Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          idljZ16M3swfkw4ovP9vpomtzJGJyjtN2z7RpR/To2E=
Subject key identifier:   64:E5:5B:E0:61:B5:82:DE:3B:26:7B:DE:2F:5C:D8:C0:06:04:80:8E
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       628EF6E89D812D25814C87A938C488BB8F16429E
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:54 +0000
ROA not before:           Sun 03 May 2026 02:34:54 +0000
ROA not after:            Sun 02 May 2027 02:39:54 +0000
asID:                     45298
IP address blocks:        182.16.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8e:f6:e8:9d:81:2d:25:81:4c:87:a9:38:c4:88:bb:8f:16:42:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:54 2026 GMT
            Not After : May  2 02:39:54 2027 GMT
        Subject: CN=64E55BE061B582DE3B267BDE2F5CD8C00604808E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:fa:d6:b9:3f:c7:54:1d:26:fd:73:f7:22:
                    23:0b:1c:48:b8:d2:c1:2a:91:3d:86:59:9f:53:ce:
                    95:15:42:0d:9b:8b:c3:ed:25:31:68:42:cc:86:c5:
                    df:1d:de:70:94:15:7e:df:56:30:10:cb:05:0e:78:
                    81:27:96:90:23:5a:3d:e8:2f:a4:24:36:0b:c6:97:
                    ed:d8:a7:89:dd:1f:94:0e:3a:f1:bb:39:5c:16:f8:
                    07:70:b1:37:51:ed:db:45:dc:f1:c0:66:95:15:a4:
                    7e:68:c2:6a:23:3b:d0:20:34:02:8f:d6:2c:c4:20:
                    4f:dd:8d:e3:fd:c0:8c:86:ab:5f:74:79:13:49:90:
                    41:31:9b:e9:83:85:76:ab:73:f3:e2:33:fc:91:48:
                    49:39:0c:ae:6d:c9:9a:c1:5a:be:4d:24:db:75:3f:
                    e6:37:e3:24:03:6b:45:46:21:cc:d3:34:c2:51:0c:
                    74:04:81:25:d7:f6:19:a2:5c:51:c7:0f:f1:80:d4:
                    5a:c8:71:8b:9b:39:a6:3d:9f:60:eb:04:11:8a:bd:
                    b9:a5:b7:61:65:f1:31:b4:df:cd:d4:f9:50:a8:8d:
                    e9:0c:b0:8e:56:fb:5b:da:d0:ee:dc:db:03:32:fa:
                    c5:9c:99:33:69:03:5a:fc:72:a8:f9:25:b3:90:d5:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:5B:E0:61:B5:82:DE:3B:26:7B:DE:2F:5C:D8:C0:06:04:80:8E
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:71:d8:ec:e6:ad:22:c5:75:df:81:a5:14:b1:a7:49:38:b9:
         0f:9a:5a:8b:31:e9:a1:02:2c:2c:19:54:47:b4:a3:8c:22:eb:
         dd:cc:be:a1:56:75:35:e3:65:e4:30:7d:bb:d3:a2:7d:54:fa:
         66:ab:77:a1:ed:b7:7e:17:73:5b:4a:42:c8:46:d7:06:06:3e:
         26:6b:f6:2a:2a:bf:09:30:97:33:64:77:63:12:66:33:1c:3d:
         45:2b:b2:5d:0b:95:74:cc:97:e0:33:9d:97:94:dd:72:fe:1c:
         38:7a:95:e5:08:81:b2:86:13:58:d0:0a:81:1a:85:87:fd:33:
         1e:97:c5:05:e7:6a:61:01:1f:77:01:7b:c0:06:85:bd:e0:fb:
         35:24:f2:db:56:2a:9f:2b:54:4f:00:d7:7a:e9:82:a6:21:77:
         77:eb:82:e7:ba:22:7c:6f:e4:3d:03:f2:4d:23:de:4d:4a:4c:
         0b:54:c5:90:4b:7c:6d:bc:a2:39:5c:ca:2a:b7:4b:34:39:af:
         ae:9b:fb:3f:b4:9c:e5:98:e9:a9:ff:86:03:10:e4:ae:88:6e:
         35:02:14:9e:75:fd:e2:34:31:41:f0:97:eb:f7:05:2c:e5:6e:
         c3:04:90:df:c1:16:57:0a:61:35:ce:3d:7a:fc:54:92:95:17:
         a4:2d:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:14 2026 by rpki-client