Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa
File:                     3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (raw, json)
Hash identifier:          ifJJcEjqzU7+xO+rrfiw7+N3sHyu5nZ4TiZzLx8FyiQ=
Subject key identifier:   BD:93:FE:37:AA:0A:8F:06:55:F6:9A:BD:9B:58:E9:AB:ED:9F:B2:47
Certificate issuer:       /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
Certificate serial:       44DEA45128484EF83B2CC209974092086AB03371
Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa
Signing time:             Sun 03 May 2026 02:55:12 +0000
ROA not before:           Sun 03 May 2026 02:50:12 +0000
ROA not after:            Sun 02 May 2027 02:55:12 +0000
asID:                     24210
IP address blocks:        180.150.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl
                          rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:a4:51:28:48:4e:f8:3b:2c:c2:09:97:40:92:08:6a:b0:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
        Validity
            Not Before: May  3 02:50:12 2026 GMT
            Not After : May  2 02:55:12 2027 GMT
        Subject: CN=BD93FE37AA0A8F0655F69ABD9B58E9ABED9FB247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:c5:bd:47:d9:67:44:9e:db:57:ee:6d:50:
                    48:5e:e6:e0:5a:72:81:27:23:96:86:9b:8f:c0:10:
                    04:0e:54:21:ab:df:c2:76:3f:35:b9:f2:0b:b3:16:
                    a2:b6:11:0c:f8:9b:eb:ab:7c:a8:1e:54:c6:9b:be:
                    3b:9c:c4:f8:c1:0c:46:63:1b:66:71:4d:98:15:a3:
                    85:13:37:7d:18:fe:0e:7b:e1:6e:c2:f3:f2:a9:95:
                    76:8b:f1:aa:fb:b6:3a:47:5f:9e:71:37:b9:9e:bf:
                    45:a2:f7:7c:4b:73:89:48:ff:7c:16:f5:21:c6:79:
                    d3:c7:05:37:ad:38:28:41:84:10:f0:e1:a2:fa:f2:
                    6f:49:24:4b:d0:39:57:5e:80:b9:9d:2e:12:fb:ad:
                    ac:20:60:8c:0b:a8:d2:e8:b5:fe:84:63:27:60:0e:
                    72:bb:c1:11:66:35:57:4e:6f:37:c4:bd:be:15:eb:
                    f9:1e:50:0f:87:b1:0c:64:d2:cc:95:3b:05:fa:62:
                    6b:91:7a:75:b5:1e:09:58:e6:9d:b7:a2:53:49:8d:
                    e4:b2:e4:ef:7f:07:c6:7d:ca:3e:cd:c8:c8:6d:1b:
                    db:03:59:2a:ce:12:40:a4:97:0f:e8:33:04:db:2e:
                    01:a7:fc:2d:30:1c:7a:1e:3e:fd:ee:ca:cb:14:5d:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:FE:37:AA:0A:8F:06:55:F6:9A:BD:9B:58:E9:AB:ED:9F:B2:47
            X509v3 Authority Key Identifier:
                keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.150.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:1a:16:08:c3:cd:9e:94:b9:18:ec:cc:c3:ef:be:2f:35:
         3e:e0:ad:23:e5:57:dd:31:f1:ea:2c:07:3c:1d:c5:e1:13:bd:
         38:9a:d9:60:d1:15:60:3e:a1:88:d9:82:5a:8c:83:a5:db:22:
         0c:f5:72:38:56:19:c7:35:59:4b:52:1b:d3:41:36:db:27:f5:
         4e:5a:b9:a4:16:e6:76:ce:01:39:da:0f:52:af:2b:b3:16:16:
         8d:a2:fc:a5:63:cc:98:83:cc:09:b8:8a:95:dc:99:1a:d3:02:
         94:3d:8b:53:71:ca:3c:39:52:6a:29:c1:03:e4:a6:b3:ef:08:
         f6:99:33:fe:c5:9a:6f:27:5e:94:66:8e:21:6b:63:70:86:79:
         e8:94:76:71:8a:7f:98:10:e6:0b:36:28:7a:92:27:98:02:17:
         28:c0:de:32:e3:29:9c:3b:a8:08:68:bb:c5:c5:fe:c3:05:b1:
         0d:3a:fb:c4:73:20:c6:9f:25:01:bc:5f:d3:44:03:4b:68:f8:
         cf:70:9d:1f:9e:28:a4:b0:28:b2:6e:03:c9:7a:b8:6d:18:d9:
         39:61:a7:b2:e5:8a:43:97:8e:15:3e:63:29:bc:43:00:3e:8e:
         61:11:95:cc:99:65:a6:fe:0c:16:72:4e:8f:94:54:a8:10:ae:
         75:01:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:02 2026 by rpki-client