Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e362e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          wkCrLAzIOFiqo3nrGvWo+81ok/jPKjY3CFZlglcyZZg=
Subject key identifier:   46:B8:93:40:BA:4B:5D:70:FF:18:69:48:98:E9:A5:E3:BF:6A:CC:14
Certificate issuer:       /CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
Certificate serial:       7287CAC0B06939AF618B24ADE4E94C46601F67EE
Authority key identifier: F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
Signing time:             Sun 03 May 2026 02:59:20 +0000
ROA not before:           Sun 03 May 2026 02:54:20 +0000
ROA not after:            Sun 02 May 2027 02:59:20 +0000
asID:                     46049
IP address blocks:        182.255.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl
                          rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:87:ca:c0:b0:69:39:af:61:8b:24:ad:e4:e9:4c:46:60:1f:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05
        Validity
            Not Before: May  3 02:54:20 2026 GMT
            Not After : May  2 02:59:20 2027 GMT
        Subject: CN=46B89340BA4B5D70FF18694898E9A5E3BF6ACC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:53:d2:62:bb:63:3f:1f:b2:5d:89:1c:9d:
                    81:ee:b1:f9:bc:b9:be:47:d0:a0:c3:ee:c8:51:08:
                    4d:44:b2:13:7d:c7:a8:15:01:1a:ef:eb:5f:6d:ea:
                    0a:fc:90:4d:d4:b3:85:a2:4b:2a:a6:ec:2f:b7:88:
                    c6:ef:61:95:2d:57:5a:8a:f4:97:a2:b1:af:ef:e9:
                    d6:f8:91:6b:69:a3:85:51:e0:15:22:47:6a:d0:b4:
                    e8:1c:94:e5:18:bd:10:d2:7f:4c:e0:c5:a3:96:ab:
                    4d:f2:ea:22:a6:06:a3:f1:26:ea:d9:e8:64:54:2d:
                    9e:d0:02:b7:d9:e2:a2:cb:e0:69:f7:c4:7c:f6:41:
                    44:db:61:33:9d:07:60:6d:3e:c5:4b:d7:3e:ba:87:
                    9f:ed:11:bd:ed:39:5a:19:b9:36:4a:b0:9b:8d:86:
                    90:45:3a:d8:31:49:61:f1:bb:34:92:6a:e7:d5:91:
                    84:5b:c2:77:04:28:f9:ce:2d:4a:4e:ce:bd:e6:c1:
                    8b:db:85:b9:12:0b:b5:85:18:1f:35:49:ac:0f:8c:
                    dd:88:86:25:49:94:c9:e5:89:b0:63:e7:a9:e1:3c:
                    82:d4:f3:ea:6a:8f:fa:23:3a:8e:31:8a:08:48:75:
                    13:54:3b:15:cb:a7:8b:3a:da:34:ee:0e:c1:7f:93:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:93:40:BA:4B:5D:70:FF:18:69:48:98:E9:A5:E3:BF:6A:CC:14
            X509v3 Authority Key Identifier:
                keyid:F1:6B:E3:A9:B7:66:75:8F:C8:A8:BC:C6:C3:9C:03:0D:AC:AC:4B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F16BE3A9B766758FC8A8BCC6C39C030DACAC4B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:63:5d:42:ec:42:cb:0a:e7:b6:be:d0:66:db:8e:85:77:3e:
         30:5f:87:73:b7:28:d0:1d:51:63:ab:64:cc:7e:27:87:3d:62:
         57:3d:bd:e0:e0:28:b3:dd:0d:9d:66:1a:52:f7:42:78:ea:5f:
         e1:f0:77:a4:e1:eb:c6:1d:b6:22:21:f4:aa:b4:24:c4:c7:26:
         7d:11:6a:bd:ff:53:d4:73:61:57:17:dc:4a:32:29:25:ac:c6:
         de:34:e0:c0:b9:46:e3:f9:d4:53:94:55:e5:d5:66:92:4f:59:
         6a:6c:06:99:cd:5b:10:20:b0:f5:8f:fe:5c:46:06:d7:28:2d:
         3f:5b:57:b4:ec:b3:fe:64:57:a1:31:8c:18:3a:63:0d:bc:e0:
         98:87:81:6b:9f:0d:96:b8:a2:f2:a3:c2:d2:ad:82:46:f3:ba:
         fa:55:b4:d3:31:14:78:e4:5a:d1:a5:35:e7:ec:d6:9d:45:6d:
         b1:bc:19:dc:3e:c7:53:96:b4:db:5e:3d:27:ab:e1:82:2d:eb:
         6e:ec:56:a1:00:fe:8e:61:50:0f:ba:0a:58:d5:ce:82:a6:de:
         16:34:31:6b:65:92:e2:ca:d5:1d:66:d3:6b:25:ca:d0:9f:0f:
         37:fd:1f:70:e3:4a:a2:cc:54:63:49:11:b4:49:18:12:fe:fb:
         53:d9:5e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:01 2026 by rpki-client