Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          Ll/b1GQ1hHLk4m8w9GNJTYVsExVvnc52BAO7f5yAJAY=
Subject key identifier:   5C:C1:AA:4E:AA:BF:FE:11:56:F6:A6:59:03:98:24:00:07:A1:D9:C1
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       09A680201524BA06E0302A12C3586D79138689DA
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:58 +0000
ROA not before:           Sun 03 May 2026 02:10:58 +0000
ROA not after:            Sun 02 May 2027 02:15:58 +0000
asID:                     38150
IP address blocks:        180.214.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:80:20:15:24:ba:06:e0:30:2a:12:c3:58:6d:79:13:86:89:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:58 2026 GMT
            Not After : May  2 02:15:58 2027 GMT
        Subject: CN=5CC1AA4EAABFFE1156F6A6590398240007A1D9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:ae:41:74:73:0b:eb:fb:ee:37:77:dc:a6:
                    3a:10:4c:07:15:51:02:1d:f3:07:02:36:6c:0c:4a:
                    7a:ff:27:a0:ff:02:e8:7d:8d:bd:e6:65:d0:65:58:
                    52:a2:18:ff:63:49:b2:12:a2:fd:2a:24:a5:ab:f2:
                    4d:3d:17:7f:3f:19:c7:69:15:ca:57:1f:41:d0:f1:
                    65:55:42:b9:77:64:94:f3:ec:42:cc:d0:d1:7a:e3:
                    fa:13:80:bc:0a:27:22:b6:9c:f7:3c:c5:02:58:2f:
                    6e:d2:c3:25:89:27:6a:99:30:e6:54:7f:b8:8c:75:
                    24:2e:e2:d0:c4:85:9d:52:3c:40:c3:17:86:e0:d0:
                    ad:b3:28:5d:1d:b2:7e:47:24:f7:84:39:e2:4e:4e:
                    a5:11:0a:47:79:a7:e3:7a:ab:54:8a:fc:86:82:48:
                    e6:30:90:2c:35:90:64:ee:ea:14:a0:b7:73:f9:19:
                    28:e0:c4:c5:e5:a4:6a:0e:30:bd:88:75:6d:72:db:
                    12:6d:b7:84:11:68:59:93:b6:e1:35:ce:18:f2:b7:
                    27:27:ff:fb:f6:a5:99:bd:5d:1f:3d:92:1d:3f:07:
                    b6:6e:2b:e4:cb:31:72:81:0c:60:18:b0:18:be:d0:
                    ae:6d:89:09:a8:5e:dd:c7:c9:d7:99:30:03:13:0b:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C1:AA:4E:AA:BF:FE:11:56:F6:A6:59:03:98:24:00:07:A1:D9:C1
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:82:a4:51:52:f6:8f:df:b7:97:ca:f7:3d:32:e5:60:8c:8a:
         aa:50:b3:b5:73:dc:62:23:4c:74:30:6e:6d:0d:66:91:cb:9e:
         fe:0d:d3:fd:88:1c:fa:dd:2a:92:cf:a8:57:07:ee:51:a8:d5:
         85:46:a2:11:55:8f:3f:99:09:b9:76:c3:17:82:42:b7:e2:fe:
         7d:50:09:fe:5f:03:1c:96:70:3f:0e:1e:33:2b:e2:38:f1:42:
         38:bc:f6:0c:6a:96:eb:91:56:2e:e9:b7:fa:dc:a1:83:42:3c:
         68:89:76:d4:f6:84:a7:9f:6f:0a:d8:d1:48:e2:8b:bb:49:6d:
         e0:07:bc:dc:3a:98:0e:0a:1c:43:fc:14:72:6b:27:7d:d3:f7:
         38:76:62:d5:d9:92:37:2d:3c:7a:47:db:c6:9d:24:00:8c:9d:
         20:14:21:9c:3d:c5:87:c0:7e:4f:b9:4f:dc:f3:c8:61:71:5c:
         cb:90:81:cd:f8:bb:17:93:f9:52:e1:b9:05:fa:cc:f7:15:6e:
         76:b3:5c:3b:89:4f:d7:b6:ba:61:73:14:1c:59:4b:a9:33:49:
         30:8d:f2:44:46:42:65:5a:76:df:bd:95:af:ef:74:e9:d0:77:
         5f:38:37:c3:a3:53:e6:44:29:2f:b2:15:e3:ec:ca:4e:86:69:
         a4:97:7f:06
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCaaAIBUkugbgMCoSw1hteROGidowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0
OUNENzJFMTAeFw0yNjA1MDMwMjEwNThaFw0yNzA1MDIwMjE1NThaMDMxMTAvBgNV
BAMTKDVDQzFBQTRFQUFCRkZFMTE1NkY2QTY1OTAzOTgyNDAwMDdBMUQ5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMa5BdHML6/vuN3fcpjoQTAcV
UQId8wcCNmwMSnr/J6D/Auh9jb3mZdBlWFKiGP9jSbISov0qJKWr8k09F38/Gcdp
FcpXH0HQ8WVVQrl3ZJTz7ELM0NF64/oTgLwKJyK2nPc8xQJYL27SwyWJJ2qZMOZU
f7iMdSQu4tDEhZ1SPEDDF4bg0K2zKF0dsn5HJPeEOeJOTqURCkd5p+N6q1SK/IaC
SOYwkCw1kGTu6hSgt3P5GSjgxMXlpGoOML2IdW1y2xJtt4QRaFmTtuE1zhjytycn
//v2pZm9XR89kh0/B7ZuK+TLMXKBDGAYsBi+0K5tiQmoXt3HydeZMAMTC+9HAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUXMGqTqq//hFW9qZZA5gkAAeh2cEwHwYDVR0j
BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy
NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3
MkUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04
Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNbzMA0GCSqG
SIb3DQEBCwUAA4IBAQC6gqRRUvaP37eXyvc9MuVgjIqqULO1c9xiI0x0MG5tDWaR
y57+DdP9iBz63SqSz6hXB+5RqNWFRqIRVY8/mQm5dsMXgkK34v59UAn+XwMclnA/
Dh4zK+I48UI4vPYMapbrkVYu6bf63KGDQjxoiXbU9oSnn28K2NFI4ou7SW3gB7zc
OpgOChxD/BRyayd90/c4dmLV2ZI3LTx6R9vGnSQAjJ0gFCGcPcWHwH5PuU/c88hh
cVzLkIHN+LsXk/lS4bkF+sz3FW52s1w7iU/XtrphcxQcWUupM0kwjfJERkJlWnbf
vZWv73Tp0HdfODfDo1PmRCkvshXj7MpOhmmkl38G
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:12 2026 by rpki-client