Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138362e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          eofjFQDxceEn69q6pyR8pAz7GZ/Ow/TvXx5RqBP1MBA=
Subject key identifier:   20:49:A0:75:4B:B3:62:F4:35:24:D2:EB:75:F3:99:AE:6F:C5:91:1B
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       0F4A7262ED4250D7089109DB6EE5746E02990693
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 17 Nov 2023 11:58:49 +0000
ROA not before:           Fri 17 Nov 2023 11:53:49 +0000
ROA not after:            Fri 15 Nov 2024 11:58:49 +0000
asID:                     46030
IP address blocks:        182.48.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:72:62:ed:42:50:d7:08:91:09:db:6e:e5:74:6e:02:99:06:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Nov 17 11:53:49 2023 GMT
            Not After : Nov 15 11:58:49 2024 GMT
        Subject: CN=2049A0754BB362F43524D2EB75F399AE6FC5911B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:03:00:66:39:58:19:17:0c:00:d8:f3:8c:
                    19:5a:28:35:23:19:e8:54:8c:01:2d:16:2d:3a:97:
                    83:c2:81:aa:bc:ee:20:78:7a:47:41:eb:2e:93:da:
                    41:1d:8c:0c:92:e3:6c:2e:3f:a3:5e:70:e7:ec:f2:
                    69:e0:e8:89:15:73:6e:c6:95:7c:e7:c3:d5:3b:4d:
                    ac:09:cf:c0:9c:cf:b1:73:61:62:5d:5a:70:b2:a1:
                    c7:4d:e4:0a:bc:0a:8d:08:6b:88:20:43:e2:5c:7f:
                    57:41:35:3c:78:d8:ee:19:69:1e:0d:ca:8e:3f:89:
                    2d:a2:b6:d1:f6:fd:b5:10:a6:ce:98:d0:33:ac:ce:
                    8a:8d:68:9d:52:c1:59:08:70:19:39:3b:58:e3:cd:
                    ff:c8:45:1b:9c:59:91:75:e5:ad:c8:60:85:be:18:
                    86:29:96:fe:6c:03:48:b5:da:31:a0:16:b2:76:8d:
                    8d:a6:29:3a:72:02:2c:11:2a:c4:18:7f:d2:d2:ed:
                    87:9e:63:ea:98:b4:2f:7a:26:4f:77:f6:7e:87:c0:
                    32:5a:da:f0:8c:33:a6:69:76:60:e6:1d:8e:b9:f3:
                    7f:06:86:b5:92:54:ac:07:98:84:cf:13:1d:e4:03:
                    5b:d6:9f:51:6b:c4:11:11:d1:ae:af:5a:2c:4c:67:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:A0:75:4B:B3:62:F4:35:24:D2:EB:75:F3:99:AE:6F:C5:91:1B
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138362e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c4:96:2e:c9:6b:c9:23:3f:76:32:7c:9a:d8:c2:21:69:a1:
         93:65:6a:48:b2:ce:6b:aa:c5:b1:d4:52:59:66:bb:3a:15:79:
         9d:53:ae:4d:49:8e:88:7b:b8:71:64:0e:a5:fa:d0:e2:59:03:
         75:11:d2:59:d8:c8:d7:3d:05:49:da:0d:5d:40:3b:63:71:46:
         08:b7:07:f9:9a:7e:e8:88:fa:81:83:a0:ec:08:5e:cc:1b:34:
         14:5b:dc:64:42:bd:ce:62:fd:9d:a3:5b:9b:b1:23:88:ed:80:
         65:dc:8f:4a:fb:77:c1:3b:95:7b:8c:d8:d0:a4:b2:42:20:dd:
         4b:3f:dd:e9:af:43:71:cd:8e:59:c3:a7:6f:de:4c:d9:5f:57:
         69:6e:1c:53:b6:a5:10:21:56:55:cc:5b:0f:72:d1:db:41:81:
         ce:16:56:95:85:de:bd:1d:92:54:c9:ae:50:c0:12:e5:44:10:
         8d:63:45:40:d3:0a:9c:de:75:c8:83:9a:5c:3c:8b:30:3b:cc:
         fc:22:f5:c4:fa:20:89:e0:c2:7e:db:da:9b:39:ad:3d:42:1d:
         8b:32:1b:6e:e2:a4:c0:7d:33:f3:71:4b:de:96:85:e4:a5:53:
         88:cf:a2:c0:2c:e7:2e:61:9d:c5:15:20:77:41:db:13:5b:07:
         e9:cb:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org