Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          XUZtKsFqeIODkga1fqeHIpmKBxMRUS8FwuufwXLfaPo=
Subject key identifier:   0C:06:CA:F4:80:A6:44:EB:E6:C5:D1:7B:5B:4C:AB:31:AA:47:45:B8
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       0C7DF731DE73F0573E0642BB81B94EAA1F373AD0
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:06 +0000
ROA not before:           Fri 18 Oct 2024 11:55:06 +0000
ROA not after:            Fri 17 Oct 2025 12:00:06 +0000
asID:                     46030
IP address blocks:        182.48.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7d:f7:31:de:73:f0:57:3e:06:42:bb:81:b9:4e:aa:1f:37:3a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:06 2024 GMT
            Not After : Oct 17 12:00:06 2025 GMT
        Subject: CN=0C06CAF480A644EBE6C5D17B5B4CAB31AA4745B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:e0:0d:19:7c:8e:e3:40:ee:07:29:36:23:
                    8c:a0:c3:dc:5e:48:74:32:f9:07:ed:23:08:11:57:
                    8d:ad:82:cf:a9:d5:ed:00:71:14:99:bc:8e:89:73:
                    13:11:c9:3c:74:54:6f:bc:55:01:eb:d0:7a:f9:e6:
                    ee:08:af:02:c7:94:2a:65:9a:3d:cd:bc:fd:c7:88:
                    30:9e:aa:3a:71:f6:7b:89:a6:63:e7:92:f6:f3:4b:
                    4b:8f:d9:b6:d5:9c:54:40:73:e4:b4:9f:a3:43:90:
                    f5:a0:ea:4e:a9:7d:d5:51:d4:72:64:c5:6c:5d:ba:
                    cd:37:d9:a4:da:63:c2:d2:f2:fe:41:e4:55:d3:11:
                    25:2a:51:75:b6:98:11:99:44:49:96:d3:63:fc:7c:
                    86:e2:98:16:9e:a0:89:40:e0:20:8e:e6:d4:00:96:
                    56:f9:6c:6c:7e:dd:31:d2:a7:69:7b:72:37:d6:78:
                    0f:96:f6:98:ba:72:94:9a:eb:5a:a5:c0:76:f9:55:
                    9c:5b:5b:62:5a:c3:09:29:48:32:ef:12:56:07:dc:
                    05:01:05:6d:8c:b9:af:ee:e2:5d:70:80:f8:8b:87:
                    98:0e:8f:f8:e4:2b:40:d5:f5:d3:6b:68:0a:af:1c:
                    08:97:d2:15:d2:73:93:26:2d:03:58:d6:f3:3d:3f:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:CA:F4:80:A6:44:EB:E6:C5:D1:7B:5B:4C:AB:31:AA:47:45:B8
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:02:10:d3:7c:9c:88:46:92:ce:c7:0e:85:f5:46:2d:18:
         ba:a0:b6:44:97:fb:b1:d1:10:67:87:cf:0c:92:98:02:45:ea:
         d0:a1:53:59:ce:0b:da:a8:72:2c:6c:88:bd:cc:4b:ce:46:53:
         6b:0b:f7:6e:91:44:51:1d:08:08:64:d3:68:d3:54:0b:68:c7:
         e4:d5:90:f7:71:0b:4e:44:8c:7b:d0:e7:e8:18:8a:c7:14:ca:
         af:e7:19:12:4d:bb:7f:1f:08:0d:07:31:97:9f:d1:d9:96:83:
         0b:16:5a:d3:05:04:ec:ed:95:11:29:ad:87:38:1d:7e:eb:03:
         b2:d0:5a:2d:44:36:40:bc:99:bc:e4:a3:aa:96:eb:b1:0b:b1:
         20:3c:df:45:7b:0a:79:61:43:71:67:5f:71:a1:17:00:32:8a:
         1b:bd:32:4f:54:df:60:39:1a:da:75:bd:78:78:95:10:89:e6:
         82:5c:44:3f:14:db:5f:18:72:bf:ef:4a:e6:eb:db:ee:d5:b7:
         d1:15:a9:ba:31:6c:a5:09:ce:b1:a0:38:9a:22:3c:c7:20:52:
         63:b2:63:2f:ae:6b:a6:b5:9b:70:b4:fb:99:5e:ec:ae:fd:92:
         f3:c3:82:18:5b:12:c4:8f:0d:e9:8d:2d:ac:25:15:34:6c:38:
         14:69:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org