Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
File:                     3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (raw, json)
Hash identifier:          dPDYfn4TUwUm+tc8sE8nxFbVhRSittc2l0IcjcTnoCM=
Subject key identifier:   FC:1B:11:D1:AD:C4:6A:B1:68:52:41:8F:4D:CF:78:4A:F2:14:62:A5
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       279E918EB730C55F07976386EC28DD991CCB82CB
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
Signing time:             Fri 13 Oct 2023 09:06:30 +0000
ROA not before:           Fri 13 Oct 2023 09:01:30 +0000
ROA not after:            Fri 11 Oct 2024 09:06:30 +0000
asID:                     46030
IP address blocks:        182.48.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9e:91:8e:b7:30:c5:5f:07:97:63:86:ec:28:dd:99:1c:cb:82:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 13 09:01:30 2023 GMT
            Not After : Oct 11 09:06:30 2024 GMT
        Subject: CN=FC1B11D1ADC46AB16852418F4DCF784AF21462A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:ac:3f:53:bc:f7:30:b9:20:6f:df:89:10:
                    05:2a:81:3c:13:5b:98:b6:8d:46:6a:ec:3b:3c:88:
                    74:27:78:0e:01:c5:22:ce:c3:59:c6:22:b5:31:0e:
                    ca:ce:ad:cc:0a:bb:f3:91:d1:46:42:b9:dd:43:1a:
                    72:06:42:90:86:f1:89:dd:7f:89:aa:33:bc:7c:7f:
                    6e:e4:30:88:76:5f:4a:dd:72:ef:1f:a5:f1:1f:7b:
                    1b:25:42:f4:1c:37:94:54:9b:2d:60:1a:60:c3:ba:
                    03:36:57:60:a6:1b:ad:29:03:08:ab:3f:a6:4d:6b:
                    d4:f0:3f:95:11:3e:09:9f:3a:f1:98:ff:38:b6:b2:
                    5c:5c:68:cc:47:64:a7:bd:56:2b:4e:b4:6e:69:66:
                    61:60:bf:a6:46:ca:4c:db:bb:77:1a:70:e4:db:08:
                    c5:1b:3d:b7:54:f0:59:50:cf:61:29:d7:da:cd:f3:
                    ee:bc:21:75:11:9b:0a:43:17:ec:e7:ba:0b:99:86:
                    ad:e3:5d:02:78:fd:3c:c2:fc:23:46:59:dd:95:ed:
                    7c:09:a9:88:ed:2a:d0:9d:88:a7:50:c1:83:57:a0:
                    19:29:59:00:f3:b1:b3:78:72:5b:57:00:51:56:51:
                    62:55:39:ef:6b:69:0c:27:be:8f:7e:cb:e4:a9:22:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1B:11:D1:AD:C4:6A:B1:68:52:41:8F:4D:CF:78:4A:F2:14:62:A5
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:43:e3:19:cb:02:e6:b3:cd:a9:50:a5:7b:8e:7f:50:e7:
         96:7c:27:e1:14:cb:50:db:3e:74:9a:9e:0f:f4:23:b4:14:78:
         38:eb:03:ed:8d:6d:d2:76:ae:cb:8e:e3:03:d0:07:54:ed:8d:
         cc:ac:e4:a4:a1:0a:2d:41:28:f7:2b:35:f7:a6:e7:33:b7:a5:
         d3:13:c3:5a:f7:0f:86:9d:f2:db:2c:a3:7b:7f:9d:f7:c0:99:
         e3:de:37:e3:5e:1a:d4:6f:9f:27:9e:df:02:2a:e0:17:e0:bb:
         a5:f8:dd:d2:01:fe:e9:d5:5b:62:d0:69:df:74:2f:5b:da:5e:
         4e:10:dc:d9:74:5a:74:9a:d9:a7:0b:af:77:7b:cc:c2:e2:ea:
         c9:04:c5:6d:6a:88:42:dd:08:ea:1e:b7:3d:68:e1:54:af:c8:
         71:e6:15:37:fc:37:4d:da:82:a1:7b:1d:1d:9f:97:0f:a1:ee:
         01:eb:a7:df:b8:b2:fb:57:14:ae:89:69:84:ea:49:82:2d:f8:
         6d:76:71:9c:5f:f4:73:67:11:69:21:40:e0:4b:49:f9:47:38:
         a1:fd:50:12:1c:a9:16:93:8e:40:f6:dc:f5:96:33:62:f8:3c:
         6d:a6:7e:4e:18:0c:4d:76:5c:36:bf:c7:c6:2d:7e:91:01:d9:
         b5:3f:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org