Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          HcQ5GoHHnRwocPGqeTpV3GVhbsdLlY1Kz5sRfa/HuSw=
Subject key identifier:   9B:97:6C:2E:69:03:43:3F:73:B0:C1:9E:1B:C8:18:79:D1:5A:19:91
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       611F1530C3EA276C089648801BB870644C09B20B
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:07 +0000
ROA not before:           Fri 18 Oct 2024 11:55:07 +0000
ROA not after:            Fri 17 Oct 2025 12:00:07 +0000
asID:                     46030
IP address blocks:        182.48.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:15:30:c3:ea:27:6c:08:96:48:80:1b:b8:70:64:4c:09:b2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:07 2024 GMT
            Not After : Oct 17 12:00:07 2025 GMT
        Subject: CN=9B976C2E6903433F73B0C19E1BC81879D15A1991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:dd:e9:f2:b2:7f:7f:84:86:15:d8:af:ab:
                    c9:af:bd:14:68:ee:0d:2b:f7:0a:88:3a:e7:f5:a6:
                    b7:a9:0d:49:7e:bd:d5:5c:57:9d:73:e4:91:9a:12:
                    d8:4d:82:93:76:50:71:1a:d3:b4:22:e0:b5:e8:fa:
                    4b:46:49:4c:92:aa:15:54:2c:08:ed:a8:29:8e:94:
                    90:87:c3:c8:68:41:a5:03:53:f0:f2:e2:8a:94:e8:
                    fa:b5:72:8d:dc:9f:fe:d7:89:ed:f8:52:bb:3f:b7:
                    11:68:f6:e9:87:46:b0:97:91:cf:6b:f1:ae:75:ee:
                    85:81:a4:60:ed:73:a7:8e:77:f4:d5:01:94:7d:ef:
                    12:33:57:19:dc:85:00:ac:b1:4d:a7:3e:e3:00:3d:
                    a6:ee:51:e5:9b:9a:a4:ac:ea:e4:30:eb:4e:97:e6:
                    5b:73:d8:7c:79:9f:c4:04:c5:2c:c4:88:2f:a0:c8:
                    98:3d:7c:14:f5:3b:a1:fc:ce:94:f3:ad:b9:09:1b:
                    75:da:74:05:66:a8:aa:e4:a3:54:bc:1f:43:1a:3e:
                    67:45:26:f8:7e:79:8c:50:d2:d3:f1:17:fb:9f:42:
                    84:6b:be:09:e6:5e:d8:8a:9a:96:58:83:72:78:29:
                    e3:6b:c8:16:53:a2:2b:83:67:b3:52:db:5e:fa:56:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:6C:2E:69:03:43:3F:73:B0:C1:9E:1B:C8:18:79:D1:5A:19:91
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:33:2f:04:9a:42:34:1a:03:d2:9c:5d:01:96:05:2d:ea:d7:
         3b:02:2d:62:35:f1:7f:99:ef:4e:1d:dd:5b:11:8d:3d:08:9b:
         e1:ed:5a:54:de:02:43:d1:7d:de:5b:76:0e:8a:9e:84:c7:49:
         8c:7d:03:b9:ce:5c:88:46:3f:12:32:e0:42:a3:94:3c:09:bd:
         fb:62:ff:e3:30:9e:c9:13:1a:49:04:ae:ef:72:b9:9a:fd:98:
         2e:90:23:da:81:ac:c7:e1:0b:ed:d2:a5:09:6b:12:e6:18:86:
         22:8c:c8:b6:81:5e:d3:82:92:91:86:50:de:78:12:ea:96:b3:
         b2:ff:81:3c:d2:9a:eb:50:40:f9:82:35:fb:b4:63:ab:db:ce:
         06:56:e1:d9:bf:9a:67:a2:3a:e0:46:b3:1f:78:ba:ed:e8:53:
         56:94:a4:1a:48:f0:86:52:61:6f:5a:b9:39:24:ca:85:ed:29:
         c2:3b:0a:15:d1:f5:e1:88:ef:b4:31:f4:62:b3:21:1e:0c:c7:
         cd:d8:62:3e:a1:8f:0e:05:85:86:be:06:80:f4:0a:eb:8d:84:
         f2:e8:7a:40:d4:04:94:68:a3:28:2d:07:4e:53:97:c1:81:37:
         d6:34:c4:bc:d5:75:32:67:d5:66:b1:71:b8:de:54:cf:dd:8b:
         12:80:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org