Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          5UlSEWJmILcSCfVnTwCxa/ENvvAkNUAYdbFPlsU3zCg=
Subject key identifier:   F6:20:48:48:26:D4:A3:A7:68:26:4C:5A:CF:61:18:2C:67:C7:85:30
Certificate issuer:       /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial:       02795929C4A548F1CE4E70E9748EA470F99EBF6F
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa
Signing time:             Sun 03 May 2026 02:16:00 +0000
ROA not before:           Sun 03 May 2026 02:11:00 +0000
ROA not after:            Sun 02 May 2027 02:16:00 +0000
asID:                     38150
IP address blocks:        180.214.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
                          rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:79:59:29:c4:a5:48:f1:ce:4e:70:e9:74:8e:a4:70:f9:9e:bf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
        Validity
            Not Before: May  3 02:11:00 2026 GMT
            Not After : May  2 02:16:00 2027 GMT
        Subject: CN=F620484826D4A3A768264C5ACF61182C67C78530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:f1:b9:6a:9c:bb:20:82:38:6b:aa:c5:6d:
                    b0:bd:eb:bd:37:d5:f0:08:2a:e3:26:10:71:db:ab:
                    fb:af:3e:c9:93:c0:7a:3f:e2:65:34:36:45:2b:5d:
                    fe:4c:60:6f:51:6c:30:cd:8a:3d:f6:c8:d6:04:f8:
                    34:25:18:35:6c:1f:a3:2d:0a:2e:2f:eb:ae:01:cc:
                    50:bb:4c:0f:95:1f:7a:e1:00:b8:ca:53:c7:dd:69:
                    fe:de:80:a7:f3:b2:e7:8c:8a:d4:67:11:ed:4a:99:
                    60:b8:49:0a:c6:9a:02:2b:25:7c:69:6d:5c:e2:81:
                    a7:b3:4b:68:ff:50:0d:c6:33:81:34:e4:f4:db:f5:
                    d4:55:9a:00:11:c9:7f:c2:b5:e8:c6:dd:49:20:b3:
                    bd:b5:4d:79:02:37:e6:75:fa:f7:f5:ff:73:48:2d:
                    51:44:26:43:b2:f7:3d:f6:ae:7a:a4:0f:c2:e1:b4:
                    5a:d0:36:36:76:60:a8:28:ef:96:85:2a:22:b1:59:
                    ac:81:c1:85:d9:4d:16:14:7f:c8:59:b5:7a:a3:08:
                    fd:b9:fc:c3:e9:8a:0c:23:64:6e:28:0a:08:b8:b3:
                    3c:e3:92:e1:82:a3:9e:f4:df:47:db:49:9c:f3:4b:
                    f2:c2:7e:4f:5e:d5:0c:58:2b:8f:4e:91:28:b1:45:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:48:48:26:D4:A3:A7:68:26:4C:5A:CF:61:18:2C:67:C7:85:30
            X509v3 Authority Key Identifier:
                keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:20:24:03:d0:2c:b4:28:e7:25:85:77:64:71:0b:c6:91:b4:
         f9:53:83:d8:85:c2:50:a6:6c:bf:e5:4d:b4:5f:b4:5b:45:65:
         b6:90:af:0d:3f:c1:79:86:7d:aa:e1:b1:34:b0:06:e4:56:4b:
         88:c6:dd:4b:7a:47:18:29:f5:4b:60:44:b9:aa:97:0a:9a:24:
         d9:c2:1c:95:ff:8c:d0:d1:9e:82:0f:6c:87:13:17:47:84:fe:
         8a:87:52:f9:3d:c7:5d:91:70:1c:16:69:6c:5f:b6:90:97:62:
         33:46:ee:db:0c:3f:c4:33:c1:63:14:b6:bf:31:15:e9:78:fd:
         e8:68:96:15:1b:13:58:06:af:31:ae:c8:54:c1:73:04:73:fe:
         5a:ef:9c:62:0a:d2:60:7c:f6:fd:e3:e7:c1:f4:f0:fd:18:94:
         8e:6e:c8:6d:52:e5:2d:ee:38:2d:af:aa:ba:4a:e0:43:22:0a:
         ad:78:61:fd:de:ce:d6:45:4f:26:1f:a5:c9:33:f7:45:c6:86:
         e1:67:45:18:e3:3f:28:a6:ce:d7:14:14:80:3f:07:d1:96:69:
         0e:b5:d2:e7:0f:81:15:3c:7c:5e:90:c6:a8:13:18:5c:5e:30:
         00:cb:33:36:5d:d7:85:8b:07:17:21:ae:12:45:d3:5e:09:a9:
         23:5c:07:0d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAnlZKcSlSPHOTnDpdI6kcPmev28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAyQ0IyMjgyNTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0
OUNENzJFMTAeFw0yNjA1MDMwMjExMDBaFw0yNzA1MDIwMjE2MDBaMDMxMTAvBgNV
BAMTKEY2MjA0ODQ4MjZENEEzQTc2ODI2NEM1QUNGNjExODJDNjdDNzg1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDP/G5apy7III4a6rFbbC96703
1fAIKuMmEHHbq/uvPsmTwHo/4mU0NkUrXf5MYG9RbDDNij32yNYE+DQlGDVsH6Mt
Ci4v664BzFC7TA+VH3rhALjKU8fdaf7egKfzsueMitRnEe1KmWC4SQrGmgIrJXxp
bVzigaezS2j/UA3GM4E05PTb9dRVmgARyX/CtejG3Ukgs721TXkCN+Z1+vf1/3NI
LVFEJkOy9z32rnqkD8LhtFrQNjZ2YKgo75aFKiKxWayBwYXZTRYUf8hZtXqjCP25
/MPpigwjZG4oCgi4szzjkuGCo57030fbSZzzS/LCfk9e1QxYK49OkSixRcD1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU9iBISCbUo6doJkxaz2EYLGfHhTAwHwYDVR0j
BBgwFoAUECyyKCVaxZwG9Wv5KRqr3UnNcuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTdlNjViNjctOTA1Yy00MDNjLThjNzktMjMxNTY1OTY2OGFhLzAvMTAyQ0IyMjgy
NTVBQzU5QzA2RjU2QkY5MjkxQUFCREQ0OUNENzJFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xMDJDQjIyODI1NUFDNTlDMDZGNTZCRjkyOTFBQUJERDQ5Q0Q3
MkUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04
Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM1MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb9MA0GCSqG
SIb3DQEBCwUAA4IBAQBgICQD0Cy0KOclhXdkcQvGkbT5U4PYhcJQpmy/5U20X7Rb
RWW2kK8NP8F5hn2q4bE0sAbkVkuIxt1LekcYKfVLYES5qpcKmiTZwhyV/4zQ0Z6C
D2yHExdHhP6Kh1L5PcddkXAcFmlsX7aQl2IzRu7bDD/EM8FjFLa/MRXpeP3oaJYV
GxNYBq8xrshUwXMEc/5a75xiCtJgfPb94+fB9PD9GJSObshtUuUt7jgtr6q6SuBD
IgqteGH93s7WRU8mH6XJM/dFxobhZ0UY4z8ops7XFBSAPwfRlmkOtdLnD4EVPHxe
kMaoExhcXjAAyzM2XdeFiwcXIa4SRdNeCakjXAcN
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:25 2026 by rpki-client