Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
File:                     3138322e34382e3136302e302f31392d3234203d3e203436303330.roa (raw, json)
Hash identifier:          5qWm6yJNUc94dULtxLyKJHfmaDzN7D0bVghEHyzu1nM=
Subject key identifier:   60:DE:C9:94:84:22:0D:65:9B:C3:27:7E:87:27:C6:19:94:C5:50:AD
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       016F676A140771C4020E3BEFE567D2A855AE7C56
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa
Signing time:             Fri 15 Aug 2025 11:00:01 +0000
ROA not before:           Fri 15 Aug 2025 10:55:01 +0000
ROA not after:            Fri 14 Aug 2026 11:00:01 +0000
asID:                     46030
IP address blocks:        182.48.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 05:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6f:67:6a:14:07:71:c4:02:0e:3b:ef:e5:67:d2:a8:55:ae:7c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Aug 15 10:55:01 2025 GMT
            Not After : Aug 14 11:00:01 2026 GMT
        Subject: CN=60DEC99484220D659BC3277E8727C61994C550AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:ee:7f:1c:7c:92:e7:3f:f4:36:8b:9f:70:
                    4a:45:c0:70:ed:8b:65:0c:95:92:cd:54:97:70:2b:
                    25:2b:c9:29:47:c1:97:ed:a8:22:35:67:bd:ef:46:
                    db:f5:44:8a:75:81:29:82:38:7f:25:be:ab:ed:ee:
                    08:ec:06:5e:03:a5:15:e3:87:b5:a5:c2:f2:80:0e:
                    db:87:73:8d:5c:71:57:1a:44:f6:60:7c:a6:a9:93:
                    e0:32:86:4a:83:fe:be:55:c4:41:b7:48:81:7a:41:
                    c9:f6:d0:1a:31:d8:c9:4c:12:b7:af:ad:c9:84:17:
                    a5:b2:5e:90:28:ee:72:c9:16:c2:78:d4:00:a1:64:
                    fe:9b:b3:68:f5:ad:6f:d5:d6:de:42:93:fa:96:74:
                    6b:ca:46:e9:44:7a:ad:45:1e:7c:64:dc:a3:e1:cb:
                    98:af:34:ba:90:43:ea:04:de:37:be:d7:bd:50:cb:
                    c1:9e:7b:a6:91:f8:3d:c2:d9:63:5d:b5:f1:66:1b:
                    ff:05:13:2b:f2:f1:e4:db:c0:ad:37:e5:04:a9:68:
                    82:96:b4:48:6c:b7:ac:5e:87:d7:90:37:17:87:f1:
                    d4:51:36:9d:51:5d:5b:2c:2c:75:a5:56:fa:74:9f:
                    e0:0d:8c:c2:bb:b4:0c:ee:ae:6d:f2:78:fa:9e:af:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DE:C9:94:84:22:0D:65:9B:C3:27:7E:87:27:C6:19:94:C5:50:AD
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136302e302f31392d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:14:c1:0b:90:9d:22:d4:38:b6:ef:bc:fd:07:6a:7c:35:
         d9:96:2d:43:89:68:91:2b:25:b3:a2:dd:be:d1:e5:c5:6a:6c:
         a8:0b:77:56:d6:e6:d5:c3:4a:bf:c3:f5:0a:0b:2a:a8:73:5f:
         1c:d7:ad:08:f5:ce:bd:a7:de:fa:fa:f6:bc:a4:0c:22:3b:0d:
         11:a9:e7:11:84:bd:6d:96:2f:9e:d6:d8:9d:19:a4:1d:8c:fb:
         83:86:d8:7d:1b:63:38:63:1e:4b:9c:3e:18:0a:07:9e:5a:a4:
         4d:42:8b:b6:75:0d:74:39:7f:3f:28:2d:6a:3b:f9:76:6c:56:
         3c:d6:ae:4e:14:0b:ce:6f:85:e3:82:07:cc:90:b0:41:d8:ef:
         1f:da:e1:e4:80:70:3f:1f:94:ac:4f:f4:eb:95:2e:ee:f8:03:
         38:cb:97:07:44:f2:7b:1e:99:78:1f:3e:11:d1:60:90:aa:34:
         03:2f:52:96:b7:86:1f:68:db:c2:fc:d8:d4:e9:9d:08:5b:f1:
         49:eb:64:b6:49:4e:a5:97:39:3e:5c:17:4d:1b:69:07:80:73:
         7b:25:23:24:ba:5d:fb:e7:73:c2:90:55:3a:13:94:65:d6:dc:
         c6:2a:33:34:cc:f0:0f:88:82:1f:60:d4:1a:57:ca:83:09:30:
         16:3a:7c:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAW9nahQHccQCDjvv5WfSqFWufFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNTA4MTUxMDU1MDFaFw0yNjA4MTQxMTAwMDFaMDMxMTAvBgNV
BAMTKDYwREVDOTk0ODQyMjBENjU5QkMzMjc3RTg3MjdDNjE5OTRDNTUwQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tu5/HHyS5z/0NoufcEpFwHDt
i2UMlZLNVJdwKyUrySlHwZftqCI1Z73vRtv1RIp1gSmCOH8lvqvt7gjsBl4DpRXj
h7WlwvKADtuHc41ccVcaRPZgfKapk+AyhkqD/r5VxEG3SIF6Qcn20Box2MlMErev
rcmEF6WyXpAo7nLJFsJ41AChZP6bs2j1rW/V1t5Ck/qWdGvKRulEeq1FHnxk3KPh
y5ivNLqQQ+oE3je+171Qy8Gee6aR+D3C2WNdtfFmG/8FEyvy8eTbwK035QSpaIKW
tEhst6xeh9eQNxeH8dRRNp1RXVssLHWlVvp0n+ANjMK7tAzurm3yePqer4pLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYN7JlIQiDWWbwyd+hyfGGZTFUK0wHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjMwMmUzMDJmMzEz
OTJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbYwoDANBgkqhkiG
9w0BAQsFAAOCAQEANfkUwQuQnSLUOLbvvP0Hanw12ZYtQ4lokSsls6LdvtHlxWps
qAt3Vtbm1cNKv8P1CgsqqHNfHNetCPXOvafe+vr2vKQMIjsNEannEYS9bZYvntbY
nRmkHYz7g4bYfRtjOGMeS5w+GAoHnlqkTUKLtnUNdDl/Pygtajv5dmxWPNauThQL
zm+F44IHzJCwQdjvH9rh5IBwPx+UrE/065Uu7vgDOMuXB0Tyex6ZeB8+EdFgkKo0
Ay9SlreGH2jbwvzY1OmdCFvxSetktklOpZc5PlwXTRtpB4BzeyUjJLpd++dzwpBV
OhOUZdbcxiozNMzwD4iCH2DUGlfKgwkwFjp8Hg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:28:04 2025 by rpki-client