Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          pTEj1nArS/6IvgwvFluldzQILkl96Y/762TS9op8voU=
Subject key identifier:   9F:1F:CD:D9:5C:30:93:E0:EC:8B:81:4E:DC:08:43:D7:C1:34:51:07
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       6DACE980D6CDAD364AA1890B72C4E5E4774875CF
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:18 +0000
ROA not before:           Fri 19 Sep 2025 12:56:18 +0000
ROA not after:            Fri 18 Sep 2026 13:01:18 +0000
asID:                     46030
IP address blocks:        182.48.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ac:e9:80:d6:cd:ad:36:4a:a1:89:0b:72:c4:e5:e4:77:48:75:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:18 2025 GMT
            Not After : Sep 18 13:01:18 2026 GMT
        Subject: CN=9F1FCDD95C3093E0EC8B814EDC0843D7C1345107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:a6:7a:29:ac:86:cf:99:52:0e:94:d3:23:
                    31:23:d5:ea:ae:75:e0:fb:77:b7:ee:89:53:5d:5c:
                    99:b2:86:fc:78:9c:03:a8:2e:8b:47:ae:39:b7:03:
                    6d:75:e5:70:0d:4d:50:9f:31:e6:a7:3b:de:59:88:
                    de:aa:8b:6e:94:9d:a4:32:21:ab:6b:4d:69:8f:9c:
                    1b:19:1e:e0:30:dc:77:6c:39:3f:14:c3:6a:0e:0c:
                    8f:45:54:da:ea:bc:d8:db:d2:03:d3:13:ce:d1:a7:
                    ab:11:40:01:b4:ba:47:73:97:d7:a8:98:7d:2b:f6:
                    70:4d:16:8c:6d:37:69:d0:2e:40:fc:7f:15:91:da:
                    39:6d:30:e0:3a:a8:d7:20:b2:8b:d8:c3:31:59:8b:
                    b2:fb:02:95:74:6a:23:9f:87:73:96:09:df:75:54:
                    35:ae:46:0a:ea:d3:62:29:9e:33:09:9a:40:57:7f:
                    65:33:93:76:5e:16:37:49:70:40:fa:f7:74:55:7a:
                    bc:69:73:79:3d:87:cb:b6:50:ff:e6:9a:5f:18:aa:
                    ea:f9:f4:a4:e2:a2:2b:7d:fc:0c:a6:0a:d2:21:02:
                    15:2c:93:87:65:00:4c:c0:cb:c8:4c:33:56:a6:2b:
                    9c:42:84:c3:5b:5c:3d:55:c7:87:c6:df:e8:ff:ea:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1F:CD:D9:5C:30:93:E0:EC:8B:81:4E:DC:08:43:D7:C1:34:51:07
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:ec:59:04:98:a2:52:c3:78:74:cf:76:fe:b5:fe:b1:52:
         bc:70:28:a4:d5:18:3f:d0:30:a4:f9:56:be:27:be:07:56:35:
         1c:43:86:c8:6c:27:ef:9c:da:53:7e:e2:71:68:a0:70:a5:83:
         bc:3c:49:bb:9c:82:44:52:62:eb:56:f0:c5:f7:98:f1:65:37:
         10:7c:85:3e:4c:da:00:9f:97:ac:e9:b6:35:60:29:e0:44:1e:
         9a:9a:fd:a0:5a:59:85:8e:de:43:ed:3d:08:f3:ab:da:c1:da:
         c1:5e:5a:79:96:21:45:41:7e:80:12:f9:35:c0:5e:e2:4b:0c:
         2e:1e:39:b7:6c:95:68:57:f5:fa:e5:10:04:8a:3f:c6:55:cb:
         b2:98:df:d4:5a:29:05:b6:b4:f0:01:dd:75:c2:96:d5:c7:f1:
         96:f6:57:f2:b6:72:c3:41:be:54:a0:67:69:05:39:78:a3:20:
         8f:0d:5a:e1:37:af:9b:b9:ca:cf:4d:98:2e:94:7f:a1:b2:7a:
         a1:dd:41:4f:0d:71:a9:a5:da:7d:33:27:66:00:e0:9d:bb:e5:
         55:54:e9:29:c8:19:4a:71:21:67:c9:89:fd:50:63:bc:df:8a:
         4d:4c:ee:a9:08:9b:6e:e8:c8:fb:13:6a:40:71:2e:0d:cc:2f:
         0e:53:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:28:06 2025 by rpki-client