Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          7tn1qwvIgRbEeEPHCn3MsAshrkZGxEueKKt6KwLv3Q4=
Subject key identifier:   71:5E:92:9F:BA:B2:99:AA:51:D4:2F:56:A7:EB:DC:16:70:66:FD:BB
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       39CB48030934AEB0DF8D386C3CE747B8B1F01713
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:15:59 +0000
ROA not before:           Sun 03 May 2026 02:10:59 +0000
ROA not after:            Sun 02 May 2027 02:15:59 +0000
asID:                     38150
IP address blocks:        180.214.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cb:48:03:09:34:ae:b0:df:8d:38:6c:3c:e7:47:b8:b1:f0:17:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:10:59 2026 GMT
            Not After : May  2 02:15:59 2027 GMT
        Subject: CN=715E929FBAB299AA51D42F56A7EBDC167066FDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:4c:ad:5c:92:f4:b8:85:85:89:1e:53:31:
                    9f:0d:2a:89:db:0a:57:79:c6:b4:21:bc:2b:51:53:
                    1b:58:94:60:30:2e:3f:91:b7:d1:ba:cc:67:ab:ad:
                    e9:c8:4a:18:4f:7b:74:99:22:69:b2:8a:b4:d2:7c:
                    4e:5e:c5:df:fc:ca:cb:19:14:f5:96:dc:64:2f:c1:
                    bc:44:35:e6:1e:ed:6d:ee:1c:17:aa:ea:4e:39:77:
                    e2:29:4a:70:89:ad:17:93:b6:d5:16:fe:f5:36:2f:
                    70:52:8d:cf:b2:8d:42:87:51:cf:a9:3c:3f:96:9a:
                    5e:27:11:c0:ac:84:3c:28:48:20:0c:5a:dc:99:86:
                    7e:fb:e7:3a:d7:19:5c:c6:e6:91:7a:53:6c:12:15:
                    4d:85:58:f2:7b:71:ee:a9:8b:d5:24:7c:0d:55:6c:
                    66:63:42:9f:4a:97:4a:fd:0d:7f:15:d4:d9:ff:70:
                    44:0d:36:00:be:2f:ff:27:ab:3b:85:2b:01:67:6f:
                    21:b0:1c:a8:5b:f7:85:ce:1f:29:3b:51:c6:22:e1:
                    95:c0:df:9c:b6:32:cf:67:60:cf:b5:c4:44:f5:57:
                    fd:d1:af:c5:7a:59:d8:b1:d5:8f:37:3a:b3:b8:6a:
                    d9:a2:c6:e5:95:a2:04:2f:a7:d0:62:e6:d2:c8:b8:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5E:92:9F:BA:B2:99:AA:51:D4:2F:56:A7:EB:DC:16:70:66:FD:BB
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:27:13:34:08:86:d8:19:7e:f9:f0:99:11:2d:85:6b:7d:01:
         83:ee:b5:57:20:e3:59:00:7f:6e:7d:d3:52:3a:c0:04:a9:be:
         1e:38:02:f2:50:7e:d6:18:12:ff:29:3b:05:99:b1:c5:d9:88:
         69:56:44:ce:97:de:7a:b3:b3:73:71:e7:05:44:9c:37:ba:b3:
         4e:13:9d:9f:16:e8:ae:e8:ac:30:62:2c:ba:9c:0a:6d:94:15:
         8b:78:23:d1:b1:47:5d:04:ab:fa:94:d6:cd:bf:4c:fd:45:6b:
         73:a0:18:53:7f:66:af:e8:7c:d9:28:d0:b0:64:c6:37:cd:3f:
         4a:3d:3f:42:e1:0f:77:ae:ad:29:b9:7f:56:40:ac:84:18:5d:
         fc:6b:f9:33:2f:27:23:99:9e:1a:f6:4c:e9:12:23:d5:a6:66:
         0f:95:3c:95:d6:f2:bc:36:2f:7a:cc:65:e5:d6:f3:de:77:9e:
         4c:3a:44:f8:c5:7d:fb:1f:d9:b6:66:5f:a3:e3:e8:ae:88:69:
         8d:e0:0b:99:67:78:5d:44:e0:b5:29:b7:60:8e:c8:e3:9c:ab:
         16:4e:f9:34:10:5e:12:7d:62:18:be:95:2b:6c:28:7f:df:d3:
         f9:90:70:5a:21:97:df:39:83:d5:b5:21:2a:3d:05:21:af:f0:
         54:d7:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:48 2026 by rpki-client