Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3137392e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          4ndCs7X9XTHiGp+zmYcnnKgPG+jG1mriis0/Rj0aCxw=
Subject key identifier:   9D:D9:3D:67:23:2E:34:12:A5:E9:08:78:5C:3B:8A:74:5C:1E:29:BA
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       7723ACC88B976576A35319EAFB69919E331A0801
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:16 +0000
ROA not before:           Fri 19 Sep 2025 12:56:16 +0000
ROA not after:            Fri 18 Sep 2026 13:01:16 +0000
asID:                     46030
IP address blocks:        182.48.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:ac:c8:8b:97:65:76:a3:53:19:ea:fb:69:91:9e:33:1a:08:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:16 2025 GMT
            Not After : Sep 18 13:01:16 2026 GMT
        Subject: CN=9DD93D67232E3412A5E908785C3B8A745C1E29BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:c9:50:fb:36:6d:9d:9d:37:b0:d9:70:b8:
                    28:04:aa:43:77:57:b9:d0:87:93:15:77:23:64:28:
                    e3:09:8a:72:41:99:45:4c:af:8f:6d:9a:aa:d3:d9:
                    a2:14:32:24:b1:46:87:de:ae:e7:9f:46:f2:18:f1:
                    ae:f9:49:c9:e7:81:c9:e1:2e:83:8e:6f:18:06:e6:
                    8c:47:62:e2:ed:53:21:9f:7a:fc:9b:b6:02:c7:ab:
                    0f:79:d7:2e:54:68:9e:d5:d6:c7:35:f7:22:fb:ca:
                    2d:40:73:48:06:7b:f0:ee:73:62:1d:5a:b0:a0:05:
                    82:b5:9a:59:84:52:76:6f:c2:27:76:83:9d:6f:e6:
                    ed:42:c8:6b:b0:96:a2:30:14:42:80:93:3f:cf:ef:
                    db:9f:1b:5c:73:f6:d5:cc:de:7b:62:67:a6:6e:35:
                    3e:14:12:fe:60:d2:f4:09:5c:8f:b4:3b:59:69:cd:
                    6a:4d:8c:4a:72:8f:6d:42:5d:d4:80:a9:31:15:ca:
                    8f:59:0f:08:b9:6a:2e:44:d2:a9:9a:0b:3d:26:fe:
                    99:56:70:7a:16:c7:0f:17:97:43:8f:e3:34:33:62:
                    25:9a:d0:1a:8e:75:25:ad:2a:9a:df:36:7d:b7:85:
                    09:37:f4:fd:b2:e2:66:01:af:7b:6c:ae:b4:a0:04:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D9:3D:67:23:2E:34:12:A5:E9:08:78:5C:3B:8A:74:5C:1E:29:BA
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3137392e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:cd:cc:a6:03:98:74:e7:fa:16:46:2d:e0:d6:be:8f:04:
         c0:e8:72:40:5d:51:0f:8c:6c:4c:ce:ae:07:8e:88:f2:85:c9:
         c4:aa:24:bb:21:69:db:80:e1:f4:64:58:e8:e8:75:f7:5c:a2:
         53:e9:7f:7c:b4:b9:ee:bf:fb:04:af:37:fd:1f:86:96:60:d0:
         7b:46:e2:ef:02:5f:fb:37:e4:e1:a9:72:cf:33:3b:9b:0c:ec:
         d1:8d:09:b1:ca:33:64:65:cf:2e:d3:8c:5b:59:7d:8b:3e:bf:
         f1:fd:da:96:3d:2b:8c:09:db:b4:ac:a4:f3:1e:4f:85:13:83:
         a9:e3:84:e9:77:c7:29:35:16:b0:b5:75:dd:0b:0f:fc:47:f5:
         e5:b2:43:32:9d:c1:02:98:2b:5c:44:b1:f9:a4:5f:5a:a6:4f:
         0e:7b:39:ac:83:ee:f7:cf:de:e7:6d:02:e0:e0:58:69:d1:ef:
         ff:07:0f:e9:6c:96:21:18:d9:b4:f8:ec:67:63:78:8c:2c:d4:
         70:89:60:26:b5:e7:fe:e4:29:17:03:b4:80:13:3a:30:5c:74:
         ec:25:b7:00:95:3c:6e:10:62:ed:57:ee:18:f7:82:79:25:f6:
         30:83:47:42:1f:71:d5:ab:6f:fe:bb:66:0d:a0:ea:95:30:a5:
         60:eb:c2:7e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdyOsyIuXZXajUxnq+2mRnjMaCAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNTA5MTkxMjU2MTZaFw0yNjA5MTgxMzAxMTZaMDMxMTAvBgNV
BAMTKDlERDkzRDY3MjMyRTM0MTJBNUU5MDg3ODVDM0I4QTc0NUMxRTI5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGHslQ+zZtnZ03sNlwuCgEqkN3
V7nQh5MVdyNkKOMJinJBmUVMr49tmqrT2aIUMiSxRoferuefRvIY8a75Scnngcnh
LoOObxgG5oxHYuLtUyGfevybtgLHqw951y5UaJ7V1sc19yL7yi1Ac0gGe/Duc2Id
WrCgBYK1mlmEUnZvwid2g51v5u1CyGuwlqIwFEKAkz/P79ufG1xz9tXM3ntiZ6Zu
NT4UEv5g0vQJXI+0O1lpzWpNjEpyj21CXdSAqTEVyo9ZDwi5ai5E0qmaCz0m/plW
cHoWxw8Xl0OP4zQzYiWa0BqOdSWtKprfNn23hQk39P2y4mYBr3tsrrSgBOwFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUndk9ZyMuNBKl6Qh4XDuKdFweKbowHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwszANBgkqhkiG
9w0BAQsFAAOCAQEAVdjNzKYDmHTn+hZGLeDWvo8EwOhyQF1RD4xsTM6uB46I8oXJ
xKokuyFp24Dh9GRY6Oh191yiU+l/fLS57r/7BK83/R+GlmDQe0bi7wJf+zfk4aly
zzM7mwzs0Y0JscozZGXPLtOMW1l9iz6/8f3alj0rjAnbtKyk8x5PhRODqeOE6XfH
KTUWsLV13QsP/Ef15bJDMp3BApgrXESx+aRfWqZPDns5rIPu98/e520C4OBYadHv
/wcP6WyWIRjZtPjsZ2N4jCzUcIlgJrXn/uQpFwO0gBM6MFx07CW3AJU8bhBi7Vfu
GPeCeSX2MINHQh9x1atv/rtmDaDqlTClYOvCfg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:16 2025 by rpki-client