Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Ibt9MNcGelyvcmACjW5fg+vdjasN/efch7UwP7+J6kc=
Subject key identifier:   CB:74:3B:A1:A7:79:77:97:21:32:EF:56:05:7A:D5:26:42:B6:86:80
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       7B10F4B5DA51A01285D5798D4815193C42BC1559
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 17 Nov 2023 11:55:15 +0000
ROA not before:           Fri 17 Nov 2023 11:50:15 +0000
ROA not after:            Fri 15 Nov 2024 11:55:15 +0000
asID:                     46030
IP address blocks:        182.48.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:10:f4:b5:da:51:a0:12:85:d5:79:8d:48:15:19:3c:42:bc:15:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 17 11:50:15 2023 GMT
            Not After : Nov 15 11:55:15 2024 GMT
        Subject: CN=CB743BA1A77977972132EF56057AD52642B68680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:c2:a5:ea:21:99:ad:15:c9:f6:0c:a4:cd:
                    c7:31:9d:94:55:6d:bd:9c:b9:d3:91:22:ca:b7:93:
                    41:17:d7:4f:52:7c:8d:22:96:5e:89:de:e6:50:71:
                    58:27:80:30:07:75:ea:43:6d:c8:b1:6a:19:57:c6:
                    8c:1b:56:f7:6d:04:38:a3:6b:6b:7a:d9:5a:fe:5c:
                    c1:fd:87:7a:7b:f0:3a:7c:3b:3c:07:e2:57:3f:12:
                    50:1e:d3:5c:f2:cb:e4:b2:ac:78:fc:39:37:bb:03:
                    77:35:f1:38:d3:4e:bf:a0:d5:03:96:d6:54:78:6f:
                    87:70:11:f9:44:31:ab:ea:04:91:d7:d4:fe:9e:b1:
                    73:17:da:9c:33:f6:3a:c6:b7:d6:ba:0e:f6:8c:b6:
                    98:a7:5e:13:cf:e0:dc:a5:a0:6d:af:b7:c8:93:3c:
                    6c:6b:27:36:94:af:fe:09:fb:98:6a:9c:52:ee:85:
                    27:24:2c:14:17:48:ae:9b:12:0e:84:55:b8:a4:8e:
                    a2:29:9a:9b:2d:5a:30:f1:bb:3c:d7:43:e9:bb:9e:
                    60:9e:01:ca:98:33:97:d8:ca:88:c1:19:04:f8:e4:
                    9a:27:26:2b:3b:99:4d:37:2e:de:54:92:fb:e3:be:
                    44:2f:36:ac:29:4e:7e:01:56:77:29:ea:53:ae:cf:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:74:3B:A1:A7:79:77:97:21:32:EF:56:05:7A:D5:26:42:B6:86:80
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:0c:5a:a7:d8:77:f7:40:d9:0a:c5:f0:46:c7:e9:07:5a:
         28:c6:cb:80:32:dc:03:3a:12:3b:cc:69:0f:b7:d4:60:15:6e:
         c0:9c:df:a5:ec:2f:a5:42:d1:91:9d:07:23:31:88:c5:30:4c:
         28:ff:2c:04:8d:f4:6c:09:46:bb:b6:05:68:98:3a:76:fd:0e:
         8c:b2:7d:51:ad:12:4a:3d:d5:9c:90:2f:0a:2d:4d:f6:ba:2f:
         3b:49:0f:c1:d6:c2:13:ad:61:23:01:cb:95:2b:6e:d3:e8:29:
         9e:66:27:5a:4a:cb:41:7d:41:5d:27:ef:c0:ab:70:c2:ce:9f:
         1f:76:8b:d8:9f:cc:60:6f:82:3c:03:97:f1:c0:f6:a9:b7:03:
         32:a9:bc:e9:15:3a:f3:a9:4a:62:56:b5:2f:0e:4b:e7:12:cd:
         63:60:c7:7c:eb:40:c6:75:1f:9a:bd:7d:1a:e2:48:ce:23:e9:
         e8:70:76:c6:91:68:40:ca:ed:11:ba:10:92:7a:3d:1a:7a:6b:
         54:0f:b9:45:7d:9b:2c:a2:7f:fa:72:ba:a1:76:f5:6e:df:93:
         ce:4c:54:cd:a4:8a:67:81:01:f7:4f:7f:71:72:01:aa:87:fb:
         0f:e3:61:d0:61:e5:3e:5d:2c:7f:55:ac:fb:e7:5f:1d:4b:57:
         e1:c7:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org