Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3136312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          6qqag3jPb873HxMFGRXi+VnOcJungMWRwPx4wq/kzCg=
Subject key identifier:   1C:9B:91:1B:C5:99:1D:39:5A:E9:46:BF:85:C0:73:39:FA:BC:44:04
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       31A0D97609656931B484B919D8D0A3959F801E60
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:14 +0000
ROA not before:           Fri 19 Sep 2025 12:56:14 +0000
ROA not after:            Fri 18 Sep 2026 13:01:14 +0000
asID:                     46030
IP address blocks:        182.48.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a0:d9:76:09:65:69:31:b4:84:b9:19:d8:d0:a3:95:9f:80:1e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:14 2025 GMT
            Not After : Sep 18 13:01:14 2026 GMT
        Subject: CN=1C9B911BC5991D395AE946BF85C07339FABC4404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:37:6d:da:bd:cb:b3:b5:d8:59:2c:43:e9:
                    b1:0a:95:7d:8b:9f:6e:84:dd:26:f1:71:9c:a6:16:
                    31:f4:54:ff:59:11:f9:9c:e4:2d:87:6f:e1:5c:7d:
                    f0:4e:41:ff:e4:f6:50:1f:15:7d:81:d7:7d:99:03:
                    c6:60:be:50:c1:e7:67:fb:14:da:ac:e8:54:23:fa:
                    9a:43:13:5e:3c:0d:7c:12:dd:0c:fd:16:70:7c:3d:
                    5b:08:3a:be:77:27:8d:a2:d2:4d:71:05:cd:eb:8b:
                    83:16:a0:e0:c4:21:c4:4c:93:da:89:1d:06:7c:9c:
                    fb:92:e3:34:b3:12:30:5e:d6:a4:70:b8:c3:6a:c3:
                    c0:9f:72:bb:9b:77:b6:20:39:72:06:e5:a2:76:77:
                    6d:9b:48:f1:de:49:71:ae:b9:0b:d0:6e:a1:7b:15:
                    fc:56:cf:a7:be:86:ea:37:43:7e:58:14:81:63:bf:
                    db:fe:c9:6a:77:f8:1a:06:61:49:7f:cc:a9:88:67:
                    84:56:0e:eb:e3:1f:44:c2:eb:ea:43:cb:a8:4b:81:
                    67:54:70:2d:ee:8b:37:3b:a7:a9:d5:b9:ce:a5:0c:
                    3c:75:19:0b:41:69:eb:d2:af:cb:25:34:14:cc:db:
                    33:ba:7b:4a:20:e8:d9:9b:38:87:b6:36:de:40:4f:
                    59:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9B:91:1B:C5:99:1D:39:5A:E9:46:BF:85:C0:73:39:FA:BC:44:04
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:b2:56:1d:78:c2:ce:90:81:01:a0:67:55:b6:74:d9:89:
         5f:63:64:20:b4:47:68:51:c6:97:dd:c7:e8:9e:7c:b5:3b:7d:
         c7:57:c5:5a:22:36:7d:90:36:fd:a1:a0:e9:50:bf:50:8d:c9:
         c2:9b:b4:3f:9f:41:14:26:cd:42:60:a7:1b:8d:79:68:00:08:
         91:8f:81:21:4b:b9:57:72:44:56:d5:9e:8c:8d:f4:0e:52:96:
         8a:78:20:a2:20:5a:3a:ae:e4:7d:21:71:36:2a:2c:20:1c:f2:
         30:a9:50:7f:fc:fc:4c:ae:a5:70:d1:60:c2:8a:91:29:fc:99:
         fa:07:e0:25:c1:f9:ef:58:2d:59:26:5f:06:04:61:1a:8b:ad:
         59:35:d9:88:03:52:42:47:ec:8b:ef:dd:3f:2a:ab:33:9c:2a:
         ec:60:e4:ae:d7:9e:85:48:98:fd:3a:46:cd:a7:a4:29:73:8c:
         07:cb:2f:23:0a:9a:2b:d2:76:12:55:ea:4f:c1:e8:35:34:2f:
         d3:24:90:36:92:67:15:40:68:fa:d4:3a:2c:cd:51:10:6c:ef:
         d1:01:db:08:51:f8:47:18:d4:8a:78:97:37:ff:c5:80:4a:6e:
         70:55:1b:8f:ea:6c:14:3c:7f:c0:4d:b2:db:80:6d:db:0e:d8:
         ec:f0:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:28:05 2025 by rpki-client