:f6:af:cc:be:40:c7:f0:61:46:39:fd:06:e4:
         f2:de:de:12:c5:94:24:7d:1e:2d:46:ef:38:da:c4:d9:6c:9b:
         90:15:3a:8f:e8:ee:2f:df:4c:e8:e3:a1:e3:7b:57:b5:f5:80:
         ee:61:8a:ba:9c:b2:a3:95:9d:64:67:5b:f2:e9:74:cf:bc:ff:
         e7:8d:fd:4a:88:78:26:05:ab:1b:08:f4:23:86:8c:53:7c:22:
         90:98:bc:f9:dc:bb:21:94:19:65:ac:ee:11:70:67:61:4d:21:
         dc:a2:3e:02:79:ed:c0:8b:44:6a:c5:34:7b:4f:20:a4:c6:85:
         41:54:34:68:12:3f:e2:22:32:74:a0:67:96:27:09:fc:8b:9e:
         b7:14:fc:d7:75:2e:09:7f:cc:3c:3a:97:9a:9d:b1:ac:60:bf:
         d6:37:32:39:ab:2a:71:a8:17:20:3e:60:c5:eb:82:2f:ca:c2:
         ab:6e:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net