Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136302e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          sVp2t5x46iRQTpVmORMMAEOst4NyrQl8BB4AXHIyVD4=
Subject key identifier:   8E:88:44:81:1B:A8:85:A2:E3:73:09:B4:83:71:9A:07:BA:00:AF:85
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       76539779F4C52AC7BD9241A6C59CBDDD321E4767
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa
Signing time:             Wed 30 Oct 2024 08:00:02 +0000
ROA not before:           Wed 30 Oct 2024 07:55:02 +0000
ROA not after:            Wed 29 Oct 2025 08:00:02 +0000
asID:                     46030
IP address blocks:        182.48.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:53:97:79:f4:c5:2a:c7:bd:92:41:a6:c5:9c:bd:dd:32:1e:47:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 30 07:55:02 2024 GMT
            Not After : Oct 29 08:00:02 2025 GMT
        Subject: CN=8E8844811BA885A2E37309B483719A07BA00AF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:86:10:7b:09:ac:6d:17:7e:ca:7c:18:d0:
                    03:5f:9f:57:4d:85:20:49:95:d5:22:22:8b:8c:6c:
                    a5:1d:24:8e:a0:a6:d0:e7:16:cc:09:44:a3:ec:cf:
                    84:02:08:e4:e5:e4:24:00:25:fc:00:cb:48:48:93:
                    47:26:03:3f:c6:ce:c5:5a:b7:c0:1b:50:c9:5d:f8:
                    e4:c3:1e:ec:3f:fd:4f:f9:38:9c:8f:21:b7:28:0c:
                    3e:c9:95:a8:89:6c:e8:89:b3:25:b5:3c:3d:97:2e:
                    f1:b6:9d:61:a7:47:e4:4f:88:ed:cc:72:e1:bf:5a:
                    6e:84:89:7e:8b:44:58:46:19:0e:94:b6:c3:04:12:
                    00:6a:32:51:3d:4c:30:0a:da:0a:6d:af:bd:ca:c4:
                    57:84:f4:09:d8:0b:38:b7:8a:0b:7c:4c:74:f7:58:
                    f2:78:ed:b8:d1:f3:8f:ff:da:ff:b2:8c:07:e4:0d:
                    9d:14:56:da:c2:f7:c3:eb:07:62:b8:f6:ae:b0:7a:
                    ca:62:8d:51:ca:44:ab:2f:30:2c:df:43:27:20:2e:
                    96:5f:9e:28:88:57:62:3f:0f:d8:56:83:57:a2:24:
                    5c:4c:f3:20:06:80:95:a3:08:37:d7:dd:5a:ed:c3:
                    cf:06:00:86:0f:70:6d:46:bf:41:61:99:26:8d:7b:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:44:81:1B:A8:85:A2:E3:73:09:B4:83:71:9A:07:BA:00:AF:85
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:00:1b:bd:ce:35:01:1b:25:b6:a5:6f:5e:8b:b3:62:90:83:
         80:08:4f:7c:3e:5e:f8:81:37:8b:01:c7:08:07:1c:ab:76:5a:
         a6:a5:dc:85:be:e7:5f:03:d9:5c:7b:bf:de:41:72:b4:33:9d:
         01:14:78:51:3b:ad:c3:0b:73:a9:01:59:b9:4f:21:24:1a:42:
         ab:cb:11:66:04:ed:8e:42:b5:6c:04:f5:64:5a:e2:34:77:86:
         28:18:3a:47:a0:64:b3:12:af:41:f9:3f:a3:3b:4a:97:c0:0b:
         fd:7c:1b:30:fa:81:81:47:69:ee:b6:bd:d1:62:9b:73:b2:02:
         75:57:2a:e2:f7:1d:a6:ea:bd:85:18:32:3a:3c:c6:54:bd:96:
         27:5d:eb:e9:90:d9:d0:61:f2:13:2d:77:1c:81:90:39:db:5c:
         ac:b3:21:dc:5d:3a:b3:62:6b:7a:0a:5b:43:d9:0c:2a:b1:46:
         f8:20:77:06:b4:e5:fa:65:ae:50:7a:48:cd:c3:70:01:61:58:
         8f:e1:f2:41:8c:9b:9d:e4:dd:f2:4d:bd:e2:d3:74:d1:9a:67:
         1b:92:57:22:2a:3f:1f:6b:0c:21:18:38:a1:b4:9c:0f:af:e2:
         79:83:ec:17:05:51:c3:38:92:0e:3e:4b:66:3f:ae:3d:da:e3:
         75:28:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org