Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          +TT/TF/6SH4qSWYiD6+3o0hyey/DygNpv9c3e9hA2gw=
Subject key identifier:   67:16:97:DA:6B:B7:1D:D7:01:32:12:55:2E:26:16:A1:3A:40:B2:BF
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       2C56B5B84965895333853D057D63CB95D6F9966E
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa
Signing time:             Wed 29 Nov 2023 07:55:52 +0000
ROA not before:           Wed 29 Nov 2023 07:50:52 +0000
ROA not after:            Wed 27 Nov 2024 07:55:52 +0000
asID:                     46030
IP address blocks:        182.48.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:56:b5:b8:49:65:89:53:33:85:3d:05:7d:63:cb:95:d6:f9:96:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 29 07:50:52 2023 GMT
            Not After : Nov 27 07:55:52 2024 GMT
        Subject: CN=671697DA6BB71DD7013212552E2616A13A40B2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:a3:fb:91:c1:55:14:28:bb:4f:e9:2b:47:
                    ba:a6:ec:1e:cc:02:f3:ba:4d:52:47:97:9e:e5:2a:
                    1d:0c:3c:0f:bb:9a:53:af:ab:0d:bc:aa:13:02:dd:
                    e3:fd:35:86:a2:99:6a:8d:0e:60:cf:58:97:1d:67:
                    c1:85:e4:b8:28:d8:35:bf:2a:ba:b8:c2:7d:fe:6e:
                    a3:f8:ed:62:31:7d:ac:b9:cf:f2:43:1a:f9:04:d9:
                    fc:6e:89:44:bc:aa:66:e7:a9:03:68:05:db:9b:9f:
                    d0:52:26:b1:2b:7c:bd:9c:d1:d5:7b:cd:15:5f:1c:
                    f5:17:43:46:d5:f4:5d:6b:ad:0d:9d:c3:0c:97:62:
                    7b:d1:06:24:e7:26:b0:82:99:7d:7c:6c:c8:49:87:
                    b6:61:b6:6f:af:8b:1b:ec:e4:ff:7a:ce:37:58:d2:
                    8d:0d:9b:32:f0:8f:83:03:31:64:b1:d7:8d:23:9e:
                    5f:82:07:e7:5e:ff:3b:55:ab:d8:7b:5b:46:a4:7f:
                    2c:23:27:d6:8d:51:e0:b3:f7:3e:9b:3a:43:cc:08:
                    7c:d9:7a:13:90:94:d7:db:3e:a9:1e:81:7e:d0:ee:
                    8f:65:fa:4f:8b:5c:ff:3f:74:ea:d8:04:af:cd:da:
                    06:ed:c2:44:46:f9:a1:69:b6:26:1f:53:3f:d5:1d:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:97:DA:6B:B7:1D:D7:01:32:12:55:2E:26:16:A1:3A:40:B2:BF
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:49:23:f5:11:a7:81:3f:49:5d:77:6b:47:84:1e:23:a9:
         5c:2a:6f:a0:39:81:7e:8a:77:84:38:29:b5:2b:c8:9f:cf:1f:
         65:84:28:48:9c:40:bb:64:d1:d7:d2:cc:87:e1:87:f8:be:37:
         19:c8:2e:d9:c0:c3:75:c3:3c:f1:fa:7f:18:aa:07:99:d9:97:
         d3:e3:db:1d:c7:95:da:a5:44:ff:08:6b:20:b3:14:73:0d:be:
         47:ea:d3:c1:94:58:41:97:ed:10:c4:7b:f6:2f:8c:5d:96:56:
         e7:bb:f9:d0:5d:f4:6f:01:a4:88:52:53:80:58:f8:3e:51:7e:
         6a:5d:04:aa:0b:b5:91:47:43:a9:bc:83:9a:1c:95:fe:3b:bc:
         88:5c:b4:57:bc:68:7f:f8:01:05:7c:e1:4e:7e:40:9d:e2:92:
         60:60:10:28:d9:3d:28:ce:fb:99:ab:a1:10:8a:dd:99:a4:9d:
         bd:0c:d6:65:4f:d7:bc:a9:e5:97:b8:83:5e:48:2a:e3:1b:a7:
         26:56:40:89:71:26:18:d4:f1:12:7a:3d:b5:02:a7:26:ff:55:
         93:d3:ed:4d:76:b9:29:4d:69:37:82:90:8e:5d:54:c3:42:da:
         8a:c6:66:38:cf:2a:20:7c:d0:b5:5b:3c:9b:37:87:6b:dd:81:
         04:46:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org