Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          OBod0UG9BWwZ1iv+JzwXGOxP9iZ+dCpCkcAaoXO+Arg=
Subject key identifier:   3C:22:95:52:55:82:13:A0:F8:EC:A3:3C:C2:6A:18:76:15:BD:70:33
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       964B585FE2C4904305BCF49240D6BC806F1220
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:41 +0000
ROA not before:           Sun 03 May 2026 02:34:41 +0000
ROA not after:            Sun 02 May 2027 02:39:41 +0000
asID:                     45298
IP address blocks:        182.16.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            96:4b:58:5f:e2:c4:90:43:05:bc:f4:92:40:d6:bc:80:6f:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:41 2026 GMT
            Not After : May  2 02:39:41 2027 GMT
        Subject: CN=3C229552558213A0F8ECA33CC26A187615BD7033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:84:25:63:07:3c:ab:76:04:1a:73:a4:f4:
                    d7:ac:67:c9:e5:a8:ee:b1:f7:e1:17:28:a5:70:7e:
                    81:9e:b6:2b:fe:83:5b:af:57:a5:3f:ee:4b:71:9d:
                    d1:c5:27:cb:b7:cc:94:e7:3b:a3:ad:ad:75:5e:a8:
                    83:f1:42:c7:08:5a:c3:81:bd:81:cc:4a:db:99:4f:
                    af:96:0d:e1:cc:26:df:b2:10:1d:b6:f2:70:3e:50:
                    61:32:20:05:43:67:b4:f1:43:8a:13:b9:fe:64:fb:
                    5d:be:69:0d:4e:23:13:87:70:15:e4:39:9c:56:1e:
                    9c:63:db:44:76:85:da:d7:87:28:e1:60:c7:65:6d:
                    2f:c2:c1:9a:22:9a:df:ce:05:2f:25:42:a0:b2:0f:
                    86:ff:fa:bf:2b:71:fd:3d:56:1d:90:69:a1:6a:38:
                    83:5a:62:c9:1d:ac:05:f9:44:2c:46:c3:df:41:74:
                    35:62:71:a5:b9:a3:31:73:7c:8a:4b:cc:8d:39:84:
                    9b:1b:5e:f0:ed:a2:10:e0:d3:9b:f0:04:69:35:6f:
                    60:ab:e7:cb:02:4d:b9:83:2b:39:9e:0b:fa:6e:fc:
                    b6:be:13:59:fb:53:8b:c0:4e:e5:ef:75:56:83:78:
                    57:0e:0b:0a:e6:68:18:1f:05:9e:ed:89:a0:ce:46:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:95:52:55:82:13:A0:F8:EC:A3:3C:C2:6A:18:76:15:BD:70:33
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234332e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:83:2d:c9:c8:12:91:2d:46:a0:c5:82:41:62:6d:d2:90:
         00:3f:0c:51:45:ce:5b:54:c0:66:e8:55:78:9d:f1:1a:d3:a5:
         a6:e6:8a:c2:d9:1d:70:bb:c0:c8:f4:78:ca:e3:be:71:9b:bf:
         8f:14:fd:14:08:ad:94:10:94:bb:6b:1b:7b:d5:ef:0a:c7:b4:
         73:78:c5:dd:06:25:01:8f:9b:1f:f4:30:ee:10:0d:2d:02:10:
         0c:ea:df:c6:57:fa:fa:e5:3e:84:df:43:a1:57:77:ee:fe:ac:
         0b:fb:69:f7:4a:b3:8c:7e:c8:80:0a:13:99:d8:e2:ab:ce:0f:
         47:28:ce:e0:99:bf:e1:54:75:f9:4a:8b:0c:af:f7:b4:8d:f4:
         dc:84:be:1c:4f:77:d5:08:e6:b5:d2:b1:2f:da:43:9e:53:1d:
         71:70:10:63:7a:e7:7b:69:93:3e:ec:81:68:db:db:75:0f:6b:
         5e:3e:d2:f9:56:08:37:88:31:f7:a3:ca:e1:40:09:20:2f:9d:
         ba:c5:5c:05:3b:44:d4:49:c0:d9:ea:bc:4d:24:91:31:74:61:
         c0:36:85:54:a6:bd:98:59:21:53:e2:83:51:ea:49:52:e0:26:
         1c:64:e9:78:94:93:8f:a0:10:b1:63:a7:6b:ae:7f:ad:87:48:
         73:4f:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:44 2026 by rpki-client