Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          0T544xsN4ySjg/INxvgLm+aGX2IXFj2ZfP/2WfvI8lw=
Subject key identifier:   F1:A8:FC:78:47:CD:02:12:4A:7F:F3:E1:9F:BE:00:BE:CE:C7:12:3C
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       51542F35459C2413B4EBCB07816A93851AF4B22E
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:03 +0000
ROA not before:           Fri 18 Oct 2024 11:55:03 +0000
ROA not after:            Fri 17 Oct 2025 12:00:03 +0000
asID:                     46030
IP address blocks:        182.48.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:54:2f:35:45:9c:24:13:b4:eb:cb:07:81:6a:93:85:1a:f4:b2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:03 2024 GMT
            Not After : Oct 17 12:00:03 2025 GMT
        Subject: CN=F1A8FC7847CD02124A7FF3E19FBE00BECEC7123C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:4f:4b:c1:dc:a9:6c:3f:87:c1:57:c2:3d:
                    cb:10:2b:b3:c4:05:40:a3:0c:e1:11:d5:e0:39:02:
                    c8:6d:e8:8a:60:5b:30:c7:6d:f1:65:2d:b8:22:86:
                    89:78:8d:d2:89:ca:ad:c0:46:4c:49:36:52:76:0c:
                    23:ae:68:4f:32:64:dd:11:f7:e2:fb:ee:ab:50:c8:
                    5c:30:d0:7a:80:cb:1e:16:bd:70:65:61:59:28:52:
                    7d:2e:a3:e6:f6:b0:15:ab:6f:36:07:71:b0:0d:06:
                    53:d5:a1:1e:d3:79:3a:6a:3c:aa:cb:65:24:54:fe:
                    e3:b5:f0:04:e1:83:bb:45:26:a8:75:d1:00:e6:c4:
                    3a:9c:5d:22:00:aa:fb:68:f2:83:04:32:67:a7:08:
                    5c:bc:ba:40:10:bc:70:04:a5:55:3a:3c:48:e1:e3:
                    b9:58:a9:f3:b6:83:d5:78:c2:21:11:61:22:53:a8:
                    3f:9a:f7:66:41:3d:9f:eb:d0:ac:fe:52:05:83:0b:
                    21:34:74:e3:3f:c6:c2:a5:84:7e:86:f4:9c:65:52:
                    bc:b7:04:c2:7f:ae:0c:93:ee:7a:0e:ea:00:4a:3e:
                    00:4b:23:ad:d7:ff:40:73:c7:d4:fa:c2:a2:f1:83:
                    4e:1a:88:c0:03:0e:4b:45:5d:f9:e9:4e:6b:19:f9:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:FC:78:47:CD:02:12:4A:7F:F3:E1:9F:BE:00:BE:CE:C7:12:3C
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136392e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:76:97:b5:c0:89:42:3b:83:9a:5f:04:0a:2c:2b:6c:d8:1f:
         89:10:ad:f8:44:70:f5:d2:c2:88:39:c8:d2:bb:77:e4:7b:7b:
         42:cf:ee:7c:10:9e:dc:10:45:72:1b:40:a1:9d:2e:b3:5d:01:
         5b:df:30:86:90:35:7c:9b:8a:ea:c5:0e:ec:c7:db:eb:a0:4c:
         c8:50:d5:a6:d2:06:17:bf:94:c3:29:35:33:c5:53:0f:15:43:
         56:4c:0b:45:bb:93:65:95:dd:a2:cd:a4:fa:ef:29:23:f0:63:
         98:14:e0:ed:b6:26:6d:3f:d8:f3:be:36:de:9e:e6:03:a0:4f:
         08:38:de:d0:17:35:52:76:70:4a:0d:b5:01:45:30:96:88:f0:
         93:a3:1e:02:cc:e5:12:a7:64:5e:21:33:4c:58:b5:fa:ba:df:
         8d:05:8c:ae:09:bd:e9:9e:73:04:2b:45:86:d1:9d:1d:a6:18:
         e7:ce:93:fa:5e:fb:f3:42:be:df:79:a0:3e:c5:37:25:c8:50:
         57:06:de:63:43:69:dd:4c:56:cb:45:47:06:28:4d:9f:60:ca:
         93:73:90:2d:60:80:05:e3:5b:6a:bf:1d:45:ad:49:0d:a0:af:
         fe:51:92:86:26:29:4c:af:e6:4c:65:d9:f4:6b:d1:9f:45:48:
         2e:aa:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org