Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          hUDOtpk5sU33YBwXelqB+Q6pSbGdI6HJT8kjYPqYyvs=
Subject key identifier:   E3:25:F2:DF:C4:69:93:A3:04:F5:A6:D6:86:7A:C9:C9:29:D6:E3:85
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       7F571D940C6E363B273F6E337F1331E88CD003CA
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 08 Mar 2026 16:00:01 +0000
ROA not before:           Sun 08 Mar 2026 15:55:01 +0000
ROA not after:            Sun 07 Mar 2027 16:00:01 +0000
asID:                     45725
IP address blocks:        180.211.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 21:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:57:1d:94:0c:6e:36:3b:27:3f:6e:33:7f:13:31:e8:8c:d0:03:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Mar  8 15:55:01 2026 GMT
            Not After : Mar  7 16:00:01 2027 GMT
        Subject: CN=E325F2DFC46993A304F5A6D6867AC9C929D6E385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:00:c8:4c:d4:1b:17:54:f9:f1:2e:c8:26:
                    fd:82:82:06:e9:7a:93:6d:20:28:00:dd:66:24:63:
                    8a:fc:f7:e8:1e:8e:5d:db:d6:dd:91:1c:10:a8:79:
                    da:21:e3:90:66:ca:1b:13:89:fb:88:6e:44:9d:f9:
                    08:b3:96:dc:40:3e:a2:49:f7:a5:3d:7a:07:b9:42:
                    e7:0d:c0:61:bb:6a:f6:66:89:5a:23:c8:8b:5c:d2:
                    6a:c7:ef:2f:3b:92:5c:eb:bf:4c:5b:07:ce:f9:2a:
                    1b:72:fb:b3:65:7c:4f:91:32:88:c2:a6:67:d9:b5:
                    f8:c0:20:dc:4d:3e:0b:01:5e:2c:c4:ca:b1:3b:48:
                    76:2e:cd:68:e1:4d:03:a8:ae:89:3e:9e:03:ec:7b:
                    0e:6d:d1:24:f0:83:85:e7:78:61:97:3b:3d:98:44:
                    35:a2:dc:a9:e9:c7:15:ca:ce:e0:b5:76:42:9c:ad:
                    ea:fe:83:ee:a6:b8:38:26:bd:b7:97:a3:fc:da:38:
                    63:27:84:ba:74:bd:8c:63:fd:25:2c:29:31:ea:09:
                    fc:6f:65:9e:12:85:d1:dc:83:e5:ac:48:3c:80:0a:
                    db:03:58:bd:fc:fd:71:fe:3d:e6:5e:94:48:13:6d:
                    1c:d6:46:ad:1f:8d:09:78:09:0c:28:26:3f:9c:23:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:F2:DF:C4:69:93:A3:04:F5:A6:D6:86:7A:C9:C9:29:D6:E3:85
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:36:c1:13:01:1d:c7:7a:44:ab:b7:4c:d5:7e:f4:39:17:
         cd:ea:04:d3:01:ba:90:c9:59:88:aa:6b:73:b4:e1:8d:0a:0a:
         9d:13:07:46:d3:16:29:00:b4:bd:7f:91:01:79:7f:5e:7a:81:
         b8:05:bc:6e:46:bf:09:12:67:83:27:8e:82:12:47:e0:0f:84:
         14:48:0b:df:de:de:e6:32:39:e2:f6:3b:cc:8a:07:c9:91:f5:
         54:14:94:eb:f9:88:ef:15:a3:66:58:df:68:7d:eb:e9:6b:1c:
         d8:8a:bf:a9:d7:d5:1f:c2:42:a7:87:9a:c2:66:3c:50:29:b0:
         00:d7:47:30:49:9d:56:f2:fe:0b:ed:fe:eb:17:31:c2:03:b8:
         fb:56:6d:e4:db:df:e7:91:46:30:8a:84:82:d1:ec:41:41:67:
         56:2e:5b:45:41:f0:61:1b:d3:73:c7:0f:72:96:41:ed:0d:8e:
         9d:e2:bc:ee:08:51:7e:70:30:2a:d0:ac:c8:6f:e1:8d:ac:44:
         a4:e8:37:a7:5a:5b:f2:d9:fc:09:6f:02:3f:4f:f4:df:ba:ca:
         e3:e2:88:ef:cb:db:b1:ed:29:c2:b4:0c:c4:db:ec:d5:17:fc:
         1d:67:d5:aa:b7:53:0f:bd:4e:47:84:f8:d2:ed:07:b6:1d:3d:
         76:71:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:04 2026 by rpki-client