Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137362e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          +39ZiPXe2qiuQnI8Twz2gwGEEiloIsDlYgaNtpnRdkA=
Subject key identifier:   40:E9:C1:16:2D:4C:2A:99:AA:27:71:53:EF:F2:B4:B6:BD:2B:55:FB
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       46CDB2EA610F2D8AFCEC37FEC92209AECA98B090
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:02 +0000
ROA not before:           Fri 18 Oct 2024 11:55:02 +0000
ROA not after:            Fri 17 Oct 2025 12:00:02 +0000
asID:                     46030
IP address blocks:        182.48.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cd:b2:ea:61:0f:2d:8a:fc:ec:37:fe:c9:22:09:ae:ca:98:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:02 2024 GMT
            Not After : Oct 17 12:00:02 2025 GMT
        Subject: CN=40E9C1162D4C2A99AA277153EFF2B4B6BD2B55FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:e8:18:16:0c:54:0f:ad:e5:d0:34:7e:cb:
                    4e:ec:b1:b6:15:d1:db:2c:91:2c:09:61:46:04:4e:
                    1d:e3:62:70:9f:87:38:10:93:08:ca:dc:fc:0a:71:
                    63:6d:10:6e:8f:76:eb:2d:27:bb:f5:d4:5d:bf:ec:
                    d9:a8:92:67:89:d2:d5:1c:03:c9:37:b4:23:d8:fb:
                    c0:c1:2d:6a:f6:c4:94:77:33:1a:ad:b4:fd:29:a0:
                    c0:40:19:1e:dd:42:d8:7a:ce:3b:db:d8:16:72:e6:
                    af:c0:6e:2d:42:3b:68:4d:66:91:22:f9:f9:d6:73:
                    22:e9:6d:bb:e4:c5:ff:74:a0:1b:09:68:fe:84:50:
                    1e:75:5f:c9:8e:f4:67:8b:4f:72:83:35:de:88:1b:
                    c4:0d:60:ee:d1:8e:35:fa:99:80:e9:dc:ec:15:6b:
                    04:31:65:8b:b1:26:56:91:6c:1c:bb:85:98:21:9f:
                    d2:72:e9:61:a5:28:fe:52:0b:6a:2d:dd:77:a3:5e:
                    91:c0:21:e6:a1:5d:99:36:bf:b5:af:78:65:50:e9:
                    d6:eb:6d:c0:0e:fa:e6:86:3d:0a:0f:72:61:b3:7c:
                    55:38:45:54:ad:72:79:e5:34:21:e3:70:63:a0:f7:
                    48:de:c6:a5:f5:a5:8f:b0:3e:4e:51:30:22:6e:27:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E9:C1:16:2D:4C:2A:99:AA:27:71:53:EF:F2:B4:B6:BD:2B:55:FB
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137362e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:11:a4:e2:5f:62:b9:a4:7c:4b:2c:c7:d7:6e:62:9a:45:77:
         8a:c3:af:e8:fc:16:3b:b8:ee:cc:7d:dc:2a:44:ef:a2:66:8c:
         f6:6d:bc:ae:16:36:b9:3c:0b:f1:13:8c:68:b7:20:de:e7:05:
         65:b4:72:16:54:7f:e5:18:6a:b1:0c:e7:4c:e1:21:84:2f:2f:
         69:bb:23:38:97:64:47:6b:c9:a0:be:86:c2:72:cb:95:d9:27:
         64:31:bf:77:6f:f4:b8:69:29:0e:27:14:f1:34:64:c0:47:58:
         1a:75:55:57:9f:e6:7b:44:f4:d6:51:1c:26:3d:b1:c9:4c:89:
         9c:d7:de:11:7f:8d:85:4a:50:28:4b:3f:87:dc:30:a5:c7:45:
         7e:72:ee:3f:3c:a8:42:73:1c:04:dd:f4:00:f9:4f:da:aa:99:
         87:8e:a5:18:18:9c:1e:a8:9c:bf:11:a4:12:62:08:c4:1c:49:
         af:c4:fe:aa:19:49:13:d3:fb:98:1a:7e:c0:d4:51:1b:42:64:
         52:2b:5d:20:73:c5:91:b2:0a:28:5b:ab:c3:9e:94:d9:60:67:
         2d:17:84:8d:ed:06:38:47:5f:5c:33:5d:66:6a:a7:18:bb:47:
         3f:fe:f2:b4:26:04:2f:df:ef:0e:42:34:e2:63:59:93:cb:55:
         8e:d7:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org