Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Bhoi574HAE139gzQcd6GNPe2+3NaVBDODLZPpHp1aaY=
Subject key identifier:   03:7C:D8:65:05:47:CD:DB:58:26:37:45:D2:21:61:D3:43:34:23:9F
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       4F961A202CEC5703E1026F4501B6330451044168
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:18 +0000
ROA not before:           Fri 19 Sep 2025 12:56:18 +0000
ROA not after:            Fri 18 Sep 2026 13:01:18 +0000
asID:                     46030
IP address blocks:        182.48.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:96:1a:20:2c:ec:57:03:e1:02:6f:45:01:b6:33:04:51:04:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:18 2025 GMT
            Not After : Sep 18 13:01:18 2026 GMT
        Subject: CN=037CD8650547CDDB58263745D22161D34334239F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:fc:0b:0e:65:18:d8:79:5f:ba:aa:c1:ad:
                    fd:6c:c2:37:69:51:8e:cc:76:55:f2:db:55:f3:b2:
                    7b:de:f2:d4:26:61:39:19:f2:db:8a:00:d2:d7:1e:
                    6c:f6:af:44:54:58:18:2e:67:22:4c:dc:41:17:33:
                    cc:d8:ea:e0:94:80:76:94:af:e5:fa:47:fb:05:a4:
                    90:3c:e0:7b:1e:dd:d8:b0:fc:ab:bc:bf:b8:a4:d2:
                    fb:a9:ec:3d:3a:4e:c1:6c:c9:48:8b:1f:6b:4c:fd:
                    e2:40:c7:e5:47:0c:57:6c:7a:f5:6a:3e:83:e5:54:
                    bf:e5:69:48:8b:a3:05:2c:ce:d6:66:1c:53:67:bb:
                    0b:dd:e6:4d:33:ff:ab:c7:a2:ef:04:df:50:ef:3c:
                    21:bf:5d:bd:0c:01:af:16:4e:79:20:4c:93:72:d9:
                    78:9b:e2:8f:ba:85:91:17:59:90:86:22:6b:fc:3a:
                    8a:b9:a6:32:c7:5f:a5:e8:db:d9:21:fa:f6:6d:05:
                    14:39:33:76:6e:5a:45:4e:17:fd:da:8d:3d:d2:53:
                    fa:23:b7:cc:a6:e1:af:53:95:54:02:a6:e9:e8:db:
                    39:3d:3f:70:57:54:46:02:c0:25:ab:5d:a2:30:c5:
                    5a:44:05:aa:35:ce:3c:ea:5a:f1:31:a2:27:dd:5a:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7C:D8:65:05:47:CD:DB:58:26:37:45:D2:21:61:D3:43:34:23:9F
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137352e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:4a:e6:46:9f:7b:5e:de:a5:3f:66:6a:0d:1b:37:eb:2d:
         a0:6c:82:d4:54:65:bd:69:56:8f:65:5e:30:b4:eb:1b:2d:97:
         4e:63:ee:d0:67:ed:3c:6d:40:74:1d:2b:b9:42:10:30:6f:ba:
         51:f5:b8:4e:48:d2:db:e7:57:19:01:d4:38:58:18:0c:8d:6a:
         19:1a:31:a2:0c:c8:6b:72:d0:06:b2:d3:1f:ca:3f:7d:93:03:
         02:6e:da:6b:00:db:3a:bb:c5:69:8e:dc:ea:74:d9:b6:91:59:
         19:1a:fa:66:18:a1:a8:f4:a7:3d:51:cd:d8:67:43:14:23:1d:
         64:c3:ef:76:02:60:aa:77:36:f8:b8:45:ca:be:6c:90:a1:dd:
         8a:b8:fe:df:06:77:7a:ee:96:4d:be:b5:ca:80:24:da:a1:7a:
         cc:a1:a7:11:82:b2:d0:3b:30:b1:4e:87:ef:0d:e2:10:a6:a9:
         3d:a7:a3:2e:a2:0b:19:85:ad:6a:34:15:41:cb:e5:86:1f:42:
         9e:c0:28:39:37:98:95:97:70:ee:a3:8e:fc:ed:d5:4a:b0:e8:
         c7:3a:de:54:4f:c9:bc:4e:a9:07:3f:e1:3b:27:7a:58:3a:f5:
         bd:96:a1:e2:82:28:48:8d:32:bf:48:1f:7e:c1:f0:3b:07:1b:
         2b:3c:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:17 2025 by rpki-client