Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          8kLzKJI2nja5geHzz7DQr+VguP3Mo1f3FK0nffBs5Fc=
Subject key identifier:   21:3C:EA:4F:24:85:02:BD:64:7C:88:C9:31:11:66:BD:B1:8D:41:B9
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       662C26E9472A00B783D880E153C4F53597FA1ABF
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:55 +0000
ROA not before:           Sun 03 May 2026 02:10:55 +0000
ROA not after:            Sun 02 May 2027 02:15:55 +0000
asID:                     38150
IP address blocks:        180.214.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2c:26:e9:47:2a:00:b7:83:d8:80:e1:53:c4:f5:35:97:fa:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:55 2026 GMT
            Not After : May  2 02:15:55 2027 GMT
        Subject: CN=213CEA4F248502BD647C88C9311166BDB18D41B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:14:ef:7b:3f:c5:d8:7d:0b:60:8a:95:76:
                    54:61:81:78:16:68:29:9d:4a:d3:34:b8:3d:00:c4:
                    83:11:04:66:ee:7d:b4:82:f6:64:b8:a0:b9:89:be:
                    4b:a4:4e:a4:07:94:ed:b8:8d:ef:f3:29:71:af:42:
                    d4:3f:da:e4:3b:d4:8b:79:69:84:92:18:1a:b2:02:
                    a8:e1:4a:9f:da:f2:ae:67:04:fb:08:17:1f:23:da:
                    38:db:7b:16:2a:48:4e:44:fd:8a:71:60:eb:ac:b6:
                    7d:d1:9a:22:a8:0f:12:5d:ee:73:66:5b:09:26:04:
                    d9:bf:b6:7a:73:bd:2f:8c:4a:ee:74:1a:ba:aa:0c:
                    7f:ee:80:84:b3:0c:f1:07:63:19:2c:84:c6:3a:5b:
                    fc:52:72:69:e6:27:24:e9:08:f2:8b:7f:a2:58:94:
                    5f:a5:20:04:ac:91:62:5e:1b:e5:7a:fc:94:e6:c2:
                    ab:f4:bf:70:ef:6a:af:1b:15:05:32:84:36:1e:75:
                    49:f5:0c:1e:6f:54:0a:c7:4a:37:c6:c2:a1:62:fa:
                    4f:8e:75:30:5d:81:be:1b:81:ee:23:fe:7a:6a:58:
                    f8:ff:61:13:95:12:33:df:b8:6c:10:95:fb:cb:51:
                    4e:07:ec:0b:98:65:36:27:dd:22:5d:21:a0:3b:65:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3C:EA:4F:24:85:02:BD:64:7C:88:C9:31:11:66:BD:B1:8D:41:B9
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:ac:d5:c6:f7:e1:3a:0b:67:c3:59:1c:38:93:a6:5c:9b:85:
         d7:aa:23:29:00:0e:4d:8d:7e:fa:9c:a9:2d:5c:88:2a:74:50:
         bc:70:ca:f3:a6:01:68:78:5e:89:df:37:1e:5b:4c:c4:53:6d:
         28:c2:bb:66:de:e0:f7:15:cb:a5:2b:ab:53:2e:f7:f8:a4:70:
         7c:b2:eb:71:4f:3a:28:76:d9:d2:ff:b6:68:a1:4a:8d:9f:49:
         0a:53:64:51:e2:3e:62:b5:37:33:35:02:e6:3f:e1:b3:82:ec:
         52:7f:78:b3:a2:21:a3:4c:72:c2:a5:ab:2b:08:48:fd:be:ce:
         d6:b3:ba:ce:3e:c6:38:79:53:91:5a:2f:f4:33:86:39:be:03:
         3d:5c:f2:5a:31:da:0f:6f:cd:0c:fc:4c:3b:07:34:e0:b9:57:
         86:2a:7f:3a:74:06:51:24:63:a8:00:77:ac:e1:f5:cd:f1:11:
         f0:a3:0f:4f:af:fd:81:29:3b:86:3e:b4:be:0f:e5:e0:f2:27:
         c3:23:48:9f:85:c3:e1:61:b8:b4:05:3b:2f:63:ab:f4:d8:3b:
         89:97:d3:a4:57:04:fb:11:1a:3b:ac:89:de:f9:c0:cb:dd:c8:
         7e:f4:a1:ee:88:5e:20:8a:4b:26:0e:f9:48:5c:b5:11:a8:2c:
         3d:8e:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:22 2026 by rpki-client