Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          PKamMspjwCbW9/wmGhI81OH48EZJP0jTkY5TCE2XWoM=
Subject key identifier:   00:AA:17:04:1E:60:98:8A:26:1F:F0:72:48:6D:2F:07:3B:2A:8D:FB
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       20BFB2D1A4170017F39608401830B460D158E031
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:54 +0000
ROA not before:           Sun 03 May 2026 02:10:54 +0000
ROA not after:            Sun 02 May 2027 02:15:54 +0000
asID:                     38150
IP address blocks:        180.214.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bf:b2:d1:a4:17:00:17:f3:96:08:40:18:30:b4:60:d1:58:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:54 2026 GMT
            Not After : May  2 02:15:54 2027 GMT
        Subject: CN=00AA17041E60988A261FF072486D2F073B2A8DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:39:16:ef:95:45:d3:5c:58:c0:b8:42:a7:
                    74:c8:67:c4:6e:cd:11:68:bf:61:3a:04:fd:b5:10:
                    ee:0b:46:f4:b3:17:9b:8b:84:02:a7:7a:87:ec:61:
                    1a:b1:ba:de:b0:27:81:c2:9e:f6:de:6b:9b:f0:05:
                    ce:49:a7:24:59:59:c1:6f:91:49:a8:76:bb:44:0d:
                    97:26:83:7a:0a:75:c4:cd:63:fd:12:a7:5c:e5:07:
                    56:a1:9d:e7:a6:1e:3e:58:82:83:75:a7:7c:9c:a4:
                    bd:40:04:11:0e:1a:c6:5c:bb:bc:ae:d6:c0:66:a7:
                    3c:5c:e7:c8:2c:58:ae:e7:e8:7f:3e:f8:f3:ed:92:
                    9b:c4:38:93:89:8e:46:08:91:70:95:21:2c:e9:1a:
                    43:86:d7:e3:7e:5c:95:4b:77:40:80:97:6f:bc:96:
                    8d:40:48:d9:9c:85:9d:64:28:7e:4f:e8:ad:07:0b:
                    c5:fd:a7:3e:2c:6a:1b:aa:5a:d9:f3:be:e1:ce:fe:
                    b1:a5:fd:f2:f0:27:45:c6:f3:68:b6:24:4f:86:98:
                    eb:cb:51:4c:5c:3a:0f:68:15:d2:56:ca:92:5a:29:
                    50:1a:8a:ba:3c:91:87:af:ad:ca:80:31:4d:82:42:
                    5b:9a:72:90:4d:0d:b9:e1:da:91:d6:31:99:1f:c9:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:17:04:1E:60:98:8A:26:1F:F0:72:48:6D:2F:07:3B:2A:8D:FB
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:23:42:46:3e:43:86:44:7f:2c:d0:f1:9e:0e:53:60:98:7e:
         c3:7a:ad:e8:00:8e:04:e9:03:78:d8:cc:4c:29:43:8d:4d:23:
         92:8d:42:cd:35:6a:80:65:e7:d9:17:a8:ca:80:f5:62:cb:f5:
         db:4a:dd:23:23:ec:f4:58:e1:46:6e:4f:a6:1b:3e:bc:bd:7c:
         c2:9c:e5:8e:3d:a8:2c:9b:0e:0f:87:e8:45:b6:ee:84:00:c3:
         a5:a4:e9:46:d1:72:b1:e0:74:d0:ba:58:82:5f:20:40:10:9f:
         fc:38:b2:51:52:d6:ef:2b:1a:62:74:60:bd:e6:ad:4e:8c:75:
         a8:b5:a7:2d:46:a6:55:73:f2:f2:08:ca:e8:3a:9a:0b:74:11:
         18:d0:71:db:7c:5d:3e:47:3c:b0:4e:25:b4:d8:c6:ec:8d:35:
         52:28:57:9f:91:92:91:36:0e:13:94:ed:9a:c9:36:c4:ba:48:
         7d:de:08:87:f5:1f:b3:dc:93:d6:97:4b:fa:a1:64:af:77:d1:
         0a:b2:f2:ac:6a:80:10:7f:c7:bf:ce:d3:d5:54:e6:a9:c6:bc:
         0b:45:ce:02:a7:07:d5:e8:ee:b0:d6:8b:44:76:7f:29:cd:ba:
         4f:5d:69:9e:f0:34:fa:f9:1b:3d:7d:19:53:17:ec:67:eb:23:
         6c:3d:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:05 2026 by rpki-client