Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          6U6opXheXLSLB9cg3bDYpV3wRaHn5z1n1hNb82/TKxM=
Subject key identifier:   96:96:D7:E2:3B:70:4B:40:52:AC:EB:64:00:EB:55:C0:23:DD:0D:60
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       528E102BB90F79788891A0BCD377B07F513E2484
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:05 +0000
ROA not before:           Fri 18 Oct 2024 11:55:05 +0000
ROA not after:            Fri 17 Oct 2025 12:00:05 +0000
asID:                     46030
IP address blocks:        182.48.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:10:2b:b9:0f:79:78:88:91:a0:bc:d3:77:b0:7f:51:3e:24:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:05 2024 GMT
            Not After : Oct 17 12:00:05 2025 GMT
        Subject: CN=9696D7E23B704B4052ACEB6400EB55C023DD0D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:0a:7d:18:38:d3:4b:65:43:38:9a:14:20:
                    0d:86:0d:7d:35:2b:03:4a:37:38:9a:77:a2:05:c8:
                    92:27:dc:eb:a7:21:91:c5:2e:d1:4e:fa:c6:ab:0f:
                    a1:6c:c3:cb:b7:94:a9:a0:8c:da:16:cf:87:8a:f4:
                    21:2c:55:a2:30:99:2b:ed:e5:aa:3d:d5:59:95:09:
                    22:d7:63:0b:35:69:80:04:47:9d:d7:50:49:97:07:
                    87:aa:d5:27:ab:27:60:1e:22:87:8b:66:45:56:9f:
                    96:83:02:2c:c0:7d:6c:1f:52:12:b2:ad:84:51:90:
                    69:f5:75:be:6c:54:91:ef:b6:2d:4d:7c:af:23:fa:
                    67:b0:2d:b8:e7:89:21:d5:a8:69:7b:08:5e:82:a2:
                    7a:60:8f:e5:05:00:73:2d:4d:7a:bd:8e:de:f0:fc:
                    f8:24:00:95:ef:6d:2c:62:41:44:ec:a7:12:1f:1b:
                    ae:05:ba:0b:ba:aa:ff:de:84:08:91:f4:99:fc:40:
                    ef:b3:20:63:c8:cd:b5:39:66:de:ba:cd:54:68:1a:
                    41:a5:6e:17:0b:02:8c:21:57:97:5d:13:12:57:91:
                    b3:ce:d6:32:94:a5:ba:f4:24:05:c4:68:5b:3d:a4:
                    27:26:09:0d:0a:4f:da:3f:d5:47:c4:c0:d9:db:f0:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:96:D7:E2:3B:70:4B:40:52:AC:EB:64:00:EB:55:C0:23:DD:0D:60
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:32:81:71:94:dc:7e:86:c4:82:e7:ea:b9:bd:bf:7c:49:
         5d:25:4a:9b:d8:54:f7:82:bc:d7:db:3e:43:67:c5:bd:1a:6c:
         be:85:a0:b0:4a:8a:32:dd:ca:bd:1b:c8:b1:15:fb:68:69:19:
         fe:86:01:5a:ea:1f:71:06:fd:8b:24:da:00:16:a8:c2:38:ae:
         1a:72:b6:ec:e2:e3:a9:24:f4:93:ed:f7:d1:8b:46:27:75:b3:
         2d:a6:f8:66:94:a5:43:d7:40:e9:87:92:bc:a8:cb:62:f5:3b:
         f4:f1:88:aa:26:c8:38:b7:81:08:21:26:d0:8a:2d:da:83:8d:
         3b:04:9d:b0:4d:d3:72:08:64:a6:32:45:6b:e9:84:78:95:1b:
         00:ce:d2:45:76:dd:78:7a:8e:65:cb:02:29:ba:97:e5:26:6b:
         6b:2b:d6:07:be:04:a4:e0:b2:49:0a:1f:4a:6b:75:41:00:93:
         8f:2a:ef:29:97:60:ad:9a:6f:57:0e:8a:87:86:74:f3:20:1a:
         ca:69:8a:6b:17:ae:1b:e4:62:af:f8:a7:8e:a2:6b:d9:3c:03:
         0f:6b:75:75:b1:5f:59:54:01:14:88:55:b1:8c:73:56:d8:86:
         b2:6c:e3:f9:bc:ab:34:65:79:bb:6b:23:65:af:50:7d:71:c1:
         d2:65:f5:58
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUo4QK7kPeXiIkaC803ewf1E+JIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNDEwMTgxMTU1MDVaFw0yNTEwMTcxMjAwMDVaMDMxMTAvBgNV
BAMTKDk2OTZEN0UyM0I3MDRCNDA1MkFDRUI2NDAwRUI1NUMwMjNERDBENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6Qp9GDjTS2VDOJoUIA2GDX01
KwNKNziad6IFyJIn3OunIZHFLtFO+sarD6Fsw8u3lKmgjNoWz4eK9CEsVaIwmSvt
5ao91VmVCSLXYws1aYAER53XUEmXB4eq1SerJ2AeIoeLZkVWn5aDAizAfWwfUhKy
rYRRkGn1db5sVJHvti1NfK8j+mewLbjniSHVqGl7CF6Conpgj+UFAHMtTXq9jt7w
/PgkAJXvbSxiQUTspxIfG64Fugu6qv/ehAiR9Jn8QO+zIGPIzbU5Zt66zVRoGkGl
bhcLAowhV5ddExJXkbPO1jKUpbr0JAXEaFs9pCcmCQ0KT9o/1UfEwNnb8DPLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUlpbX4jtwS0BSrOtkAOtVwCPdDWAwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwpDANBgkqhkiG
9w0BAQsFAAOCAQEAGfQygXGU3H6GxILn6rm9v3xJXSVKm9hU94K819s+Q2fFvRps
voWgsEqKMt3KvRvIsRX7aGkZ/oYBWuofcQb9iyTaABaowjiuGnK27OLjqST0k+33
0YtGJ3WzLab4ZpSlQ9dA6YeSvKjLYvU79PGIqibIOLeBCCEm0Iot2oONOwSdsE3T
cghkpjJFa+mEeJUbAM7SRXbdeHqOZcsCKbqX5SZrayvWB74EpOCySQofSmt1QQCT
jyrvKZdgrZpvVw6Kh4Z08yAaymmKaxeuG+Rir/injqJr2TwDD2t1dbFfWVQBFIhV
sYxzVtiGsmzj+byrNGV5u2sjZa9QfXHB0mX1WA==
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org