Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          AolT7J+ePa9J4EKtOpAu1IDbbuDZUgCU4YfooWQ+Ldc=
Subject key identifier:   ED:A2:74:A7:BB:0F:66:5C:50:A6:95:3B:5A:2C:A8:53:DB:2B:E4:5C
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       60665C7744FCE096CCC6DE3E5E65D0B60D70BE81
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:02 +0000
ROA not before:           Fri 18 Oct 2024 11:55:02 +0000
ROA not after:            Fri 17 Oct 2025 12:00:02 +0000
asID:                     46030
IP address blocks:        182.48.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:66:5c:77:44:fc:e0:96:cc:c6:de:3e:5e:65:d0:b6:0d:70:be:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:02 2024 GMT
            Not After : Oct 17 12:00:02 2025 GMT
        Subject: CN=EDA274A7BB0F665C50A6953B5A2CA853DB2BE45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:55:75:55:53:b1:97:48:87:c4:e4:d5:97:
                    2d:62:fc:a4:f2:7a:50:14:c7:47:9a:7b:e1:2e:ee:
                    71:7b:51:cb:05:29:8d:01:bd:94:f9:32:92:c5:14:
                    46:b6:22:63:5e:ab:b8:05:ea:1d:9f:00:6b:d6:05:
                    7e:36:b3:2f:74:0f:28:e6:87:fb:50:b3:c4:99:65:
                    48:74:89:17:ec:66:45:59:df:49:ce:75:2c:0a:8f:
                    1d:6a:76:1f:cf:fe:46:b5:46:5b:c1:8e:0c:fe:70:
                    2b:72:52:8a:94:6a:9b:17:18:03:00:14:b9:8b:39:
                    54:45:25:6c:5c:0a:a6:4c:f2:60:e1:20:4d:a3:76:
                    6e:e8:29:da:81:03:94:af:55:23:1d:48:f9:28:a0:
                    61:dd:16:c2:35:8c:64:3d:68:11:a4:62:55:1b:70:
                    20:eb:c5:17:7c:42:da:54:86:cb:55:f2:1c:84:33:
                    e0:db:94:52:4b:7d:1f:fb:be:ea:75:64:99:c9:2b:
                    ec:4e:5b:bf:42:f8:dc:93:f9:a5:b3:25:c8:1c:62:
                    20:d4:bf:d0:98:72:17:f2:74:2c:27:02:78:06:70:
                    53:9d:94:2a:e0:41:5a:e6:45:07:ee:2a:4a:1e:ba:
                    d2:b6:c7:97:bd:9a:b1:87:04:70:d1:3c:41:ea:6b:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:74:A7:BB:0F:66:5C:50:A6:95:3B:5A:2C:A8:53:DB:2B:E4:5C
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c6:61:74:f3:30:79:4f:f3:46:ca:ae:e7:c7:6b:13:0a:c7:
         f6:9f:4d:f8:b1:b7:a1:fb:f2:82:a1:72:30:6f:24:30:61:71:
         aa:37:78:75:9a:f9:4e:1a:91:f6:21:f1:f6:0d:24:64:41:02:
         f0:bc:40:79:10:5b:5d:de:20:de:c0:97:91:3e:0b:fe:e9:b7:
         ba:99:b4:2a:df:5c:65:b6:e9:cc:de:3b:8f:3e:44:25:7d:37:
         1b:8d:6b:88:85:45:13:5b:52:2a:13:8a:a2:28:18:73:49:46:
         b5:cc:e9:fd:4b:6f:e0:bb:4a:6b:2c:e4:d8:a6:4f:b7:8a:b6:
         f8:71:37:d2:d4:e4:b1:f1:24:41:0b:e6:3b:3c:86:5b:ab:45:
         6e:bd:2c:37:cd:8f:d9:6f:a0:1e:72:ce:21:df:73:c2:93:b2:
         ae:1b:e6:05:93:bf:7d:59:7c:a9:3e:f5:d4:71:d5:b7:7a:76:
         5a:af:91:ed:0b:f7:9c:53:6a:8c:26:a3:f6:f4:be:3d:b1:c6:
         0e:c2:7e:95:83:89:45:91:0e:f6:24:c2:3f:f0:aa:89:0f:ba:
         58:16:da:ba:ad:73:0b:46:d3:8c:25:14:11:86:33:2e:76:89:
         c2:5d:a3:b5:22:e4:1a:e2:f4:bd:a2:ec:90:09:d4:34:f5:b5:
         59:1e:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org