Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          Zdd9YKsWBUvddcG/dV3/nHAZNChI9zFUfTujTOe6+Bo=
Subject key identifier:   8E:EE:04:5C:A7:99:41:F5:49:82:75:CD:56:C9:25:95:A4:94:90:9B
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       663DBF4991E435747ED6C4882056BB82B76E964E
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:59 +0000
ROA not before:           Sun 03 May 2026 02:10:59 +0000
ROA not after:            Sun 02 May 2027 02:15:59 +0000
asID:                     38150
IP address blocks:        180.214.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3d:bf:49:91:e4:35:74:7e:d6:c4:88:20:56:bb:82:b7:6e:96:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:59 2026 GMT
            Not After : May  2 02:15:59 2027 GMT
        Subject: CN=8EEE045CA79941F5498275CD56C92595A494909B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:72:3f:11:b2:44:35:05:49:3a:34:e8:d3:
                    39:9b:ff:0f:7d:e3:50:59:3e:97:2c:8b:53:1e:fa:
                    93:96:92:bf:4d:9a:eb:19:1d:5c:57:16:99:7e:0b:
                    a6:4d:b3:06:dd:7a:a0:37:53:ad:a5:7b:9b:2c:06:
                    17:fd:f9:65:41:4f:af:8e:9c:4b:be:b2:70:49:e4:
                    58:ea:d0:44:39:bc:a2:fa:ef:8b:44:6d:0d:3b:e1:
                    5a:27:fd:d1:88:1b:3b:38:1e:cf:19:41:5a:51:b9:
                    4e:d5:bc:b1:0e:4c:34:d3:f7:0f:2c:a5:29:69:56:
                    e8:12:96:cf:f4:a0:88:6c:75:0a:62:56:89:55:ab:
                    eb:29:5f:b2:2a:4d:65:89:e1:ec:00:0c:af:43:4e:
                    c0:36:a0:59:7c:fe:70:16:25:80:c4:7c:3b:bc:61:
                    78:55:22:07:36:f9:e1:7e:3c:8f:88:a5:a7:a5:2c:
                    51:76:30:80:26:54:70:8a:4c:c1:c8:9c:d2:a4:6e:
                    d7:44:d1:5d:62:d9:6f:ed:6d:12:fe:e1:f5:89:cc:
                    6f:7a:cb:28:82:98:ae:3d:3e:55:2f:0a:6e:de:d2:
                    53:c8:ac:57:0a:d1:6d:72:a4:64:e3:c1:a2:cd:ba:
                    b3:03:3e:dd:63:c5:3d:fe:f6:68:33:cf:aa:70:67:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:04:5C:A7:99:41:F5:49:82:75:CD:56:C9:25:95:A4:94:90:9B
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:71:e4:e1:37:a6:bd:b1:01:66:aa:4b:ea:83:89:43:a9:
         33:64:2b:18:3d:16:b1:ab:b1:da:38:be:0f:5a:25:3b:57:d0:
         57:37:b1:73:2a:77:dd:00:64:cd:dc:f0:2a:b7:22:f3:14:c3:
         7a:62:48:f1:0b:51:21:46:9f:2c:8d:c2:68:98:17:bf:7d:2d:
         84:12:d3:35:5a:9e:67:23:47:2a:e6:50:75:91:49:b5:dc:b4:
         db:86:bf:ad:d8:29:bb:9c:49:c6:56:6b:7d:a4:81:42:85:52:
         44:05:69:87:22:ee:aa:29:fd:9e:f1:ee:ff:2a:08:49:10:c4:
         ec:39:f9:1e:ee:01:5b:86:f6:59:ca:84:63:19:62:3e:ec:13:
         86:b5:97:fc:da:e5:38:e9:82:dd:13:ab:ab:e6:e4:32:61:06:
         b5:af:ed:59:c3:cd:02:1d:81:56:4d:4c:26:24:4c:de:a3:21:
         ad:6e:84:41:63:63:2b:4f:53:ee:13:b1:a2:3b:65:6c:bc:01:
         89:93:c0:d0:10:89:c6:86:1c:8c:3a:96:88:4b:cb:ba:e9:e2:
         2e:7d:5b:b3:71:3f:09:4b:cc:94:6e:3c:a9:8f:72:5a:78:9d:
         a6:f5:56:8a:d2:f1:17:0c:06:17:e0:d8:71:76:4d:83:0c:3e:
         13:93:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:50 2026 by rpki-client