Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          +cANsw2+SD51Rdr8R3QfkiK5NFrztvlDBLBG+DhwSNw=
Subject key identifier:   FA:6C:EB:D2:27:31:00:83:89:2B:76:F3:38:66:9A:71:AF:7F:3D:0D
Certificate issuer:       /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial:       19F16694FDF7EA52EC390339773E80540944697A
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
Signing time:             Sun 03 May 2026 02:39:43 +0000
ROA not before:           Sun 03 May 2026 02:34:43 +0000
ROA not after:            Sun 02 May 2027 02:39:43 +0000
asID:                     45298
IP address blocks:        182.16.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
                          rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f1:66:94:fd:f7:ea:52:ec:39:03:39:77:3e:80:54:09:44:69:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
        Validity
            Not Before: May  3 02:34:43 2026 GMT
            Not After : May  2 02:39:43 2027 GMT
        Subject: CN=FA6CEBD227310083892B76F338669A71AF7F3D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:6d:26:65:78:2a:77:27:72:ed:f4:69:35:
                    ae:97:eb:69:a8:44:f9:32:04:72:18:75:26:c4:31:
                    80:25:a0:82:e9:d3:5c:b2:a8:06:16:3b:4c:8e:d3:
                    b6:e2:b7:60:e3:70:99:7e:8d:a3:d1:1a:ef:7a:f7:
                    83:38:93:b2:ce:38:ed:33:da:ef:f4:6e:e1:c0:e8:
                    3a:40:b4:61:82:e7:1d:4a:9f:10:47:11:fc:78:5b:
                    fa:1a:76:c4:61:2c:a3:bb:e9:2d:4e:43:9a:a7:17:
                    04:6b:7d:b5:68:26:cf:86:39:74:18:9d:67:e5:6d:
                    31:0a:a0:ea:29:ea:12:2c:fd:b8:c6:5d:c1:64:06:
                    d0:96:1d:b3:83:e4:bc:6b:07:73:6e:19:33:f6:49:
                    b0:02:56:23:98:b0:0a:e8:7c:a8:8e:c7:21:b4:48:
                    11:f6:3e:11:f3:88:fd:fb:97:9a:59:43:db:4e:74:
                    5f:78:89:57:e1:cf:64:b8:61:f0:a9:1c:80:dd:47:
                    3e:35:0d:1b:b9:b1:52:f2:a6:ec:7b:7b:50:7e:d6:
                    42:ec:aa:d8:1e:d5:6c:ff:fb:97:62:6f:94:05:8b:
                    0c:84:82:d6:3b:74:10:22:ad:ac:f2:61:22:ec:af:
                    25:05:34:53:0f:70:16:c8:9f:52:b2:44:9e:ca:ce:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6C:EB:D2:27:31:00:83:89:2B:76:F3:38:66:9A:71:AF:7F:3D:0D
            X509v3 Authority Key Identifier:
                keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:89:c9:73:7e:3e:b8:a2:01:f6:50:13:88:7e:90:5f:f4:35:
         6d:67:e0:9c:4f:7c:84:a3:b9:d2:df:e2:1c:b3:31:1e:16:e1:
         af:af:a1:14:8c:10:26:f4:c8:0d:28:c3:b4:e4:17:b1:ae:1d:
         08:14:25:bb:72:1c:f6:6a:fb:39:a5:ce:ab:69:23:9f:fe:e5:
         2f:56:d3:05:8c:b2:3a:9e:72:ed:90:94:60:bb:aa:05:3b:0e:
         f1:1e:88:31:13:d5:58:d8:5d:cd:c1:75:20:17:0a:0e:a8:3f:
         bc:49:e3:18:52:a7:55:84:bc:7f:24:61:ed:78:a7:6f:4a:20:
         07:a5:80:06:60:95:64:7c:1e:7d:fe:c4:7e:ff:cc:99:f4:fc:
         6d:05:22:88:2c:62:78:e4:5f:dd:41:ef:a4:91:7a:a3:43:8b:
         b0:07:01:01:31:1a:08:a1:57:5c:a6:7f:00:a8:3a:ea:09:89:
         d7:6f:23:6e:c3:ba:98:2e:7f:b8:df:41:83:80:03:4a:af:f9:
         5f:c6:d4:67:bc:35:08:0b:c6:77:28:c5:74:16:d9:af:e7:8b:
         c9:6a:72:ac:4a:42:ed:80:5b:ec:c4:4f:1b:66:ab:ee:76:e5:
         4d:29:6e:8c:bc:04:2f:35:b8:10:e3:4e:47:52:6b:fe:8d:6a:
         24:72:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:42 2026 by rpki-client