Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          ceEnfWRwmqLHh0Lw2syLsn9i08+vwf2GZqNCFPBl9j4=
Subject key identifier:   FB:2E:15:DF:2B:DC:B1:B3:86:A3:36:76:39:BF:F1:07:DE:E6:8B:64
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       7A4EFC58745D49BAD78238E9B51E3A3EF06B43D3
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 18 Oct 2024 13:00:01 +0000
ROA not before:           Fri 18 Oct 2024 12:55:01 +0000
ROA not after:            Fri 17 Oct 2025 13:00:01 +0000
asID:                     46030
IP address blocks:        182.48.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4e:fc:58:74:5d:49:ba:d7:82:38:e9:b5:1e:3a:3e:f0:6b:43:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct 18 12:55:01 2024 GMT
            Not After : Oct 17 13:00:01 2025 GMT
        Subject: CN=FB2E15DF2BDCB1B386A3367639BFF107DEE68B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:76:30:f6:8e:3a:6b:83:27:09:48:27:52:
                    bc:5f:4a:2a:3a:a7:0b:27:58:0c:13:a6:3f:b0:fa:
                    01:5b:49:a5:6f:1f:f8:dd:99:5b:60:15:ca:33:ed:
                    ff:76:b6:26:d3:9d:cd:ee:7e:38:6f:53:4c:01:8e:
                    73:06:5a:16:8b:f7:03:ef:ee:d0:79:3a:68:69:d9:
                    0d:bf:e0:61:45:e9:86:04:d7:ec:3e:df:b0:b9:e3:
                    60:4a:bf:1a:78:c8:27:09:54:20:4e:42:cf:3a:f2:
                    a7:a0:dc:3a:23:9c:05:68:17:69:9b:06:90:1b:83:
                    fc:35:7b:be:ef:98:d7:89:49:bf:fe:f6:15:0d:8e:
                    e4:11:25:b1:c6:1c:ff:f5:0f:86:50:60:78:5a:5e:
                    d3:87:3b:3a:a9:e7:e0:cd:e9:14:1a:e4:ca:b5:45:
                    8f:63:63:58:88:7f:2b:8b:2f:c4:1f:1e:97:e4:61:
                    ae:34:b9:fc:de:bf:22:c0:b4:ee:da:f5:c0:71:89:
                    71:e2:ab:7b:e2:1e:97:bc:8c:c2:59:20:58:69:94:
                    de:9a:bf:f2:86:1e:19:c5:f8:61:92:bd:81:13:79:
                    d4:d9:6d:fd:2d:89:e0:89:9c:e9:c4:55:cf:b0:c7:
                    12:d8:93:c6:4e:a9:36:2f:14:c8:d9:6b:be:ba:ee:
                    78:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:15:DF:2B:DC:B1:B3:86:A3:36:76:39:BF:F1:07:DE:E6:8B:64
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:9a:d1:ac:2f:8a:80:80:ef:22:58:56:e6:ff:85:cf:89:
         6e:d9:91:9b:e1:a9:b7:eb:5c:70:51:66:05:54:46:fa:69:d2:
         50:5f:e8:ff:ca:74:75:bc:28:d0:bc:80:a1:85:96:90:69:ed:
         69:4a:13:89:bc:c3:af:c2:53:3c:46:ab:64:e7:df:56:b7:ec:
         ea:02:ba:ff:e8:30:40:f7:ef:42:a3:10:1f:17:46:dd:2e:dd:
         b8:81:f7:d2:fd:76:5a:c7:0e:29:d4:06:53:5f:1b:17:8e:24:
         0e:98:c4:8e:13:7c:db:08:da:40:4c:e5:3b:2f:de:d8:4b:74:
         11:02:f1:f7:07:64:f7:fc:87:f9:64:59:e0:6f:6c:5d:e0:49:
         5f:38:33:af:17:ac:2d:72:22:c6:8b:dc:d0:10:fd:df:eb:96:
         30:61:7d:9d:20:6d:9d:30:f6:ca:78:16:00:fe:50:dd:fc:f4:
         b2:05:28:d1:54:ba:66:f7:a2:2c:a3:3e:4e:a3:67:e1:bc:e8:
         ce:b8:95:9a:91:be:79:c1:63:4d:a4:7a:07:b3:48:65:0a:86:
         b1:d2:17:2c:e2:8c:76:95:52:58:82:56:c7:a7:a5:be:b8:8d:
         a3:12:59:39:c1:4b:a6:25:a8:5a:47:66:bc:fb:c1:bd:9f:73:
         90:bf:7f:6e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUek78WHRdSbrXgjjptR46PvBrQ9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNDEwMTgxMjU1MDFaFw0yNTEwMTcxMzAwMDFaMDMxMTAvBgNV
BAMTKEZCMkUxNURGMkJEQ0IxQjM4NkEzMzY3NjM5QkZGMTA3REVFNjhCNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0XYw9o46a4MnCUgnUrxfSio6
pwsnWAwTpj+w+gFbSaVvH/jdmVtgFcoz7f92tibTnc3ufjhvU0wBjnMGWhaL9wPv
7tB5Omhp2Q2/4GFF6YYE1+w+37C542BKvxp4yCcJVCBOQs868qeg3DojnAVoF2mb
BpAbg/w1e77vmNeJSb/+9hUNjuQRJbHGHP/1D4ZQYHhaXtOHOzqp5+DN6RQa5Mq1
RY9jY1iIfyuLL8QfHpfkYa40ufzevyLAtO7a9cBxiXHiq3viHpe8jMJZIFhplN6a
v/KGHhnF+GGSvYETedTZbf0tieCJnOnEVc+wxxLYk8ZOqTYvFMjZa7667nhxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+y4V3yvcsbOGozZ2Ob/xB97mi2QwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzOTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwvzANBgkqhkiG
9w0BAQsFAAOCAQEAnWya0awvioCA7yJYVub/hc+JbtmRm+Gpt+tccFFmBVRG+mnS
UF/o/8p0dbwo0LyAoYWWkGntaUoTibzDr8JTPEarZOffVrfs6gK6/+gwQPfvQqMQ
HxdG3S7duIH30v12WscOKdQGU18bF44kDpjEjhN82wjaQEzlOy/e2Et0EQLx9wdk
9/yH+WRZ4G9sXeBJXzgzrxesLXIixovc0BD93+uWMGF9nSBtnTD2yngWAP5Q3fz0
sgUo0VS6ZveiLKM+TqNn4bzozriVmpG+ecFjTaR6B7NIZQqGsdIXLOKMdpVSWIJW
x6elvriNoxJZOcFLpiWoWkdmvPvBvZ9zkL9/bg==
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org