Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa
File:                     3138322e3235352e302e302f32322d3232203d3e203436303439.roa (raw, json)
Hash identifier:          fzgf1QrAYO+Q/+T7U9QNA8O+kmp8Cz8Ay/r21tNo/s0=
Subject key identifier:   77:BB:32:4F:E8:F2:15:83:61:42:5C:E3:00:BF:8F:EC:DD:78:F2:1C
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       52CABF267C13B0B7841BD1021173C7CCC5FD666B
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa
Signing time:             Sun 03 May 2026 02:59:23 +0000
ROA not before:           Sun 03 May 2026 02:54:23 +0000
ROA not after:            Sun 02 May 2027 02:59:23 +0000
asID:                     46049
IP address blocks:        182.255.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:bf:26:7c:13:b0:b7:84:1b:d1:02:11:73:c7:cc:c5:fd:66:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: May  3 02:54:23 2026 GMT
            Not After : May  2 02:59:23 2027 GMT
        Subject: CN=77BB324FE8F2158361425CE300BF8FECDD78F21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:cc:48:d8:6b:09:7e:ce:bb:f8:43:67:70:
                    79:d7:0d:55:0c:87:b9:fe:7e:53:de:52:2f:41:b4:
                    a8:d1:e5:9a:b7:e8:87:2d:5a:f6:c8:a9:9b:3d:05:
                    3e:1e:6c:5e:e2:76:57:22:06:7d:42:ca:0f:0d:38:
                    12:fc:7e:4c:20:85:8b:19:d2:a3:af:9a:f0:81:c9:
                    a5:da:3b:b6:33:eb:5c:14:33:44:56:73:c3:a5:98:
                    6e:d2:06:84:91:20:5c:78:0f:e6:01:db:25:ec:5a:
                    c3:a7:c3:ea:8b:f8:d5:00:f0:cf:74:92:55:11:aa:
                    6f:bd:ff:c4:d0:aa:b6:bf:10:d5:9e:78:5d:40:91:
                    d1:ba:f3:a5:0b:de:2a:0b:63:2f:ba:38:37:3d:7b:
                    73:8b:99:aa:e0:17:a1:16:bc:88:06:06:e9:be:ee:
                    71:7f:7d:33:16:ea:f2:91:8e:7c:81:20:0f:0d:e3:
                    2b:74:3c:a4:bd:ac:d5:d1:2e:39:41:9b:26:c0:c1:
                    1c:16:6c:3a:fe:17:4c:3c:3f:e9:5c:2f:4d:d0:62:
                    32:99:12:f5:b9:65:d7:e3:69:82:44:5e:95:f0:25:
                    fb:4b:14:54:60:12:e2:2c:28:a2:1f:2b:c5:2d:a9:
                    f1:5a:0f:96:ce:d0:fc:0b:79:c8:0b:c8:df:5d:20:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:32:4F:E8:F2:15:83:61:42:5C:E3:00:BF:8F:EC:DD:78:F2:1C
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32322d3232203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:5b:9f:d1:21:3f:c6:af:b2:28:af:f0:5b:c3:c9:d6:74:
         c8:c9:b1:5c:ad:8f:1e:a9:21:c6:d4:eb:9d:dc:20:66:e7:64:
         2a:8e:ca:e6:9f:57:74:ae:30:23:0f:29:35:4e:cc:77:4d:b0:
         c6:2f:3d:47:35:e7:5d:9b:26:7b:cd:51:e8:60:af:e1:83:a0:
         20:fc:50:2b:56:8d:2c:c9:b9:c5:54:8d:4e:16:35:52:d0:4c:
         38:9e:93:55:02:af:77:ae:06:3e:ef:9d:6a:00:ec:a7:b6:2f:
         18:b6:9b:91:9e:ba:b1:04:0e:d6:5d:88:1f:26:78:fc:26:f1:
         dc:87:fd:66:78:4b:f4:5e:d2:cb:26:d8:68:95:89:91:7a:1a:
         dc:1d:5c:12:5e:46:ea:f2:8b:cc:ca:37:d0:51:82:5e:5e:16:
         52:b9:a9:d4:6d:72:65:80:5a:d9:c1:2d:c4:0f:9a:4b:57:df:
         e3:13:16:5a:d2:3f:ca:88:ce:0c:d1:7d:5e:4a:9d:63:1b:3a:
         9a:a2:79:7a:06:a4:22:8c:f7:65:d8:4d:56:4c:8b:d1:a3:db:
         26:33:42:ea:1d:7d:f6:26:25:61:b2:01:30:4c:f3:f1:5a:24:
         c5:0a:3c:ec:40:52:e0:46:12:02:15:75:2a:6c:9e:7c:15:6d:
         11:77:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:32 2026 by rpki-client