Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
File:                     3138322e34382e3139312e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          wdZWtGiWbZz37efIY0esYGPvFovCkpBCL0vOnxFrjmw=
Subject key identifier:   AB:C8:AE:8C:59:81:BA:9F:6B:5B:AA:3C:7C:E1:C6:F3:BC:AF:65:2A
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       0882852C30AA249ABCD7B48019BA970ADB27E33C
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa
Signing time:             Fri 19 Sep 2025 13:01:14 +0000
ROA not before:           Fri 19 Sep 2025 12:56:14 +0000
ROA not after:            Fri 18 Sep 2026 13:01:14 +0000
asID:                     46030
IP address blocks:        182.48.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:82:85:2c:30:aa:24:9a:bc:d7:b4:80:19:ba:97:0a:db:27:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 19 12:56:14 2025 GMT
            Not After : Sep 18 13:01:14 2026 GMT
        Subject: CN=ABC8AE8C5981BA9F6B5BAA3C7CE1C6F3BCAF652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6b:12:1f:24:14:86:16:24:2e:18:42:46:ab:
                    51:d7:84:ec:62:6c:27:82:1c:72:68:70:30:1e:a1:
                    76:2a:a7:db:94:4d:d9:a1:be:52:f9:8f:e4:89:98:
                    d6:a6:34:d4:13:77:96:2b:b6:1c:d8:93:56:72:38:
                    7f:c1:aa:66:2d:b4:2c:31:cd:0f:9d:33:71:5f:d0:
                    82:da:72:e0:d8:c9:b6:90:91:b9:b0:d4:a1:17:22:
                    36:06:18:a5:dd:5e:9e:3c:eb:08:f8:e2:1a:a3:17:
                    0d:8a:6c:b3:c0:79:85:ec:41:0d:ba:ef:d6:41:68:
                    61:32:ad:ab:cd:7c:e6:57:4f:0d:f6:5b:d3:01:b0:
                    59:9d:6b:a2:7e:14:ff:c2:f3:e5:ef:10:2d:73:93:
                    45:60:43:6f:42:cc:42:54:86:50:70:43:eb:b4:ba:
                    fe:80:fb:df:39:84:63:99:75:27:0b:b9:9e:3e:80:
                    20:a2:fc:99:cc:5c:d1:ea:ee:8c:7c:d6:3b:f6:ca:
                    8f:66:86:4e:7a:f7:25:49:82:19:32:f5:fa:b0:bf:
                    f5:3f:f9:16:6f:21:cf:4d:0a:dc:94:4f:1b:e3:11:
                    1c:77:54:b1:cd:dc:e7:0f:4d:90:08:4f:ac:de:df:
                    8c:a0:0c:74:61:a4:9d:84:ea:fb:2f:82:d7:36:3b:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C8:AE:8C:59:81:BA:9F:6B:5B:AA:3C:7C:E1:C6:F3:BC:AF:65:2A
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3139312e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:d1:41:15:d6:9a:85:23:3b:b4:57:0b:61:d5:b4:3d:38:
         fa:74:29:79:a2:b3:d7:87:5b:93:43:08:4f:7d:11:e6:49:c4:
         09:e0:19:d5:1f:87:12:bd:22:46:13:77:5c:7e:d4:20:f5:9f:
         46:f3:d4:cc:98:53:7e:cf:9e:34:e4:11:dc:e5:70:44:b6:12:
         bc:9d:fb:c6:c3:c6:43:b3:15:4d:0f:14:f9:0b:d9:55:29:16:
         9a:e9:ab:5d:fa:54:2a:6c:90:cf:26:72:54:f3:25:82:40:81:
         f3:7b:81:85:da:4e:9c:03:43:09:7e:f3:9a:55:40:7d:04:1b:
         04:06:91:1b:e8:9e:03:93:eb:3a:bf:48:17:04:b3:0c:97:9e:
         d5:bd:32:67:cf:90:26:bc:67:91:58:91:12:e4:37:07:8d:c9:
         04:d0:57:d6:3b:c3:28:dd:00:a2:82:aa:2c:7d:13:01:28:c7:
         89:3b:dd:26:f7:6f:5a:da:d8:a3:d0:94:1e:44:46:3c:64:06:
         c7:a8:bb:02:99:1d:8c:0e:f3:f9:d8:64:32:63:e2:4f:80:88:
         09:65:5a:4d:b7:2b:e1:42:19:fb:26:de:ca:42:a8:4e:94:23:
         ce:24:b3:8e:1e:e7:76:af:d6:04:72:72:be:1b:1c:cb:44:e7:
         2e:66:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:17 2025 by rpki-client