Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
File:                     3138302e39342e382e302f32342d3234203d3e20313532303430.roa (raw, json)
Hash identifier:          QD46OeSAEEYRUHA+p9YKqowoXvSQlWoPfMsfotiNmwI=
Subject key identifier:   EB:6A:57:31:C0:F5:56:C3:67:4B:C5:96:B2:0F:90:60:4B:6A:90:5F
Certificate issuer:       /CN=00095019ECFE138568A45C973E2550DDCDFE24F9
Certificate serial:       6477038ADF7EE56EFA7780C6DBC3C5D86C4A7D58
Authority key identifier: 00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
Signing time:             Sun 03 May 2026 02:34:19 +0000
ROA not before:           Sun 03 May 2026 02:29:19 +0000
ROA not after:            Sun 02 May 2027 02:34:19 +0000
asID:                     152040
IP address blocks:        180.94.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl
                          rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:77:03:8a:df:7e:e5:6e:fa:77:80:c6:db:c3:c5:d8:6c:4a:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00095019ECFE138568A45C973E2550DDCDFE24F9
        Validity
            Not Before: May  3 02:29:19 2026 GMT
            Not After : May  2 02:34:19 2027 GMT
        Subject: CN=EB6A5731C0F556C3674BC596B20F90604B6A905F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:7f:68:d6:ff:22:e8:2d:0d:c8:e9:a4:19:
                    5a:3c:fc:a4:74:9e:e8:8f:65:6f:8f:fa:f4:db:6a:
                    e8:9f:f3:58:6b:4e:7c:9e:80:f7:25:b1:39:bd:1a:
                    a7:30:89:40:77:8c:d0:2e:93:cc:ba:45:df:8f:a4:
                    cf:4d:1d:b9:af:02:09:ed:31:fa:35:0e:e5:f1:70:
                    fd:46:57:c6:73:99:95:49:04:70:5a:b9:60:b8:4d:
                    f5:ac:22:0c:24:1e:4b:5d:2b:81:0b:28:c1:36:ea:
                    4a:a5:23:e3:3a:97:3a:af:b1:37:8a:65:a6:da:e0:
                    d4:2f:ef:ff:d1:78:c6:a1:8e:de:3c:c1:be:7c:d3:
                    c9:9f:de:ac:8c:94:a6:3f:8c:be:5c:a9:47:26:54:
                    0c:fd:7a:72:3a:30:e5:9e:89:b7:d9:48:d3:e3:00:
                    31:bc:5e:2d:01:59:5a:b2:73:cc:9d:ea:fc:85:bf:
                    be:4a:ed:8e:6b:9f:19:cd:8e:ea:a4:82:2e:ab:6f:
                    c2:30:c1:e4:fd:2c:97:31:d2:40:d5:34:da:45:b3:
                    47:f0:2a:b4:f3:7a:8e:76:2a:99:fc:9b:c6:36:dc:
                    c4:44:ad:ea:42:61:3f:cb:e4:74:87:f7:44:c7:06:
                    e8:04:00:0a:ae:4f:fc:84:dc:79:0f:f9:8f:3d:bd:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:57:31:C0:F5:56:C3:67:4B:C5:96:B2:0F:90:60:4B:6A:90:5F
            X509v3 Authority Key Identifier:
                keyid:00:09:50:19:EC:FE:13:85:68:A4:5C:97:3E:25:50:DD:CD:FE:24:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/00095019ECFE138568A45C973E2550DDCDFE24F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00095019ECFE138568A45C973E2550DDCDFE24F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:45:79:4a:18:b4:31:04:e9:92:1b:99:3d:7b:40:e9:aa:b4:
