Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137332e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Ng67j6MZPU9PKMJs8BTZ825EjlA4r6gR5iGvO0soa18=
Subject key identifier:   CD:68:2F:FA:26:7C:00:15:AC:4E:2A:BF:2C:0B:CE:CD:09:A2:39:E4
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       26EECC3EDA758E2C313C0D418FBAEF8EF10A536D
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:15 +0000
ROA not before:           Fri 19 Sep 2025 12:56:15 +0000
ROA not after:            Fri 18 Sep 2026 13:01:15 +0000
asID:                     46030
IP address blocks:        182.48.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ee:cc:3e:da:75:8e:2c:31:3c:0d:41:8f:ba:ef:8e:f1:0a:53:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:15 2025 GMT
            Not After : Sep 18 13:01:15 2026 GMT
        Subject: CN=CD682FFA267C0015AC4E2ABF2C0BCECD09A239E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:18:66:82:b2:44:30:b2:a8:58:58:be:fe:
                    e8:4d:49:10:9e:eb:d7:48:da:cd:82:56:22:f5:2b:
                    60:70:a0:e1:0f:1d:48:2d:93:0d:96:59:27:74:61:
                    eb:02:d7:59:bf:d6:d5:a8:89:aa:62:54:6d:93:ff:
                    a0:65:67:2c:9c:35:40:e2:1c:fe:cf:cf:fe:4e:11:
                    e9:0e:08:50:7b:34:65:25:5f:5d:29:10:7c:de:50:
                    e0:53:82:60:71:31:ea:9b:11:06:98:45:6e:4d:5e:
                    34:36:c8:c4:4e:82:33:6a:e8:84:2a:4e:e5:d2:b2:
                    f0:dd:1a:05:2e:4f:ff:60:dd:20:39:93:e2:03:c0:
                    16:08:f6:c4:99:e3:0e:95:87:21:03:36:ef:bf:94:
                    f0:a8:f8:d8:8d:8b:80:92:5f:0e:6f:bc:da:d9:98:
                    43:1f:61:6d:1a:ff:5f:e3:a1:81:3d:ad:9b:c6:ab:
                    87:12:cb:3c:c1:26:b2:a2:32:e0:21:7b:f0:ea:99:
                    2f:27:0c:76:d3:ac:73:ea:27:72:b1:73:77:9f:6a:
                    71:8c:06:2c:3d:5d:b2:0b:44:45:82:9c:ac:b4:51:
                    1b:61:33:3a:d3:9e:f9:9d:96:c2:96:5b:b9:4e:a1:
                    5a:e0:e0:2d:d5:45:8e:0e:ef:86:46:ae:5b:b2:5c:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:2F:FA:26:7C:00:15:AC:4E:2A:BF:2C:0B:CE:CD:09:A2:39:E4
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137332e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d2:4e:11:ec:85:9a:eb:57:9e:25:d0:65:2a:c9:ad:14:cc:
         23:a1:b4:05:c3:af:25:6d:c7:ce:16:a8:45:2f:0f:6c:4f:c9:
         ff:29:ac:ee:75:b1:e2:60:4c:b3:e1:58:4d:19:b4:44:b1:48:
         04:9e:86:0c:23:e6:4f:3a:c4:18:09:2e:cf:02:bb:84:d8:42:
         70:54:e1:d5:d9:bf:e2:3f:45:05:f1:01:7c:8f:cd:27:ec:8d:
         91:b3:3a:5b:14:0d:d1:c4:8d:b3:52:17:89:b0:5b:66:92:75:
         98:5f:f8:1b:c2:70:dc:c3:05:a6:1b:96:1b:b4:97:f4:d9:09:
         f3:8b:36:98:aa:89:3c:b2:73:a3:4e:99:b7:1d:3c:04:4e:bb:
         2e:58:1b:1b:46:3d:05:0c:83:8c:b7:04:48:b3:d4:35:4f:9f:
         0a:58:d0:4e:93:a4:13:98:55:30:df:7f:fd:e9:f5:25:6b:ec:
         d2:38:42:1a:13:73:dd:9c:9a:54:93:83:05:e1:f3:6b:16:8d:
         89:1b:f0:c5:5a:df:48:18:02:d6:01:2b:a0:ad:18:81:94:c9:
         55:10:40:cf:96:87:a3:d6:9e:65:36:fb:b6:56:44:58:1f:0a:
         aa:77:2a:42:bc:94:50:6b:f0:0d:c2:f0:b2:7f:bc:ab:9c:89:
         b7:dd:2a:67
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJu7MPtp1jiwxPA1Bj7rvjvEKU20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNTA5MTkxMjU2MTVaFw0yNjA5MTgxMzAxMTVaMDMxMTAvBgNV
BAMTKENENjgyRkZBMjY3QzAwMTVBQzRFMkFCRjJDMEJDRUNEMDlBMjM5RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BhhmgrJEMLKoWFi+/uhNSRCe
69dI2s2CViL1K2BwoOEPHUgtkw2WWSd0YesC11m/1tWoiapiVG2T/6BlZyycNUDi
HP7Pz/5OEekOCFB7NGUlX10pEHzeUOBTgmBxMeqbEQaYRW5NXjQ2yMROgjNq6IQq
TuXSsvDdGgUuT/9g3SA5k+IDwBYI9sSZ4w6VhyEDNu+/lPCo+NiNi4CSXw5vvNrZ
mEMfYW0a/1/joYE9rZvGq4cSyzzBJrKiMuAhe/DqmS8nDHbTrHPqJ3Kxc3efanGM
Biw9XbILREWCnKy0URthMzrTnvmdlsKWW7lOoVrg4C3VRY4O74ZGrluyXH2PAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzWgv+iZ8ABWsTiq/LAvOzQmiOeQwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwrTANBgkqhkiG
9w0BAQsFAAOCAQEAcNJOEeyFmutXniXQZSrJrRTMI6G0BcOvJW3HzhaoRS8PbE/J
/yms7nWx4mBMs+FYTRm0RLFIBJ6GDCPmTzrEGAkuzwK7hNhCcFTh1dm/4j9FBfEB
fI/NJ+yNkbM6WxQN0cSNs1IXibBbZpJ1mF/4G8Jw3MMFphuWG7SX9NkJ84s2mKqJ
PLJzo06Ztx08BE67LlgbG0Y9BQyDjLcESLPUNU+fCljQTpOkE5hVMN9//en1JWvs
0jhCGhNz3ZyaVJODBeHzaxaNiRvwxVrfSBgC1gEroK0YgZTJVRBAz5aHo9aeZTb7
tlZEWB8KqncqQryUUGvwDcLwsn+8q5yJt90qZw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:28:04 2025 by rpki-client