Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138372e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138372e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          3UgjHn9Kd6NUaKC2uKO0a9pveb+sI6oz03h+BYFrifs=
Subject key identifier:   CB:66:72:BA:B6:40:94:5D:8D:BE:1B:09:D8:FA:0F:80:C9:22:BF:EC
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       652BBD0CFCC7A7EC8523CA00CCEF8B7DA0A25A60
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138372e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 12:00:06 +0000
ROA not before:           Fri 18 Oct 2024 11:55:06 +0000
ROA not after:            Fri 17 Oct 2025 12:00:06 +0000
asID:                     46030
IP address blocks:        182.48.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:2b:bd:0c:fc:c7:a7:ec:85:23:ca:00:cc:ef:8b:7d:a0:a2:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 11:55:06 2024 GMT
            Not After : Oct 17 12:00:06 2025 GMT
        Subject: CN=CB6672BAB640945D8DBE1B09D8FA0F80C922BFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:aa:74:1f:0b:40:f5:f8:af:dd:5e:57:15:
                    4b:ed:72:49:49:a7:75:0a:28:17:1a:10:cc:56:78:
                    7c:79:02:ad:02:5a:31:55:b5:60:f9:d7:02:d3:7f:
                    f2:8b:31:16:58:51:f7:61:3a:d5:35:52:13:9b:ca:
                    6e:ad:eb:0d:89:8a:96:10:48:bf:d7:40:a4:31:a1:
                    e1:7c:18:cf:c5:3e:c0:af:07:5d:67:d3:91:af:50:
                    4a:ec:6f:f7:da:21:e4:f1:c5:b9:ca:11:69:f0:5e:
                    f7:0a:d5:b2:2f:c8:d7:61:a6:1b:c9:d7:76:e8:49:
                    1b:58:a4:60:60:75:7f:84:c0:4a:68:f3:02:bc:22:
                    bd:a8:54:b0:8e:af:07:28:89:2a:f9:44:70:83:0a:
                    72:40:88:d2:be:fd:0d:7f:35:3e:5c:5d:11:91:48:
                    f6:66:32:ca:63:08:9d:a8:e4:6f:13:bc:f8:f8:4f:
                    5e:ba:d3:0a:bc:37:f5:d9:8d:2a:68:23:11:a3:65:
                    aa:82:e9:d3:34:30:1c:f9:83:6c:05:3e:16:2a:10:
                    59:df:76:e4:b6:db:96:72:b0:f0:62:56:df:a3:ba:
                    3e:f1:4c:f5:ca:3c:90:ed:9c:a9:5c:5e:37:8c:85:
                    be:37:47:f3:30:4a:d3:e0:74:70:d5:f2:66:e1:87:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:66:72:BA:B6:40:94:5D:8D:BE:1B:09:D8:FA:0F:80:C9:22:BF:EC
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138372e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:61:f8:f8:28:cc:41:db:84:63:40:3d:05:dd:93:af:5e:ab:
         95:05:ba:c9:9a:6d:78:36:55:35:d2:65:b0:67:21:4b:c6:49:
         29:9a:62:47:7e:f2:fe:7f:ec:18:43:a7:4e:b3:b2:7b:ac:09:
         e0:ff:47:d1:0d:fc:6d:ea:0d:37:01:46:d5:64:de:e3:80:a7:
         53:07:4d:c4:fa:88:75:28:95:c7:78:89:e9:ba:58:a3:44:72:
         6b:52:af:45:b4:cf:c4:ae:14:04:fa:e8:e3:07:88:75:b6:d6:
         59:75:34:0b:ce:60:cb:1a:d7:2c:dd:0f:a8:db:08:04:93:1e:
         53:de:85:00:b6:b8:9e:f4:b3:e6:90:60:6c:da:40:d8:33:d3:
         d4:13:3d:4d:ae:5c:43:71:2a:2a:23:27:f3:85:6b:9f:73:d8:
         81:bf:5d:ca:e9:be:93:b6:47:89:99:2e:16:7c:00:fa:36:07:
         73:cb:8d:16:36:23:ab:cf:5d:42:f6:3c:99:05:2a:d3:95:d2:
         df:44:97:f8:26:07:7f:22:29:ac:c4:72:14:35:81:aa:4d:1b:
         c7:43:78:22:36:a0:7d:fe:a6:76:e3:1c:5d:63:e6:f2:fa:52:
         3d:32:ad:df:6f:f6:17:bb:aa:c2:35:0a:cb:0a:3d:17:94:d6:
         26:d5:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org