Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          jDPMlOl9DzrkBBmO7iSZ989M26iY7EomTpGsrZgaU4w=
Subject key identifier:   4F:C4:85:60:27:92:78:A6:66:EF:90:96:96:B0:E1:2A:49:D4:7F:3C
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       5B7E48FC1A5F93F93ACC0959F9D966C0030F1462
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:18 +0000
ROA not before:           Fri 19 Sep 2025 12:56:18 +0000
ROA not after:            Fri 18 Sep 2026 13:01:18 +0000
asID:                     46030
IP address blocks:        182.48.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7e:48:fc:1a:5f:93:f9:3a:cc:09:59:f9:d9:66:c0:03:0f:14:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:18 2025 GMT
            Not After : Sep 18 13:01:18 2026 GMT
        Subject: CN=4FC48560279278A666EF909696B0E12A49D47F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:09:5f:9d:76:31:8b:c3:e7:9f:96:07:16:
                    43:b2:f0:b9:23:6c:46:42:ab:00:f1:fe:5e:88:ac:
                    59:52:2b:c2:ad:a1:11:0d:14:fb:38:ff:99:fa:63:
                    e5:68:a2:a6:8e:97:4a:54:df:4b:dc:cb:b1:46:8b:
                    c4:2b:7a:d6:fd:94:64:23:68:4f:96:51:8e:ab:a2:
                    3b:85:2e:0c:3a:df:9a:d4:cc:f0:26:11:3a:2c:75:
                    af:f0:a0:47:cb:34:1c:ed:f6:96:84:35:44:70:e3:
                    f7:65:d5:48:f0:12:d1:4d:bc:88:5d:08:b6:73:5c:
                    28:17:74:38:e8:8b:fd:79:44:05:89:58:80:78:2b:
                    71:55:f9:15:f2:41:0d:18:5e:ee:5e:5a:53:48:21:
                    86:6c:0f:f9:a4:96:d2:b1:d7:1f:be:a6:75:52:f4:
                    dc:6e:ac:01:bc:66:23:83:aa:3a:d1:87:84:10:86:
                    1e:71:8e:7e:d6:c7:03:27:d3:a2:de:a7:21:60:7a:
                    dc:42:ff:c3:7f:ff:38:9d:6e:23:9b:5b:5e:b7:03:
                    44:f3:31:4a:ed:90:ff:98:bd:f1:a5:bb:b3:3e:c6:
                    82:1e:1f:d6:4e:39:83:44:11:d5:b2:e3:e2:64:b3:
                    ff:3c:71:bb:6c:d0:48:75:6e:de:d7:b6:04:69:7c:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:85:60:27:92:78:A6:66:EF:90:96:96:B0:E1:2A:49:D4:7F:3C
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138322e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b9:03:52:ab:f0:f9:d8:e2:39:2d:a4:d7:0a:44:2f:07:45:
         24:ad:11:1b:21:25:3b:69:8f:c3:16:ff:d4:57:66:3c:5d:c7:
         3d:4b:7f:a9:2b:d7:b0:6f:78:e6:a4:48:cd:19:c4:f1:d3:a5:
         3d:77:98:56:7f:dc:91:2d:a7:8b:42:be:e2:c8:41:c7:50:d9:
         6c:2b:29:17:fb:39:f4:0a:f1:94:96:5a:18:dd:7e:61:07:cb:
         2b:81:ec:53:64:b3:7a:8c:ae:b3:df:13:eb:90:29:1e:8d:47:
         43:3f:04:c7:f8:85:80:62:8c:9b:bf:78:e0:ef:bc:52:0c:96:
         da:9c:07:f7:46:3a:39:01:58:f3:ad:fe:98:ff:17:03:af:78:
         8a:0b:ac:4f:5d:bf:76:11:94:4d:cb:c6:0c:fb:23:53:ef:f4:
         fa:d4:f2:57:76:2f:89:3f:f9:04:f7:e8:ca:55:53:fc:08:e1:
         f1:8a:45:24:79:01:1d:6d:79:31:43:b5:94:a1:53:d8:42:17:
         6b:e5:7c:38:99:83:74:85:fe:4e:2a:e9:20:57:c0:ef:fb:33:
         d3:1d:e1:a8:26:a5:f0:69:02:a1:71:34:9e:a3:27:fa:9d:4c:
         2f:cf:ba:34:0e:d4:35:92:13:d4:30:b0:8e:c2:08:f1:a2:76:
         a0:cf:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:19 2025 by rpki-client