Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234382e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          jo7X56+QZIN9BVnlsXjTC5BGLYwSYVfuxVle6fnb4ak=
Subject key identifier:   02:A6:D4:DB:CE:72:2C:90:13:A4:7C:F5:9A:A6:B2:D0:3A:B4:63:AE
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       6710388F4A655E55308E7FE472D6D5194420D7D3
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234382e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:53 +0000
ROA not before:           Sun 03 May 2026 02:34:53 +0000
ROA not after:            Sun 02 May 2027 02:39:53 +0000
asID:                     45298
IP address blocks:        182.16.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:38:8f:4a:65:5e:55:30:8e:7f:e4:72:d6:d5:19:44:20:d7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:53 2026 GMT
            Not After : May  2 02:39:53 2027 GMT
        Subject: CN=02A6D4DBCE722C9013A47CF59AA6B2D03AB463AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:ef:e9:ac:be:06:41:af:5c:b5:26:56:03:
                    d4:8c:54:a0:74:0b:17:b3:41:27:e4:ef:b0:88:00:
                    e4:32:b4:86:8d:72:0a:de:e3:2f:69:36:89:e0:0b:
                    c4:40:0a:30:0a:62:6d:55:4c:55:fe:91:24:e9:d5:
                    88:52:ba:ab:6b:a9:19:4e:32:08:8e:a1:a5:b1:9c:
                    00:ca:2f:a8:35:07:98:7c:a4:ea:88:78:12:ac:2d:
                    60:f4:01:db:87:b0:1d:3d:f0:a8:58:dd:a0:83:94:
                    20:1e:3e:f5:d8:0b:07:eb:ba:20:2b:b6:02:a1:81:
                    8c:d1:df:dd:dd:3a:a2:6f:57:83:0d:0b:47:6a:7e:
                    c8:f9:8e:a5:87:7f:61:b0:62:a4:25:f1:74:e1:01:
                    25:6e:41:a0:c7:89:b2:1b:f1:4b:f2:0e:1e:43:4b:
                    70:a9:94:09:5a:15:4d:da:95:df:28:9c:8a:1d:cc:
                    86:af:2c:1a:f0:62:17:75:4f:ae:8c:b3:9b:b6:41:
                    e0:69:8d:ae:b4:8a:47:5f:76:d8:f4:24:92:53:4c:
                    ae:61:75:57:51:bd:c6:93:da:d6:9c:2f:7f:f1:2d:
                    73:ab:a9:78:1f:ee:c6:d5:f8:73:82:db:e5:ca:e0:
                    45:f1:7d:a6:b6:c3:6f:18:df:94:40:7c:1c:c5:1b:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:D4:DB:CE:72:2C:90:13:A4:7C:F5:9A:A6:B2:D0:3A:B4:63:AE
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234382e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fa:10:49:c5:70:80:cd:38:f7:e0:20:e6:bd:a0:fa:9e:e8:
         f4:5c:9d:b9:20:1d:05:c4:92:15:3e:7e:73:ef:c3:66:04:27:
         ba:39:60:0c:87:97:2e:4d:88:71:42:2f:00:33:f3:1b:77:90:
         12:bc:3a:80:52:bd:fb:53:45:21:1c:6d:40:c5:a3:68:2e:08:
         0d:47:41:e2:a0:4c:ba:88:b3:fe:16:19:3c:91:11:01:04:79:
         c5:e1:51:fc:33:d9:94:a2:74:32:dc:53:62:db:fd:eb:40:16:
         f9:94:8e:b9:bf:4c:07:f2:26:ca:7c:82:95:df:fe:ed:31:af:
         6b:7f:39:86:35:1e:0f:10:3a:3d:7f:04:a7:fc:f4:c3:e3:c6:
         db:92:3c:7a:af:5d:e7:33:52:17:d4:5b:c8:6b:7d:e7:01:1f:
         c6:d9:e8:fe:06:e5:ab:cd:95:e3:76:cc:ad:c4:94:b6:1e:70:
         4c:77:39:75:9a:97:1c:1e:f8:2a:0b:c9:88:95:45:62:fd:31:
         a9:44:3f:f1:de:cc:0e:dd:04:6e:ec:31:31:61:70:7e:78:b3:
         b4:34:62:a7:51:41:20:b9:0d:ef:37:e1:a7:0e:a6:79:bc:06:
         01:5e:66:93:02:ba:ff:21:e9:8c:11:26:19:34:44:38:f2:b6:
         39:e3:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:58 2026 by rpki-client