Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Qi/UyyL93gzEX4HNieop4l2lTEkryddDu04UVVgkEQs=
Subject key identifier:   14:50:16:79:FE:9F:14:7E:54:AE:34:4D:47:3C:22:8A:57:53:8C:82
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       65E2939BD6439DC8F090D4D4FA82582D8729FDAC
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:04 +0000
ROA not before:           Fri 18 Oct 2024 11:55:04 +0000
ROA not after:            Fri 17 Oct 2025 12:00:04 +0000
asID:                     46030
IP address blocks:        182.48.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e2:93:9b:d6:43:9d:c8:f0:90:d4:d4:fa:82:58:2d:87:29:fd:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:04 2024 GMT
            Not After : Oct 17 12:00:04 2025 GMT
        Subject: CN=14501679FE9F147E54AE344D473C228A57538C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:5e:cb:e1:92:b7:56:90:47:a3:66:ad:b6:
                    c6:04:32:c0:9d:36:e0:c8:46:ba:2e:77:54:b2:bd:
                    21:df:a7:37:02:9b:63:23:dd:c5:87:0d:82:be:71:
                    2b:53:7a:3b:23:e4:40:51:45:6a:a3:90:82:93:a9:
                    eb:9a:d2:27:59:1f:58:c9:bd:aa:68:cd:9c:54:3f:
                    aa:10:d8:53:2a:7b:80:90:e9:5d:29:13:32:a7:64:
                    bc:a2:94:d2:bb:cc:38:f3:00:28:ef:4c:80:88:4d:
                    35:ef:96:53:c8:50:79:7c:a9:6f:f7:27:5f:76:1a:
                    b7:97:77:55:b7:f2:6d:e8:85:15:79:d3:c8:82:4a:
                    8f:b6:46:7e:9f:33:9e:6e:55:11:65:a9:77:00:a6:
                    9a:d0:e9:04:78:19:c2:5f:8d:8c:28:ab:c3:aa:63:
                    1d:d0:b2:0c:45:48:b9:25:79:6f:33:e0:3a:7b:58:
                    1a:7b:35:e5:cf:46:91:43:69:0d:00:bb:cb:37:3c:
                    df:93:19:ea:8c:99:35:76:8f:b0:dc:12:e5:99:ab:
                    8b:9c:27:05:f1:4c:20:35:47:da:43:f6:9b:b0:1b:
                    c2:e6:9c:02:a4:9a:7e:f8:90:c6:f8:a2:4b:1a:fc:
                    21:c2:af:90:a4:f5:15:59:38:01:28:ae:6b:a0:ea:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:50:16:79:FE:9F:14:7E:54:AE:34:4D:47:3C:22:8A:57:53:8C:82
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:39:ae:b5:a8:75:a3:75:8c:3e:88:7b:5d:31:81:2a:5c:0c:
         6a:fb:5f:2a:a2:d7:f7:ec:31:72:c5:93:04:db:ad:23:51:27:
         5a:a4:a6:22:c2:27:a2:ec:d3:d7:02:c6:b3:22:4e:ca:00:73:
         16:14:4e:89:34:69:98:45:c8:c6:10:7d:fa:f0:8f:c5:62:87:
         dc:db:30:f2:ac:95:07:83:e4:92:0e:33:b5:0b:a1:f1:9b:9e:
         b5:52:98:98:24:8a:1a:d8:7e:bf:b7:da:40:d4:60:8f:bc:38:
         26:8a:10:7e:2d:19:e6:e6:10:24:63:d5:e8:12:5f:75:6b:31:
         49:ef:f8:b1:24:20:a3:99:2b:2c:cb:09:dc:5f:81:46:41:e9:
         9c:ed:c4:3f:af:cf:33:98:9f:e8:ac:27:9a:06:18:90:90:ef:
         42:04:6d:2e:9b:64:83:ac:b8:bd:5e:ee:bf:dd:95:ee:1f:71:
         9a:b8:6f:70:3e:41:4f:e9:2f:17:41:10:98:0c:fd:c7:f6:68:
         7c:52:f0:fc:d8:4b:ae:b8:3a:d9:3f:39:e2:0b:06:5d:0a:a9:
         16:15:27:ef:cd:0a:78:ca:56:18:b7:dc:9b:1c:d5:8f:64:fb:
         5d:71:dc:9a:e3:6c:49:60:68:1d:f2:d4:f5:ee:49:e9:08:ca:
         8f:3a:90:9e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZeKTm9ZDncjwkNTU+oJYLYcp/awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNDEwMTgxMTU1MDRaFw0yNTEwMTcxMjAwMDRaMDMxMTAvBgNV
BAMTKDE0NTAxNjc5RkU5RjE0N0U1NEFFMzQ0RDQ3M0MyMjhBNTc1MzhDODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuA17L4ZK3VpBHo2attsYEMsCd
NuDIRroud1SyvSHfpzcCm2Mj3cWHDYK+cStTejsj5EBRRWqjkIKTqeua0idZH1jJ
vapozZxUP6oQ2FMqe4CQ6V0pEzKnZLyilNK7zDjzACjvTICITTXvllPIUHl8qW/3
J192GreXd1W38m3ohRV508iCSo+2Rn6fM55uVRFlqXcApprQ6QR4GcJfjYwoq8Oq
Yx3QsgxFSLkleW8z4Dp7WBp7NeXPRpFDaQ0Au8s3PN+TGeqMmTV2j7DcEuWZq4uc
JwXxTCA1R9pD9puwG8LmnAKkmn74kMb4oksa/CHCr5Ck9RVZOAEormug6o7VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUFFAWef6fFH5UrjRNRzwiildTjIIwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwsjANBgkqhkiG
9w0BAQsFAAOCAQEAIDmutah1o3WMPoh7XTGBKlwMavtfKqLX9+wxcsWTBNutI1En
WqSmIsInouzT1wLGsyJOygBzFhROiTRpmEXIxhB9+vCPxWKH3Nsw8qyVB4Pkkg4z
tQuh8ZuetVKYmCSKGth+v7faQNRgj7w4JooQfi0Z5uYQJGPV6BJfdWsxSe/4sSQg
o5krLMsJ3F+BRkHpnO3EP6/PM5if6KwnmgYYkJDvQgRtLptkg6y4vV7uv92V7h9x
mrhvcD5BT+kvF0EQmAz9x/ZofFLw/NhLrrg62T854gsGXQqpFhUn780KeMpWGLfc
mxzVj2T7XXHcmuNsSWBoHfLU9e5J6QjKjzqQng==
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org