Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          0rnvuoiVtTgdbOPInOefPtOaPzt6aW8XAQ2SKwISHBE=
Subject key identifier:   8C:7B:10:F3:5E:A4:B2:24:E7:B2:16:AE:28:E7:6A:6A:09:FE:A5:6F
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       42817AE7AB139FB093AAA5CA55927E5809180F87
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:04 +0000
ROA not before:           Fri 18 Oct 2024 11:55:04 +0000
ROA not after:            Fri 17 Oct 2025 12:00:04 +0000
asID:                     46030
IP address blocks:        182.48.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:81:7a:e7:ab:13:9f:b0:93:aa:a5:ca:55:92:7e:58:09:18:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:04 2024 GMT
            Not After : Oct 17 12:00:04 2025 GMT
        Subject: CN=8C7B10F35EA4B224E7B216AE28E76A6A09FEA56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:40:1f:06:45:62:50:f6:04:df:62:c1:a5:
                    f2:b9:2e:e1:39:94:5c:89:59:ba:dd:a6:be:1f:8b:
                    15:d4:08:5b:06:84:3d:ca:5b:47:5d:5c:a6:df:cb:
                    f3:a3:9f:52:63:ec:2c:fb:a2:ce:ff:e3:4b:46:33:
                    98:53:fe:b6:37:f1:79:a3:86:5c:e0:13:52:d5:e9:
                    54:d4:99:0c:1f:42:3e:dc:8c:2f:aa:c2:fd:de:58:
                    3b:00:dc:1f:59:28:e9:cf:64:ab:2e:34:2a:52:8b:
                    27:24:2b:51:ee:20:f3:62:75:94:dd:0d:26:14:c5:
                    ce:0f:d2:c1:1f:6e:6f:91:30:ca:42:26:e7:15:a6:
                    b8:d1:74:2f:32:88:1b:81:40:21:60:8f:6a:ca:98:
                    7d:57:89:8a:3f:b9:d7:ae:cd:15:f8:90:4c:59:34:
                    b0:4a:a7:6b:ab:3e:30:18:4e:12:3e:b1:c8:7b:d2:
                    f7:b9:c2:1e:be:08:c8:22:ad:9e:99:0b:ca:84:9a:
                    c1:d4:29:d6:0f:46:68:f0:4f:6a:a2:ab:0d:96:84:
                    ae:da:2c:f2:57:46:53:b1:67:e3:25:44:ed:b2:d3:
                    60:d8:09:87:ff:62:b2:13:3a:6b:85:1c:58:7f:ae:
                    14:82:db:fb:71:d7:f6:f0:91:de:c8:24:86:05:b9:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7B:10:F3:5E:A4:B2:24:E7:B2:16:AE:28:E7:6A:6A:09:FE:A5:6F
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:07:e8:ba:3c:11:90:6d:60:77:05:13:fb:20:93:72:aa:
         cc:7f:5f:c8:66:e3:63:e7:7c:4d:46:32:c2:d3:3f:08:b5:ca:
         30:01:54:56:44:09:49:ce:dd:ff:b2:2f:8f:81:cd:29:4c:26:
         2b:ed:38:b7:9c:fc:f0:62:83:8e:86:d8:a7:68:8f:99:42:cf:
         fe:28:c5:2b:63:47:e0:72:ff:a8:98:85:72:c5:31:f0:72:d6:
         db:ca:e8:de:bc:76:f1:36:c3:c7:6b:4c:07:87:43:72:61:f6:
         9e:83:df:3a:8c:fb:86:b1:e2:6d:01:73:60:d0:91:63:ea:88:
         ee:f1:01:d7:3c:f7:1c:df:ca:72:30:56:58:e7:9e:41:74:4f:
         ba:2b:c8:5c:c8:ed:66:a8:ea:ec:e1:52:ff:c0:35:7d:0b:d2:
         95:e3:9b:4f:92:c1:5b:d5:cb:37:fb:42:39:48:bb:7a:a8:7f:
         41:d9:d9:26:2c:d8:2e:ea:dc:c8:92:95:17:53:d0:36:6e:45:
         54:14:8d:36:a1:6a:44:35:13:9a:ad:24:6e:c5:3d:7f:36:f7:
         c3:1e:2b:79:be:2a:fc:3c:6d:19:87:7b:a7:7f:cf:5d:ac:22:
         cd:0a:d0:48:fc:4a:07:f6:6e:54:96:94:f4:d9:60:78:6f:55:
         4b:e4:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org