Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa
File:                     3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=
Subject key identifier:   BF:C3:B1:52:6F:F6:58:2B:01:2E:C3:08:08:65:3E:4E:7F:95:2A:B0
Certificate issuer:       /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial:       10FD1D1F2811941459D909CD3922C61DCD9A56C1
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa
Signing time:             Sun 03 May 2026 02:47:06 +0000
ROA not before:           Sun 03 May 2026 02:42:06 +0000
ROA not after:            Sun 02 May 2027 02:47:06 +0000
asID:                     55685
IP address blocks:        182.54.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
                          rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fd:1d:1f:28:11:94:14:59:d9:09:cd:39:22:c6:1d:cd:9a:56:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
        Validity
            Not Before: May  3 02:42:06 2026 GMT
            Not After : May  2 02:47:06 2027 GMT
        Subject: CN=BFC3B1526FF6582B012EC30808653E4E7F952AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:29:9a:78:79:ac:e0:6e:2a:9c:47:2a:8b:
                    6c:3f:74:56:6b:04:d2:f4:09:b5:04:ed:18:6c:a3:
                    f8:eb:8c:14:6c:a6:88:b3:da:fb:91:5a:16:9c:88:
                    79:51:cc:6a:1c:f6:f0:fd:7d:cb:45:98:d5:08:74:
                    3b:a3:70:b1:31:73:48:25:46:e4:1d:75:a7:76:35:
                    57:ce:d6:e7:5f:e3:aa:2d:94:58:b4:56:7b:2d:a2:
                    80:56:e3:0b:25:6e:ca:86:e3:d2:60:c4:03:01:fa:
                    b3:d7:53:b4:3c:27:12:f9:61:f7:95:07:7a:f7:2b:
                    51:22:23:65:29:b2:48:90:63:30:25:ad:6c:37:76:
                    b5:96:ad:8a:b4:14:a8:88:57:4b:d1:cc:fb:9d:ad:
                    9e:0c:4f:ab:04:53:a9:f8:92:64:52:c8:ab:7e:ef:
                    ac:03:d3:e0:2b:62:25:24:b1:23:ff:5f:52:e6:4e:
                    5d:2b:6a:75:50:b7:c1:00:63:56:c3:ee:49:f8:97:
                    6f:1a:55:43:f9:78:5c:25:01:1e:bc:b1:86:15:5e:
                    8c:6e:43:36:93:de:6f:01:1f:90:f7:1b:6f:13:c9:
                    f4:2f:04:48:48:e6:60:04:b5:d1:93:42:82:99:95:
                    f9:7a:b5:d6:ec:17:1a:9d:93:81:6b:68:46:99:f3:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C3:B1:52:6F:F6:58:2B:01:2E:C3:08:08:65:3E:4E:7F:95:2A:B0
            X509v3 Authority Key Identifier:
                keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:5f:08:aa:8a:f1:34:ba:ae:44:c8:84:4d:35:af:a3:4e:
         62:96:0f:48:34:43:46:54:54:3b:da:ce:b1:7a:8e:9a:85:f1:
         4e:4a:37:8b:bb:11:d4:a3:12:89:2a:ce:6f:1e:d4:89:e5:de:
         c2:9f:ff:d6:79:b4:e4:b0:93:fd:50:72:26:c2:7f:6a:1a:61:
         09:9c:09:15:7d:86:fb:8b:22:2f:3b:51:dd:d2:1a:48:ce:77:
         46:ee:d0:0d:26:25:cb:59:14:f6:0d:8c:ab:63:ec:ea:04:4a:
         e4:d8:53:75:e7:43:f9:4e:7b:3a:7b:0a:28:45:3a:1e:4f:e4:
         ee:87:bb:94:e3:a5:f3:c8:1c:56:77:d1:d8:31:b2:21:3a:ac:
         a2:85:43:df:e4:76:13:4f:3b:77:89:a8:65:ea:6f:d1:75:73:
         eb:d1:9b:50:0b:18:98:5d:65:98:9d:e9:6a:e5:af:eb:46:69:
         17:c4:50:cc:cc:af:5a:a2:83:20:22:4e:92:e1:40:e1:d6:e2:
         64:f9:05:dd:c4:ac:4d:72:6a:21:ad:95:e1:33:ad:2b:2c:66:
         da:48:21:4e:ae:68:f8:c7:37:96:95:8a:3b:92:79:92:8e:29:
         fb:8e:17:ef:76:b6:9d:69:34:99:6d:1d:cc:3a:1c:0c:67:47:
         81:d3:dc:b8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEP0dHygRlBRZ2QnNOSLGHc2aVsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDREQkI1ODUxMUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJB
RTNGMEQzNjAeFw0yNjA1MDMwMjQyMDZaFw0yNzA1MDIwMjQ3MDZaMDMxMTAvBgNV
BAMTKEJGQzNCMTUyNkZGNjU4MkIwMTJFQzMwODA4NjUzRTRFN0Y5NTJBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcSmaeHms4G4qnEcqi2w/dFZr
BNL0CbUE7Rhso/jrjBRspoiz2vuRWhaciHlRzGoc9vD9fctFmNUIdDujcLExc0gl
RuQddad2NVfO1udf46otlFi0VnstooBW4wslbsqG49JgxAMB+rPXU7Q8JxL5YfeV
B3r3K1EiI2UpskiQYzAlrWw3drWWrYq0FKiIV0vRzPudrZ4MT6sEU6n4kmRSyKt+
76wD0+ArYiUksSP/X1LmTl0ranVQt8EAY1bD7kn4l28aVUP5eFwlAR68sYYVXoxu
QzaT3m8BH5D3G28TyfQvBEhI5mAEtdGTQoKZlfl6tdbsFxqdk4FraEaZ83XXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUv8OxUm/2WCsBLsMICGU+Tn+VKrAwHwYDVR0j
BBgwFoAUBNu1hRHrVm2b4Zi37OFx0q4/DTYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODIwMzJiYzktNjA1YS00MjUzLWE0Y2QtNjJmMTI0MTI2ZWFjLzAvMDREQkI1ODUx
MUVCNTY2RDlCRTE5OEI3RUNFMTcxRDJBRTNGMEQzNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNERCQjU4NTExRUI1NjZEOUJFMTk4QjdFQ0UxNzFEMkFFM0Yw
RDM2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h
NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzgzMjJlMzUzNDJlMzEzNDMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArY2jDANBgkqhkiG
9w0BAQsFAAOCAQEAZtVfCKqK8TS6rkTIhE01r6NOYpYPSDRDRlRUO9rOsXqOmoXx
Tko3i7sR1KMSiSrObx7UieXewp//1nm05LCT/VByJsJ/ahphCZwJFX2G+4siLztR
3dIaSM53Ru7QDSYly1kU9g2Mq2Ps6gRK5NhTdedD+U57OnsKKEU6Hk/k7oe7lOOl
88gcVnfR2DGyITqsooVD3+R2E087d4moZepv0XVz69GbUAsYmF1lmJ3pauWv60Zp
F8RQzMyvWqKDICJOkuFA4dbiZPkF3cSsTXJqIa2V4TOtKyxm2kghTq5o+Mc3lpWK
O5J5ko4p+44X73a2nWk0mW0dzDocDGdHgdPcuA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:38 2026 by rpki-client