Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e322e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          0s5xd9MbczadFUl8oTbSMq42SIuihW/8vWukriq8a6Y=
Subject key identifier:   9A:6D:7E:73:10:70:A9:E8:56:AA:D9:A6:9A:48:DD:E5:AA:6D:D5:B8
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       091F1ACFA7C89571E0952124993C6BCF67D9218D
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
Signing time:             Sun 03 May 2026 02:59:23 +0000
ROA not before:           Sun 03 May 2026 02:54:23 +0000
ROA not after:            Sun 02 May 2027 02:59:23 +0000
asID:                     46049
IP address blocks:        182.255.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:1a:cf:a7:c8:95:71:e0:95:21:24:99:3c:6b:cf:67:d9:21:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: May  3 02:54:23 2026 GMT
            Not After : May  2 02:59:23 2027 GMT
        Subject: CN=9A6D7E731070A9E856AAD9A69A48DDE5AA6DD5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:3d:00:78:00:45:03:51:c5:be:ef:50:5e:
                    a2:77:c1:4a:38:d5:31:2b:3d:7f:0d:b2:0d:dc:9d:
                    44:45:43:57:73:fb:13:1e:5c:d6:f3:39:b5:7e:8e:
                    ca:82:34:79:a6:f9:c0:35:68:00:8f:de:62:15:91:
                    58:72:d2:32:7c:6f:62:b2:32:b2:d3:ed:ab:e4:b5:
                    12:74:67:e1:81:35:a1:c9:00:f3:78:80:1e:30:da:
                    5a:ce:d5:37:bb:1f:de:3c:2f:a3:4d:d2:1c:65:5b:
                    65:3c:44:80:6e:4a:d7:5d:6d:b3:33:4f:f6:43:f6:
                    c4:fa:37:e4:4f:34:e5:d7:6e:a5:c0:3a:c0:49:ba:
                    d2:c5:df:e6:4a:a5:e8:f3:af:d0:da:04:d0:80:c2:
                    a2:9e:3c:29:15:08:9f:cb:bf:7b:21:b3:c2:48:5f:
                    87:9f:74:f3:64:43:fa:9e:dc:89:f2:cc:73:63:99:
                    19:49:ac:3a:d3:7b:0a:3c:92:04:5f:e4:c8:46:fb:
                    ff:2c:2e:1b:5e:36:00:b1:04:82:c4:20:85:fb:e7:
                    82:f0:b3:df:8a:2c:36:47:83:f3:6b:c8:19:71:ff:
                    37:80:03:65:50:5d:af:4b:58:31:e2:48:8d:eb:ff:
                    c9:73:14:21:6d:be:d0:81:bc:05:c3:a8:28:75:0f:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:7E:73:10:70:A9:E8:56:AA:D9:A6:9A:48:DD:E5:AA:6D:D5:B8
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:2c:86:63:41:68:ba:52:a4:df:80:82:41:05:bf:88:df:b9:
         52:0e:0d:fa:a2:1a:1e:6e:bc:07:1e:79:e7:46:ed:bf:a6:fa:
         47:e7:6d:44:06:07:26:c8:cb:e3:1c:67:b2:fd:9a:f2:b3:b3:
         1a:8a:43:1f:03:c1:ef:5f:22:2a:45:dc:5b:8a:31:5b:da:ec:
         29:6c:a0:32:af:55:89:06:83:81:84:f2:c2:6a:1b:3b:6d:38:
         01:48:11:77:9c:3b:cb:49:a7:9f:f5:6e:15:6d:92:dc:bb:3a:
         b9:f7:f5:af:f9:d0:87:2d:49:b1:8a:4a:65:4c:fd:70:3a:8c:
         29:b3:f6:f3:41:cb:c0:fc:92:10:1f:2f:9d:e0:fa:53:d3:e3:
         6e:f2:19:40:85:84:c9:ed:fa:66:7f:09:bc:fc:57:6a:a1:21:
         a2:ec:32:52:4e:a0:37:ab:cf:5b:f3:90:20:fd:e9:5a:aa:50:
         2e:ee:f2:ad:4c:15:8b:05:b9:15:5d:a7:8b:17:80:65:65:e3:
         40:1a:42:5d:e9:fd:97:9a:f1:d9:8f:a6:f3:86:e6:47:52:5a:
         90:40:1a:3f:86:5b:5d:54:25:3c:8d:66:71:b0:ca:fa:c0:7b:
         9c:ca:37:00:6f:69:96:cf:95:98:6d:b2:97:d9:73:49:e6:35:
         85:cd:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:35 2026 by rpki-client