Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa
File:                     3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (raw, json)
Hash identifier:          EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=
Subject key identifier:   80:2C:7E:AC:82:57:1A:81:6E:6A:90:EF:13:28:0C:DE:A5:42:11:2C
Certificate issuer:       /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial:       4150E38D88835A6BF146EF9FAAF23496EF5ABAE3
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa
Signing time:             Sun 03 May 2026 03:13:24 +0000
ROA not before:           Sun 03 May 2026 03:08:24 +0000
ROA not after:            Sun 02 May 2027 03:13:24 +0000
asID:                     45786
IP address blocks:        182.50.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
                          rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:50:e3:8d:88:83:5a:6b:f1:46:ef:9f:aa:f2:34:96:ef:5a:ba:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
        Validity
            Not Before: May  3 03:08:24 2026 GMT
            Not After : May  2 03:13:24 2027 GMT
        Subject: CN=802C7EAC82571A816E6A90EF13280CDEA542112C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:be:2f:8b:b2:31:3f:8c:2b:1a:28:a4:16:
                    08:63:70:5e:01:da:2f:b9:b4:5b:bb:2e:ea:f4:42:
                    a5:d7:cc:50:57:4d:3e:ef:44:8f:f7:df:5f:b8:54:
                    27:c3:b3:8c:17:19:5f:2c:70:07:6f:5a:20:40:76:
                    f9:ea:5c:89:aa:c1:ea:d8:07:10:a6:e7:e2:82:5e:
                    82:45:5d:20:14:6b:f5:e4:90:2d:a5:98:41:56:f1:
                    26:7e:cc:2b:8f:9c:db:0a:c8:2c:a8:97:fa:e6:64:
                    b4:a7:cf:09:3d:78:4c:4d:53:37:e8:f5:5e:4c:e6:
                    a4:6b:d2:7f:27:25:51:2f:a5:e4:60:49:6e:9d:30:
                    2e:94:01:5f:26:01:5a:27:bf:71:3f:33:c4:41:a7:
                    d1:1e:46:bc:7e:ff:21:5d:76:be:ce:b3:a8:a1:dc:
                    07:24:16:63:81:80:3b:a8:65:f2:dd:ec:b1:51:b5:
                    3b:bd:4b:c8:56:58:07:3e:52:ad:1c:39:67:de:48:
                    55:76:9b:e5:63:ef:fa:5f:d7:49:d5:11:42:88:a0:
                    92:bc:5a:68:9c:cd:2d:e9:a8:3c:eb:57:68:d4:0f:
                    72:ca:79:cc:bf:ac:60:d6:73:07:30:0e:20:84:bd:
                    ec:75:e7:47:65:6a:89:98:af:66:63:8e:35:04:40:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2C:7E:AC:82:57:1A:81:6E:6A:90:EF:13:28:0C:DE:A5:42:11:2C
            X509v3 Authority Key Identifier:
                keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3138322e35302e3234302e302f32302d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:8e:e7:09:68:21:5e:6f:4e:19:fc:18:1f:13:b1:dd:4a:
         4e:9b:05:2b:b3:2b:54:ce:a8:5d:fb:22:cf:be:77:a9:06:9b:
         0c:ee:ab:cc:26:80:b4:53:bf:83:8a:07:d0:8d:8e:8f:c6:55:
         79:ae:fd:d5:17:7c:59:5b:d2:3a:0b:91:74:a4:08:da:00:46:
         b6:72:5e:e9:18:68:37:8d:33:2f:cc:8a:35:1f:3f:1d:9c:d5:
         c9:b0:61:31:8e:cb:e3:05:bd:94:f0:9a:b8:9c:d3:93:53:29:
         ca:44:34:bf:3d:30:88:03:b1:d1:fc:8d:2b:2f:47:91:d8:76:
         90:88:03:3a:d4:6f:b8:05:93:b0:6f:aa:f2:b3:df:25:4f:b6:
         3c:f0:43:e8:8e:c3:0a:3c:29:88:83:bf:05:b6:7f:9f:c1:dd:
         ee:bb:4d:31:46:70:fd:b3:6b:bf:37:a7:ae:eb:e9:cc:98:6b:
         f5:07:bb:0f:31:3b:b0:d4:20:03:65:60:8f:a7:9e:82:67:58:
         16:a2:67:33:48:43:3f:72:f3:75:30:4e:cb:b5:a6:83:dc:bc:
         8c:2c:39:e4:34:6b:11:d8:14:d8:0a:71:e8:ec:02:5f:ea:21:
         a4:b9:47:20:cb:e5:09:46:4c:2b:ae:94:5d:a1:81:7d:17:68:
         47:b2:42:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:16 2026 by rpki-client