         15:e3:17:50:96:57:16:ab:e5:41:dc:be:fd:4b:b6:b5:b4:a3:
         9d:6e:bf:82:09:15:2c:de:6e:a9:0e:d1:2d:cb:d2:b7:ba:f4:
         80:1a:2a:03:bf:44:3e:34:4e:b5:0a:be:4f:e3:e3:1b:5f:c3:
         1b:c4:09:a7:67:77:e5:61:aa:cd:93:d4:87:e6:9b:7f:15:e5:
         34:93:59:36:b2:97:fd:3b:02:94:a4:7f:44:a2:6e:d9:ec:77:
         3d:d2:57:e7:a7:12:85:91:1e:78:de:9a:36:14:e5:11:57:91:
         20:e8:a4:81:02:e8:ee:6d:cd:c1:7c:c3:f3:ca:95:1b:68:8f:
         61:f6:d2:64:ae:0c:81:b6:aa:44:68:a8:da:10:ab:c1:31:1d:
         ba:00:aa:79:bd:7e:4b:ee:f4:ec:40:a5:b7:9b:19:d5:79:00:
         49:ef:30:37:4b:d2:42:db:1c:78:22:24:5e:3c:b0:a9:1f:b6:
         82:06:d4:88:e6:3e:87:bb:e0:eb:23:9a:fb:9b:71:91:4f:22:
         b9:c9:51:53:8d:0c:c1:3a:42:58:93:b5:2d:b8:03:37:2b:7c:
         29:cb:db:ac:39:16:ca:b0:b8:f4:57:f2:d9:84:77:8b:ce:04:
         c8:ca:a2:8e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZHcDit9+5W76d4DG28PF2GxKfVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwOTUwMTlFQ0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERD
REZFMjRGOTAeFw0yNjA1MDMwMjI5MTlaFw0yNzA1MDIwMjM0MTlaMDMxMTAvBgNV
BAMTKEVCNkE1NzMxQzBGNTU2QzM2NzRCQzU5NkIyMEY5MDYwNEI2QTkwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMn9o1v8i6C0NyOmkGVo8/KR0
nuiPZW+P+vTbauif81hrTnyegPclsTm9GqcwiUB3jNAuk8y6Rd+PpM9NHbmvAgnt
Mfo1DuXxcP1GV8ZzmZVJBHBauWC4TfWsIgwkHktdK4ELKME26kqlI+M6lzqvsTeK
Zaba4NQv7//ReMahjt48wb5808mf3qyMlKY/jL5cqUcmVAz9enI6MOWeibfZSNPj
ADG8Xi0BWVqyc8yd6vyFv75K7Y5rnxnNjuqkgi6rb8IwweT9LJcx0kDVNNpFs0fw
KrTzeo52Kpn8m8Y23MRErepCYT/L5HSH90THBugEAAquT/yE3HkP+Y89vV+XAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU62pXMcD1VsNnS8WWsg+QYEtqkF8wHwYDVR0j
BBgwFoAUAAlQGez+E4VopFyXPiVQ3c3+JPkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTZmMWViNGItNDhkYy00ZWVhLTkxODEtMTI4Y2IyOGIzZGJhLzAvMDAwOTUwMTlF
Q0ZFMTM4NTY4QTQ1Qzk3M0UyNTUwRERDREZFMjRGOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMDA5NTAxOUVDRkUxMzg1NjhBNDVDOTczRTI1NTBERENERkUy
NEY5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU2ZjFlYjRiLTQ4ZGMtNGVlYS05
MTgxLTEyOGNiMjhiM2RiYS8wLzMxMzgzMDJlMzkzNDJlMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0XggwDQYJKoZIhvcN
AQELBQADggEBAEFFeUoYtDEE6ZIbmT17QOmqtBXjF1CWVxar5UHcvv1LtrW0o51u
v4IJFSzebqkO0S3L0re69IAaKgO/RD40TrUKvk/j4xtfwxvECadnd+Vhqs2T1Ifm
m38V5TSTWTayl/07ApSkf0Sibtnsdz3SV+enEoWRHnjemjYU5RFXkSDopIEC6O5t
zcF8w/PKlRtoj2H20mSuDIG2qkRoqNoQq8ExHboAqnm9fkvu9OxApbebGdV5AEnv
MDdL0kLbHHgiJF48sKkftoIG1IjmPoe74OsjmvubcZFPIrnJUVONDME6QliTtS24
AzcrfCnL26w5FsqwuPRX8tmEd4vOBMjKoo4=
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:34 2026 by rpki-client