Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          21dVvDFGfDiujO47vod+njWBpHIx18cGyjhfYBLp0fI=
Subject key identifier:   1D:0D:F6:BE:40:0E:E6:E9:71:E0:73:E9:41:6F:9E:8C:F5:7C:93:EB
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       17E4A590E179488CEE3BC81547252442EA755FE2
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:03 +0000
ROA not before:           Fri 18 Oct 2024 11:55:03 +0000
ROA not after:            Fri 17 Oct 2025 12:00:03 +0000
asID:                     46030
IP address blocks:        182.48.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e4:a5:90:e1:79:48:8c:ee:3b:c8:15:47:25:24:42:ea:75:5f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:03 2024 GMT
            Not After : Oct 17 12:00:03 2025 GMT
        Subject: CN=1D0DF6BE400EE6E971E073E9416F9E8CF57C93EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:a0:29:ce:cc:a9:c4:84:8f:32:34:87:21:
                    15:c2:3b:dd:00:ab:63:80:85:1e:ea:62:11:c8:f3:
                    7a:40:f8:56:8d:99:c3:f2:1b:8d:a5:5b:19:b2:fc:
                    70:8d:80:ad:18:97:1b:a2:a5:27:89:00:b9:c0:43:
                    26:63:48:e7:00:71:25:ae:49:d5:c2:31:78:f7:0c:
                    2e:50:41:fe:77:9c:9b:a7:7f:55:b9:89:4a:13:21:
                    c2:9b:03:3e:27:7e:b5:d7:80:6e:b4:60:d7:b0:08:
                    b2:7f:11:df:a6:c4:43:a7:48:20:88:a5:c4:21:cd:
                    0f:42:e0:69:a9:4c:f9:ba:24:12:e4:87:b4:c1:0f:
                    9d:17:26:de:0a:f4:65:b5:89:1b:b4:ef:ff:67:df:
                    a6:9e:0a:84:4c:26:8a:95:af:3f:0d:ac:1a:2f:3b:
                    5b:59:b0:08:4b:b2:42:85:a9:4e:c5:21:df:49:05:
                    56:f0:f9:d3:44:d7:0f:cd:43:7e:ed:94:d0:d6:79:
                    d9:b2:ea:f2:bf:4f:d1:89:23:94:2f:87:28:47:38:
                    64:6e:63:99:ce:15:c9:ab:f0:d9:89:5d:a0:16:75:
                    8a:9b:06:be:ba:e7:97:a2:89:51:b9:c2:d6:19:34:
                    05:18:8c:94:7e:bc:bd:2c:52:b6:8e:e5:6d:65:ca:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0D:F6:BE:40:0E:E6:E9:71:E0:73:E9:41:6F:9E:8C:F5:7C:93:EB
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:0c:38:9a:04:9e:2c:fd:13:3c:3e:61:aa:3b:9b:ad:65:
         40:17:18:52:3d:2b:31:99:c2:b6:05:d1:5a:88:7b:7f:99:3c:
         c3:e7:ab:96:4f:f5:33:09:5d:2f:58:ae:82:33:3c:fd:57:8d:
         8e:88:87:4c:c1:f5:0f:40:7a:b4:35:ba:a0:4a:a8:20:0c:03:
         88:b3:dc:b1:cc:9e:93:a9:67:de:76:94:7e:aa:88:0a:1e:aa:
         b9:7a:e1:29:30:49:22:2f:3a:c5:a5:90:3f:6e:1b:36:79:5f:
         94:81:75:0f:aa:84:04:6d:ea:0e:72:d7:d4:c6:0d:73:15:f1:
         77:c4:d1:cf:e2:1d:91:e8:05:c6:94:66:95:47:1c:9d:c2:f8:
         2c:2b:69:7b:ef:26:82:db:a9:9e:40:48:8d:cb:3b:f3:8a:f1:
         5a:37:3a:ce:9c:28:07:90:29:7d:88:cc:7b:14:b6:8d:fc:a1:
         21:5d:e3:25:f4:8c:77:7e:ac:70:9f:68:4b:47:a3:92:30:24:
         a1:e9:2c:2b:54:81:39:48:d0:30:9f:91:65:47:71:af:e5:eb:
         f9:58:26:c5:69:67:22:23:23:19:33:d8:19:c3:43:1d:29:e8:
         77:1f:a0:cb:c7:02:77:36:21:7d:53:21:63:73:4c:91:c8:32:
         c8:80:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org