Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36372e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          z9+inTK8KbQyjNS+A1qnkPMcbFcWl5VrPild9PgNuTs=
Subject key identifier:   FF:B5:87:48:49:01:B0:D8:2D:5F:92:7F:65:60:A2:2D:AA:BA:09:2E
Certificate issuer:       /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial:       1DED457545218412477CE160A21CCCD0AD283065
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
Signing time:             Sun 03 May 2026 02:34:12 +0000
ROA not before:           Sun 03 May 2026 02:29:12 +0000
ROA not after:            Sun 02 May 2027 02:34:12 +0000
asID:                     38513
IP address blocks:        182.23.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
                          rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:45:75:45:21:84:12:47:7c:e1:60:a2:1c:cc:d0:ad:28:30:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
        Validity
            Not Before: May  3 02:29:12 2026 GMT
            Not After : May  2 02:34:12 2027 GMT
        Subject: CN=FFB587484901B0D82D5F927F6560A22DAABA092E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:7d:55:b4:f7:25:3a:07:71:5a:f3:32:be:
                    7b:7a:3e:79:4d:a5:f9:5f:25:6c:5a:4f:40:7f:5e:
                    95:8d:9b:2b:f7:93:e6:5c:c4:d1:54:91:a1:dc:00:
                    ca:b0:1a:7c:db:d0:92:31:53:4c:80:09:1a:d1:d6:
                    19:a3:27:1d:8c:fe:e9:bf:69:2d:95:80:61:ab:83:
                    13:87:86:19:fc:52:1d:3e:52:02:14:30:e4:d7:81:
                    ee:f3:23:a0:c0:60:92:18:50:c3:92:a7:32:48:29:
                    15:7a:24:eb:4a:ee:87:da:5f:80:f6:39:73:c9:a2:
                    91:2e:fd:75:3b:99:e0:de:f2:3c:4a:07:f5:24:3b:
                    ef:ff:f9:67:de:a3:2e:2d:22:36:65:b5:bd:a6:61:
                    86:5f:95:f0:55:05:54:14:5f:97:c6:32:e7:92:88:
                    10:ac:5c:58:a1:93:cf:77:59:35:14:a8:e9:17:3b:
                    9d:10:be:c1:31:d0:f7:d1:09:d7:97:11:21:ff:4f:
                    86:fe:db:c6:f7:05:89:80:1d:eb:f4:e3:b7:c0:4e:
                    54:91:cc:16:b1:ea:b3:1f:bd:24:ac:da:04:f0:89:
                    6a:02:46:2d:a4:d1:42:27:62:1e:09:c9:4c:3b:90:
                    9b:c4:32:cf:ac:fc:41:3e:a8:36:a7:49:4b:2c:03:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B5:87:48:49:01:B0:D8:2D:5F:92:7F:65:60:A2:2D:AA:BA:09:2E
            X509v3 Authority Key Identifier:
                keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:11:3c:11:0d:f9:9b:2a:90:35:39:da:72:a8:59:d0:4f:
         8d:b4:82:7d:12:56:6a:58:f8:d8:6a:3d:65:8e:cc:cd:15:7e:
         81:9f:38:77:2d:b9:df:fc:90:b3:e5:77:73:cb:43:b1:bd:e5:
         e9:17:1d:2d:db:c7:1c:41:cc:48:59:07:55:bf:ac:3f:3f:fd:
         8b:8d:3d:2b:9d:43:80:8f:77:08:2f:8f:47:fd:66:ca:ab:8f:
         12:8c:59:eb:a1:a9:71:65:8e:5b:9b:a7:8a:ca:24:96:8a:b8:
         b4:66:b4:1d:6d:a6:90:50:aa:bd:2d:51:33:ce:04:f4:15:e1:
         f5:a8:67:f2:91:d6:db:c2:24:90:dd:f6:92:78:2f:c2:63:6d:
         f9:c0:a7:3b:c7:3e:71:86:38:2c:98:c6:8e:6f:e4:b1:97:a6:
         2d:46:49:9b:79:08:14:2a:60:23:e7:23:0c:52:c6:c4:6e:d6:
         90:43:4e:83:d0:68:20:30:2d:f3:86:af:52:2b:ff:44:82:57:
         6f:dd:f7:eb:3c:16:cd:ec:81:d1:85:14:f5:7d:cb:b7:6b:a4:
         0f:80:40:fc:9f:81:59:f1:59:59:77:d4:1c:30:98:b9:b5:b0:
         1b:76:9c:d3:6d:99:ed:61:b2:81:d4:1d:ef:78:ab:ae:c6:32:
         de:7f:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:51 2026 by rpki-client