Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3231203d3e203435373235.roa
File:                     3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (raw, json)
Hash identifier:          05Y/5fSNaBvz/56+mp5dJ9U12TLN6J+Oa3/76TULztg=
Subject key identifier:   5A:1F:2A:64:C1:02:17:A7:81:BD:7D:D1:21:DE:F9:E2:A5:17:9F:DB
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       4166541D9CE6FBBA11210A9A78BE8A264595EA1E
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3231203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:16 +0000
ROA not before:           Sun 03 May 2026 02:34:16 +0000
ROA not after:            Sun 02 May 2027 02:39:16 +0000
asID:                     45725
IP address blocks:        180.211.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:66:54:1d:9c:e6:fb:ba:11:21:0a:9a:78:be:8a:26:45:95:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:16 2026 GMT
            Not After : May  2 02:39:16 2027 GMT
        Subject: CN=5A1F2A64C10217A781BD7DD121DEF9E2A5179FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:2b:74:ff:77:26:bf:b5:e1:e6:cf:16:40:
                    bd:08:32:d5:96:81:7a:33:f0:de:ae:a5:32:89:d8:
                    58:62:03:98:e2:ca:fc:2d:cd:11:5f:85:77:9c:af:
                    58:5e:71:bf:e0:c7:93:62:98:a9:98:f1:bf:40:27:
                    68:3e:8d:90:b5:99:90:b4:9e:4c:43:a2:0f:aa:d7:
                    d4:45:4f:50:5b:09:28:65:f6:1f:66:e3:c0:98:ad:
                    71:d1:78:2f:ec:68:84:c0:97:c3:3b:04:fb:9a:39:
                    23:c7:98:6c:96:2e:5c:0e:82:cd:1c:aa:74:58:3b:
                    b2:13:dd:0a:dd:cb:79:04:bd:bc:2a:05:a3:06:2b:
                    33:4d:48:61:0c:e3:1b:77:cd:f5:cf:49:79:89:4b:
                    8c:49:18:08:6f:dd:33:f6:2f:11:91:39:03:44:15:
                    b1:ca:01:bb:75:cc:38:ff:55:57:fb:e1:35:f2:02:
                    97:e2:fd:29:7f:90:a2:24:84:7c:a9:8c:0f:44:d9:
                    78:ea:26:22:4a:ca:5b:49:10:ae:27:1d:d1:85:ac:
                    a0:fd:81:86:cc:85:6b:7e:ec:eb:de:b8:bd:b3:e2:
                    b1:b4:14:fb:d5:d1:e8:73:e1:34:3b:c3:01:83:d9:
                    b9:92:8e:c5:ba:a6:4a:07:b9:12:83:2e:c5:3e:cc:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:2A:64:C1:02:17:A7:81:BD:7D:D1:21:DE:F9:E2:A5:17:9F:DB
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32312d3231203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:d8:da:0d:42:f2:9f:88:53:ea:68:9e:32:e7:21:f8:53:
         c0:4f:8f:31:01:d3:66:ad:c3:7f:b4:31:76:6e:aa:8f:7b:4f:
         64:99:23:7a:c7:e7:47:23:69:38:b8:08:af:7a:0d:51:5c:e8:
         8f:fe:2a:e2:46:6a:f4:3d:af:1d:07:b1:e1:90:19:9d:db:e3:
         59:2d:4f:6b:77:b9:b5:e7:4f:98:16:79:3a:68:74:0d:1d:8e:
         75:79:f8:17:88:0e:3d:9d:83:b2:d8:94:2a:82:31:27:95:eb:
         35:b5:0b:a6:ba:b6:97:03:64:cd:c6:06:a7:37:5c:fc:d6:53:
         40:00:f8:d9:af:72:26:e5:63:67:1d:d9:7b:03:8e:9b:64:33:
         51:85:29:d8:c0:9a:1d:17:16:24:67:4c:80:f5:bd:84:d9:f9:
         39:ab:79:10:6f:6a:73:43:44:5f:97:99:67:b0:d6:74:12:92:
         3f:6d:00:71:10:14:d5:7d:9b:18:1c:3b:e9:9b:b2:47:87:da:
         6b:c4:78:d5:c5:f5:fc:de:a4:7e:4c:0f:ac:f6:d8:a2:0a:2d:
         3f:35:43:20:a7:2a:f2:60:61:68:ee:e6:52:af:e7:1e:c8:f9:
         55:06:24:cc:a0:32:50:f8:ad:6f:ac:7f:ed:4f:d4:55:b8:b0:
         c2:bb:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:00 2026 by rpki-client