Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137302e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          aKrqLRc3oeRmKtAiHafzWG0ZDnPDSTTrhQnihUWKQwo=
Subject key identifier:   1D:89:E7:B4:DE:E0:4F:9C:62:5A:29:89:7F:D9:43:C5:F4:89:BF:A6
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       4516BB4882A9B97B050C5FDB31597A3333E68689
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:06 +0000
ROA not before:           Fri 18 Oct 2024 11:55:06 +0000
ROA not after:            Fri 17 Oct 2025 12:00:06 +0000
asID:                     46030
IP address blocks:        182.48.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:16:bb:48:82:a9:b9:7b:05:0c:5f:db:31:59:7a:33:33:e6:86:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:06 2024 GMT
            Not After : Oct 17 12:00:06 2025 GMT
        Subject: CN=1D89E7B4DEE04F9C625A29897FD943C5F489BFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:2f:15:cf:20:8f:10:74:9f:e0:4f:6d:bf:
                    51:df:83:7c:79:45:e1:ff:a5:71:91:f8:7e:57:37:
                    14:87:28:8f:ac:98:67:22:b8:7a:34:d4:db:b3:e6:
                    e0:4a:1c:2c:59:4c:04:fe:33:63:2e:25:6a:f4:b7:
                    07:c2:16:3b:74:c7:c9:82:ab:81:a5:c4:1c:ec:be:
                    45:3a:a3:79:98:b7:36:29:81:26:fa:38:80:7c:16:
                    63:15:61:ac:ab:32:fa:37:d5:d7:62:d2:77:d3:30:
                    be:3a:eb:29:8b:fa:f6:2b:73:3b:d6:76:b1:e1:d7:
                    d9:6f:24:68:24:c0:b5:e9:43:dc:a5:b6:2e:40:e4:
                    12:bf:28:8f:67:94:86:f9:69:67:4e:86:84:f5:d9:
                    e0:c6:7b:fe:7a:87:43:52:fe:fe:61:16:91:87:18:
                    8f:80:4c:4e:60:ac:d8:77:e2:63:d4:7a:a2:11:2f:
                    56:17:6e:1d:b7:2d:fd:53:2a:75:ec:44:6f:06:eb:
                    97:fa:5e:95:80:2c:56:ef:07:76:7a:d0:6d:70:62:
                    c8:bb:e4:aa:88:18:83:46:0e:08:47:c4:d8:fc:5a:
                    09:2e:82:f9:49:69:88:e2:6d:36:ae:4a:79:4d:d4:
                    85:89:40:1a:ce:fc:57:8a:61:6c:3e:9e:e2:d6:72:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:89:E7:B4:DE:E0:4F:9C:62:5A:29:89:7F:D9:43:C5:F4:89:BF:A6
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137302e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:01:7d:a7:0a:31:7f:bf:6b:fe:80:d7:5c:18:36:78:d3:31:
         da:c4:05:a7:ac:9f:3e:db:7b:42:e4:25:f8:1f:bc:33:44:d1:
         ef:bf:47:7d:84:c1:cb:96:c6:f3:7c:62:f8:27:31:14:6b:40:
         35:82:de:8d:19:0a:b8:81:b8:02:87:65:6a:ad:5f:e2:9a:5f:
         77:90:6d:0f:4e:3b:5f:1f:5d:fb:d9:bb:0b:16:4c:14:87:35:
         59:05:2c:a1:7e:50:cd:d4:55:15:2c:b2:9c:22:3e:88:07:8a:
         d1:1e:ad:31:5b:40:50:54:4b:6a:09:a5:54:f6:2c:e2:37:45:
         b7:ae:13:18:df:0d:3b:4f:38:ac:47:62:e9:79:6a:96:77:98:
         6b:05:81:33:94:e3:80:c9:34:3e:2b:e1:c4:b7:5e:9e:d7:ae:
         6d:6d:0f:97:a5:ef:19:16:f2:65:36:fc:d9:03:3d:69:e4:8d:
         ed:a2:0b:55:63:dc:37:84:1e:b5:6c:94:13:b0:a1:d6:34:ec:
         29:0f:0f:77:bf:00:ac:59:60:d3:53:59:87:07:a6:73:0f:dc:
         22:01:0e:f6:6e:04:bb:6e:65:c9:b2:9e:f5:32:7b:be:58:09:
         71:03:99:64:92:8b:db:d6:4d:38:a2:37:8b:78:98:11:49:28:
         25:eb:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org