Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138302e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138302e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          fZU1RHbqwwfOv0eYnoOuWKyAyrjMWU+muZuten+h0m4=
Subject key identifier:   98:0A:0B:F7:3B:71:27:63:E1:57:6F:A4:4F:D1:40:F5:5C:43:4C:50
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       2C7D5C6254190AC82DBA035DC366B19ADF4B15B5
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138302e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:17 +0000
ROA not before:           Fri 19 Sep 2025 12:56:17 +0000
ROA not after:            Fri 18 Sep 2026 13:01:17 +0000
asID:                     46030
IP address blocks:        182.48.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7d:5c:62:54:19:0a:c8:2d:ba:03:5d:c3:66:b1:9a:df:4b:15:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:17 2025 GMT
            Not After : Sep 18 13:01:17 2026 GMT
        Subject: CN=980A0BF73B712763E1576FA44FD140F55C434C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:0f:61:de:16:79:3f:d1:28:99:1d:4c:b8:
                    a9:93:f4:f6:44:eb:f8:2c:12:0b:89:63:05:1f:b4:
                    be:eb:0b:af:99:82:2a:32:d2:dd:32:cc:e0:14:83:
                    c9:40:4c:03:7f:e4:a1:48:0b:0b:b2:7c:a6:89:fa:
                    f7:3e:80:fb:34:8a:22:0c:84:51:d9:01:25:05:63:
                    6f:55:55:94:32:33:42:a0:f2:17:84:1e:f2:2e:59:
                    4a:4b:96:c0:ae:3e:17:e0:06:ac:cb:8a:01:ba:80:
                    1d:bd:8e:26:21:f7:d4:fe:39:cc:41:8f:94:c5:f6:
                    f5:06:b8:04:da:04:f7:74:cb:83:71:30:dd:e1:8a:
                    40:12:1e:81:58:76:a0:87:5f:ab:31:79:cf:62:fd:
                    5f:44:e0:36:3e:ae:5c:02:0e:72:7f:e5:1e:45:b3:
                    cb:02:14:25:7c:e3:9d:cb:46:71:93:ff:f9:2e:b9:
                    20:ca:f4:ef:97:43:3c:76:69:e4:7a:5f:de:77:ce:
                    a9:f9:e0:de:5e:f2:54:7c:6c:38:b5:1b:39:8b:59:
                    54:e4:85:b0:3f:f2:cf:c6:f3:7c:45:84:67:b1:d7:
                    e7:ed:b1:00:15:6e:62:89:b6:e3:0e:8c:00:de:56:
                    51:76:a6:d5:8c:ea:f2:a7:47:01:7d:bf:7a:e1:70:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:0B:F7:3B:71:27:63:E1:57:6F:A4:4F:D1:40:F5:5C:43:4C:50
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138302e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:71:24:ee:ae:15:3e:4e:78:52:34:f1:15:4a:b3:b8:cf:
         20:89:b4:05:ae:2e:c3:ab:16:50:f3:94:66:b4:61:3e:e0:ed:
         39:3f:75:3a:ca:ef:58:b6:04:a2:4d:2b:36:93:81:f6:2c:fc:
         4e:33:a1:f4:40:ee:25:2d:07:02:21:6f:9c:18:78:e9:86:7c:
         c5:2a:42:eb:a5:ae:be:84:07:9f:32:95:70:18:38:e1:d6:83:
         9e:70:2c:67:4e:b4:e3:dd:f2:1e:95:b8:0e:9c:50:5c:2f:7e:
         75:81:f4:81:b3:56:18:57:5b:19:4b:21:08:d0:f2:09:4e:22:
         cf:e4:98:8d:2e:fe:36:17:6b:6e:93:2c:85:1c:7c:84:70:81:
         d0:26:42:d6:b0:25:7d:53:c8:0f:4d:1a:47:bb:5c:f6:d0:a2:
         c5:2a:8e:42:75:91:0b:b5:88:61:19:db:db:a6:07:74:6c:9b:
         67:0c:1a:3d:ab:da:c2:0d:f8:05:67:82:f2:c9:e3:b1:26:3e:
         70:a6:07:a9:ac:f1:36:80:49:1e:d5:37:8c:eb:50:26:78:98:
         ae:10:e8:4e:af:56:93:9c:64:3b:7c:ff:f1:cd:29:ae:9c:ca:
         a0:7f:3e:81:9b:98:29:e0:2b:2b:c2:66:32:43:67:9d:94:bb:
         b9:43:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:17 2025 by rpki-client