Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa
File:                     3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa (raw, json)
Hash identifier:          sHCf6/6bjp9XcRHH6nzs2UXll2GEJ7OZ4UeG+P00Ecg=
Subject key identifier:   B6:F4:E0:E2:B2:B8:03:D0:1A:53:6E:31:81:6D:FB:51:0C:38:7F:F5
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       2524F06F825A9CFA7A96E9709B27B9983A8DD8D9
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa
Signing time:             Sun 03 May 2026 02:39:47 +0000
ROA not before:           Sun 03 May 2026 02:34:47 +0000
ROA not after:            Sun 02 May 2027 02:39:47 +0000
asID:                     137363
IP address blocks:        182.16.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:f0:6f:82:5a:9c:fa:7a:96:e9:70:9b:27:b9:98:3a:8d:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:47 2026 GMT
            Not After : May  2 02:39:47 2027 GMT
        Subject: CN=B6F4E0E2B2B803D01A536E31816DFB510C387FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:ff:10:b6:2f:cc:72:68:e4:d3:8e:6b:77:
                    ab:bd:3b:d2:b1:82:11:4c:45:72:17:98:55:5a:57:
                    d6:22:5a:a8:a1:13:8e:f5:a7:ca:73:3f:67:5f:8f:
                    04:04:1d:3c:d9:2c:48:dd:dc:af:c0:61:1b:6f:22:
                    9b:30:02:27:d4:d5:86:91:a7:88:8f:11:a0:11:02:
                    50:12:2d:68:64:3f:c3:7d:70:90:99:4a:79:a7:00:
                    6f:b5:ea:ce:74:a3:2b:1d:58:9b:08:6a:62:92:3a:
                    39:23:8d:e5:6e:38:a9:03:34:44:aa:51:8d:28:80:
                    f9:44:23:14:20:a5:aa:f6:46:0a:b6:a3:9b:e0:79:
                    e7:10:60:57:9d:a0:a4:6c:a5:ab:bf:d0:e3:aa:64:
                    e6:29:61:2e:aa:a1:5a:4d:9d:56:35:d8:de:e1:a0:
                    ef:d9:64:e0:2b:43:26:95:67:b1:0b:c2:d9:12:4f:
                    5d:f8:6f:10:05:0c:67:1a:fe:40:3f:d7:24:c5:e1:
                    79:2f:49:dd:70:b1:c0:67:46:d7:7f:43:36:2e:9f:
                    bd:59:b0:3d:c3:3f:1c:ca:dd:f7:63:33:16:33:09:
                    56:7c:e1:9d:5b:cd:fd:a0:8e:3b:07:1e:a5:4e:f0:
                    ed:8c:4b:f9:6e:de:24:f9:e1:47:58:8a:bb:bc:99:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:E0:E2:B2:B8:03:D0:1A:53:6E:31:81:6D:FB:51:0C:38:7F:F5
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:8d:0d:b4:7b:70:4b:b6:df:48:39:ff:30:39:42:dd:15:
         01:1c:07:58:5f:2f:ea:6a:f7:ff:05:dd:85:ce:1f:e8:41:c9:
         c3:6a:54:da:c3:dd:d6:dc:0a:ea:8f:d5:9f:4f:6a:57:94:d7:
         cb:2d:d6:0a:73:98:3b:1b:e5:f5:0f:09:6d:86:6f:4b:91:8a:
         9e:1a:da:b3:a2:1d:15:0b:74:01:e0:cc:04:43:7c:ce:14:c8:
         a0:23:82:19:f2:4b:10:dd:67:d4:34:3c:57:c9:08:bf:ee:2f:
         29:2e:b0:05:4c:fc:2b:d9:8f:45:12:f3:e7:bb:e3:d1:07:2e:
         0a:f2:c1:6f:b7:07:a7:6d:24:0f:d3:25:23:0c:6d:8e:c7:b1:
         a2:e9:f9:bf:4e:25:26:16:1c:b7:9a:95:5e:65:ca:61:4a:db:
         32:30:6e:dc:fe:90:8f:bc:d0:aa:0a:1e:c3:b4:8d:93:d9:f9:
         ce:e8:9f:d0:95:79:05:5c:a4:01:d0:b7:35:5f:bc:cb:b1:73:
         c8:12:0c:f3:25:fa:34:e6:87:17:20:12:76:4b:eb:7e:e4:e1:
         af:98:ad:62:da:b9:ca:e9:83:ef:f7:40:c2:f9:f9:d4:57:00:
         c7:ea:63:38:a1:2b:6a:b7:a6:29:64:db:8f:09:e7:0e:9a:e9:
         3a:27:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:56 2026 by rpki-client