Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3138352e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          hSUlSq7ZMTBSZVmJhbuZnAgclETWo3GU+XsF+0GEwkc=
Subject key identifier:   A4:F7:1B:5E:B3:9C:7E:DE:19:49:81:9B:0B:39:89:23:BD:05:BD:8C
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       6D509CEDE126D9B26D2F4845933B82041FCE156B
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:15 +0000
ROA not before:           Fri 19 Sep 2025 12:56:15 +0000
ROA not after:            Fri 18 Sep 2026 13:01:15 +0000
asID:                     46030
IP address blocks:        182.48.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:50:9c:ed:e1:26:d9:b2:6d:2f:48:45:93:3b:82:04:1f:ce:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:15 2025 GMT
            Not After : Sep 18 13:01:15 2026 GMT
        Subject: CN=A4F71B5EB39C7EDE1949819B0B398923BD05BD8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:21:e2:b7:0f:48:a8:12:50:51:bf:b6:43:
                    db:23:91:69:bf:38:36:9e:b0:24:da:db:98:72:97:
                    30:a8:3a:5f:a9:48:3c:d3:ae:29:8f:70:34:f2:3c:
                    5c:cf:36:c4:43:e1:15:49:8e:a7:c9:37:81:cf:9b:
                    46:98:0b:50:b6:16:8a:29:47:8f:c3:9f:49:cc:a8:
                    30:14:fc:e5:1e:83:a1:4c:9c:bd:3d:b3:d8:15:cf:
                    3a:e4:db:9b:4d:73:5f:fb:69:cd:71:6e:80:8f:b4:
                    2c:c7:5f:63:2f:91:52:6f:fe:de:4b:cb:e9:3f:4c:
                    45:eb:38:a2:f2:d6:57:89:2b:0a:75:f5:9b:ea:94:
                    84:55:a6:be:d3:83:b4:77:be:cb:37:13:07:e1:b2:
                    bf:1c:d9:3e:7e:d1:55:4f:7e:67:48:d0:27:24:c9:
                    d8:86:a8:e3:03:72:97:74:5c:d2:48:cc:83:70:4c:
                    c4:2b:ac:79:d6:06:6e:f4:bf:ca:19:67:d6:d5:8e:
                    92:bb:6b:66:2e:eb:b1:0e:aa:45:60:e5:96:86:f6:
                    f9:40:a9:1d:b3:8c:60:75:33:dc:69:a6:90:9d:10:
                    33:2c:2f:48:15:f6:4e:ea:06:a1:19:2b:05:5a:fb:
                    ae:8d:65:db:47:7b:02:4c:80:eb:d0:f3:02:9c:a2:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:1B:5E:B3:9C:7E:DE:19:49:81:9B:0B:39:89:23:BD:05:BD:8C
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3138352e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:02:5f:98:42:a3:ad:5e:c2:40:05:91:cd:68:6a:40:b0:9d:
         31:63:e5:82:f3:45:8a:d5:0b:4b:0b:a3:63:03:88:58:85:ec:
         96:39:c8:98:c4:e6:0b:1c:ec:9c:40:7e:75:ae:5f:4e:60:dc:
         31:52:57:82:63:3a:47:56:62:ad:3d:6a:00:9e:be:50:81:45:
         63:bd:fd:b0:2e:7c:4e:20:4c:07:12:dd:e4:9c:3f:b7:99:5c:
         c2:bb:f3:2b:22:ba:d2:c3:0c:6c:c7:04:d2:23:e7:11:17:61:
         8e:e0:bd:c1:e4:cc:a1:56:f9:59:f1:3e:8c:f2:dc:ec:0e:c5:
         9a:47:68:7e:74:10:eb:d6:88:42:c4:69:9e:bb:4d:19:bb:12:
         a0:93:66:cd:07:39:eb:a8:da:bb:30:56:69:37:53:c5:33:57:
         f9:12:be:84:e5:8c:19:3d:44:d8:62:52:f7:54:a3:ce:89:62:
         fa:40:c5:2f:c7:b2:33:21:92:ff:7d:3c:e9:4a:65:26:62:47:
         25:a4:26:5b:7c:15:b4:b6:ff:c2:60:66:af:ca:6e:e9:a0:fc:
         2d:15:31:e8:3e:5a:65:47:52:a9:9b:10:ae:e6:94:9d:38:e2:
         64:26:92:68:bc:6c:c6:c6:4d:1e:0c:0f:e8:3e:cd:3c:73:03:
         91:bb:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:15 2025 by rpki-client