Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e312e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          1tjKipqGfWvYkfnGMYECfs44JQSvHqwqfZ7oob2o/Tk=
Subject key identifier:   1F:32:F7:22:C8:EC:65:52:2B:F7:2F:D7:06:09:E9:88:7F:8B:1C:13
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       31E40EE08EB4A718D3D6A4F6464A7513794C3094
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
Signing time:             Sun 03 May 2026 02:59:20 +0000
ROA not before:           Sun 03 May 2026 02:54:20 +0000
ROA not after:            Sun 02 May 2027 02:59:20 +0000
asID:                     46049
IP address blocks:        182.255.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:0e:e0:8e:b4:a7:18:d3:d6:a4:f6:46:4a:75:13:79:4c:30:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: May  3 02:54:20 2026 GMT
            Not After : May  2 02:59:20 2027 GMT
        Subject: CN=1F32F722C8EC65522BF72FD70609E9887F8B1C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:77:73:f0:b2:2e:e2:ce:c0:74:f7:25:7c:
                    8b:8d:8e:d3:b4:39:45:7d:18:47:0b:1c:7d:80:5d:
                    1e:29:35:ff:40:45:e0:9f:78:6e:db:17:ee:c6:29:
                    0b:85:28:87:cf:15:4f:3c:99:d5:af:58:1a:60:a1:
                    3b:07:fe:c6:77:bc:ad:7a:21:e6:f9:8b:a3:f7:88:
                    98:a1:20:68:0b:44:07:33:e8:dd:95:d4:d0:fc:03:
                    69:e6:0a:7e:89:e9:d6:25:b9:17:18:92:6b:ed:10:
                    74:e3:dc:8a:5d:e8:33:32:55:f7:79:85:f9:d4:5d:
                    4c:74:f6:bf:85:5c:11:aa:a7:31:56:e9:90:9d:fb:
                    81:49:bf:88:58:6b:04:8b:bc:eb:3d:89:95:fa:5a:
                    14:28:d5:74:b3:20:0a:20:36:99:a8:39:68:36:71:
                    26:a6:92:c5:7a:bc:5f:15:b8:d2:e3:72:96:40:7f:
                    16:74:5c:8d:c4:6e:f3:5c:79:9d:d9:ba:0a:e5:ec:
                    33:a0:22:f1:06:14:62:87:b6:0c:07:30:bf:53:69:
                    18:c8:13:29:21:5e:9a:d9:e9:dc:1e:5e:41:cf:de:
                    5b:34:c0:3b:e0:19:4a:95:f5:59:fc:ef:26:79:47:
                    5c:63:73:10:d3:0b:47:c9:14:57:57:46:cd:f6:b6:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:F7:22:C8:EC:65:52:2B:F7:2F:D7:06:09:E9:88:7F:8B:1C:13
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:cf:a1:d5:f9:3b:89:20:93:74:92:a4:9b:81:74:5c:3e:75:
         a3:5f:86:b4:85:c8:85:7a:cf:c2:cc:5a:65:67:c8:6f:97:b8:
         ab:79:05:2d:b7:d2:24:21:7e:76:08:5d:ac:3a:0a:e3:77:51:
         99:75:c3:7a:4e:07:f7:ea:66:86:55:27:08:1a:1a:dc:37:81:
         df:c4:99:27:0c:3d:3a:1d:b7:ec:68:14:74:37:ae:7d:86:d1:
         ae:bc:9f:91:b9:e1:a1:f8:d1:eb:5f:95:e2:87:32:3c:de:b1:
         ca:b3:97:bc:2d:db:39:c7:77:f5:ab:23:ed:4d:ab:9d:bf:ca:
         bd:5d:ff:0c:e3:d7:3d:23:61:75:cc:74:60:5c:7d:a6:ed:eb:
         56:f1:99:0c:69:3d:32:f0:df:c4:d7:20:53:a2:dd:45:25:0b:
         5b:da:6c:9a:22:82:9f:1d:51:5e:eb:d0:57:72:e9:57:42:e3:
         b7:62:3c:b6:20:56:29:d7:10:86:be:b0:3c:68:f4:1e:23:14:
         99:e8:95:b7:b2:16:10:12:90:af:d8:cf:dd:78:0d:4f:e5:61:
         9f:99:1d:76:a8:4c:79:02:a3:c5:5c:28:a9:53:47:15:6f:fb:
         03:36:34:ad:ce:ea:26:4d:30:7a:45:35:98:0f:77:0f:8a:22:
         b2:d8:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:31 2026 by rpki-client