Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          NVWT14ucQ7dIq22SiHPSunVZu4zoTEVcOwCIXRvC+w4=
Subject key identifier:   FA:67:DE:9A:20:3C:6C:C4:A1:91:F2:DB:C9:0A:19:58:ED:36:9A:54
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       7D51317DFA86FC02ED8B8625100DBE7EF10E1E6E
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
Signing time:             Sun 03 May 2026 03:13:55 +0000
ROA not before:           Sun 03 May 2026 03:08:55 +0000
ROA not after:            Sun 02 May 2027 03:13:55 +0000
asID:                     45722
IP address blocks:        180.178.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:51:31:7d:fa:86:fc:02:ed:8b:86:25:10:0d:be:7e:f1:0e:1e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May  3 03:08:55 2026 GMT
            Not After : May  2 03:13:55 2027 GMT
        Subject: CN=FA67DE9A203C6CC4A191F2DBC90A1958ED369A54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:20:2b:82:1e:c1:81:32:f4:e3:0c:9f:ab:
                    f8:85:73:ac:77:41:66:be:08:48:3c:1c:6f:38:47:
                    24:b9:db:d4:cc:e9:31:a0:d2:69:26:24:4f:84:af:
                    15:70:62:ed:54:4e:87:27:d7:be:7e:a7:98:7c:7b:
                    04:d7:3c:f1:cf:92:ac:46:6f:82:3d:b9:6a:b1:c8:
                    28:22:3f:83:0e:d5:24:cd:a6:81:14:a8:ef:c4:74:
                    c6:7d:6f:d3:65:bd:08:78:38:e5:77:38:23:2f:c6:
                    34:89:73:2c:d7:6b:a0:75:6f:bf:f4:21:73:8e:20:
                    2b:1c:5d:8b:4a:c9:ed:3d:aa:54:44:54:8d:2e:50:
                    c9:c7:0c:b4:01:c5:d0:76:81:4d:97:90:03:ea:11:
                    29:b9:28:bd:ec:fa:61:c4:47:36:f3:b5:15:03:8d:
                    46:32:b0:0a:96:72:d0:a2:3a:f5:94:b9:2f:b7:f0:
                    85:43:26:ae:36:1b:0c:52:66:67:87:40:aa:79:69:
                    de:0d:84:01:87:64:fd:21:a6:15:dc:b4:f5:dd:d7:
                    15:cb:ce:94:60:c8:6f:87:bc:f3:d8:6f:1f:9b:ef:
                    72:dd:c5:ae:1c:6f:e8:68:5c:b2:24:29:d6:49:f0:
                    49:27:dd:3f:2d:9b:a8:d3:2d:2d:ee:46:ec:15:da:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:67:DE:9A:20:3C:6C:C4:A1:91:F2:DB:C9:0A:19:58:ED:36:9A:54
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:36:f4:94:03:a3:01:37:e7:d9:51:ec:73:57:7c:2a:08:a0:
         0a:cc:fd:b3:c3:52:a0:45:22:b5:81:b8:55:fd:e9:ec:b8:fa:
         98:4b:50:6e:57:bd:12:12:91:f0:e8:3c:90:17:b6:86:88:71:
         92:15:40:db:b0:0c:27:b3:77:79:7f:9a:97:a7:26:19:b3:b3:
         d6:10:e5:fb:9e:42:35:d0:f1:15:12:5d:22:b2:c9:69:39:12:
         d8:df:9d:c0:8b:5d:cd:3c:b9:67:f3:db:8a:37:4b:1b:d6:da:
         01:e2:a8:39:c7:0f:ce:49:9e:76:df:3d:f2:06:13:6b:ac:8a:
         27:e7:58:05:40:31:c2:cb:68:1b:0e:b6:8c:87:5b:33:d6:a1:
         01:2f:6f:7b:46:8c:56:d9:b3:76:a8:f0:36:2c:45:50:71:f3:
         b4:4b:96:41:5f:d6:b6:87:fc:08:e4:b5:45:21:44:e0:90:20:
         f9:c0:b3:4e:fa:7e:78:6a:5c:7b:be:0d:16:5a:43:83:02:b7:
         81:77:e3:4a:ce:f2:ac:a2:25:67:de:8e:49:4f:fb:41:ad:7d:
         94:81:da:4c:d5:a5:27:50:15:89:c8:d0:77:f1:7b:37:b7:32:
         53:e4:fe:f8:cf:7f:51:4d:85:57:3e:ed:f5:2b:85:cf:47:c6:
         dd:42:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:08 2026 by rpki-client