Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          N6pzwLsiBlR6wqRJD6D9fkvMPk3uOH5gFPON6WGlnyk=
Subject key identifier:   B6:3F:80:4A:DF:FD:42:C4:10:B5:69:83:09:A4:5F:7D:06:B8:B8:BD
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       55029CC654A33BEBA6CD7CFAFDDBC51DAEF3420B
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
Signing time:             Sun 03 May 2026 03:13:54 +0000
ROA not before:           Sun 03 May 2026 03:08:54 +0000
ROA not after:            Sun 02 May 2027 03:13:54 +0000
asID:                     45722
IP address blocks:        180.178.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:02:9c:c6:54:a3:3b:eb:a6:cd:7c:fa:fd:db:c5:1d:ae:f3:42:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May  3 03:08:54 2026 GMT
            Not After : May  2 03:13:54 2027 GMT
        Subject: CN=B63F804ADFFD42C410B5698309A45F7D06B8B8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:52:f8:66:2a:44:3e:44:d7:32:97:ca:5f:
                    6e:a6:54:75:d7:10:9b:33:0a:2e:a0:b2:88:5e:83:
                    df:2a:25:e1:56:9a:f2:57:21:c7:18:84:36:43:49:
                    24:78:ca:ad:de:55:18:c2:cd:20:4b:cb:c6:3a:5d:
                    7a:8c:38:c0:8e:f6:48:a2:4c:51:f1:62:32:0d:fb:
                    d8:a8:84:fe:fc:61:1c:8b:d5:95:69:9f:aa:59:d4:
                    30:b5:94:61:29:df:1d:1a:75:af:86:ab:c7:b3:48:
                    7a:7e:fa:e6:a0:00:36:ac:c1:80:ef:de:a8:19:9f:
                    99:97:64:fa:ab:4e:74:fb:58:a7:36:64:59:bd:c1:
                    d4:67:f1:56:db:86:c3:4d:96:47:4e:4c:3c:1c:13:
                    31:c4:32:af:e9:dd:09:52:01:8b:62:dd:c1:0b:87:
                    de:49:4c:b8:91:67:70:15:8a:38:80:f8:86:94:52:
                    a7:5a:97:da:80:01:1f:c2:ce:a8:a0:cf:5e:64:c2:
                    63:fc:1b:62:19:97:60:4f:4c:5d:8e:1f:df:22:fa:
                    0c:37:ae:ec:9c:b9:f1:ab:1e:75:de:af:74:ed:08:
                    11:dd:b2:8c:09:91:90:7e:c1:ff:2f:12:27:0e:b4:
                    00:f0:da:32:50:f7:54:98:d0:89:7f:69:1c:96:b5:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:80:4A:DF:FD:42:C4:10:B5:69:83:09:A4:5F:7D:06:B8:B8:BD
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:9e:d1:49:e6:06:0f:ae:d9:10:87:c3:bd:72:20:57:b5:
         33:50:fe:d7:fb:6b:b2:9f:9a:62:0d:9f:b8:3b:d1:a3:18:30:
         63:d5:e1:81:56:3c:52:01:5e:db:5e:75:c3:d4:43:b8:c5:a6:
         e8:a5:b3:ec:f9:a2:f5:58:bc:55:42:ca:e5:94:62:42:d9:dc:
         20:d6:b6:bc:94:ae:34:03:c8:f7:2d:f3:09:4d:61:36:cc:51:
         df:eb:95:f1:6c:0d:64:b4:ba:74:c4:7a:69:fb:15:2e:3b:ce:
         45:c6:c8:df:13:67:43:ab:66:2a:ff:ae:c0:84:76:5d:ed:1b:
         16:7f:b7:b6:9d:75:49:1d:fe:4c:d1:5c:1a:3e:09:e7:6a:5a:
         1c:65:d9:cf:37:c4:12:ef:49:14:5e:aa:19:29:5b:93:f0:fc:
         71:cd:13:5e:20:63:a6:74:91:48:96:c3:d9:e3:7a:1d:7a:73:
         4d:50:78:0a:9f:e7:f3:4c:7f:8e:8a:2d:93:7c:1f:6f:77:99:
         98:84:dc:0b:b5:55:a4:7d:f3:3c:48:ee:e0:41:af:a8:27:24:
         14:0f:0a:6b:29:d8:43:1c:a3:d6:76:cc:ca:0d:e1:7f:48:e4:
         e2:d3:62:cc:3f:b9:ea:f2:a7:e0:a6:a3:e0:21:ca:e9:b8:1d:
         bc:2d:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:58 2026 by rpki-client