Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          vL84NHT9sBntLdBIflCRLCGX23FgkMfHfpfueFsiLrg=
Subject key identifier:   58:F3:AE:FB:BC:C0:C0:39:2A:BA:44:9C:44:13:83:1E:D0:CE:88:F1
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       708D5D235CA119C4354FF27900803B0825D935D6
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
Signing time:             Sun 03 May 2026 03:13:53 +0000
ROA not before:           Sun 03 May 2026 03:08:53 +0000
ROA not after:            Sun 02 May 2027 03:13:53 +0000
asID:                     45722
IP address blocks:        180.178.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8d:5d:23:5c:a1:19:c4:35:4f:f2:79:00:80:3b:08:25:d9:35:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May  3 03:08:53 2026 GMT
            Not After : May  2 03:13:53 2027 GMT
        Subject: CN=58F3AEFBBCC0C0392ABA449C4413831ED0CE88F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:be:68:47:4a:44:73:19:2a:b1:51:df:ec:
                    d4:51:f3:54:e9:f8:63:2a:7e:5a:bc:bb:74:e2:b0:
                    70:04:ce:32:8b:c8:3d:4b:88:dc:24:91:bb:ea:d8:
                    c8:11:50:b3:84:69:38:e0:ba:54:fb:fc:47:97:ab:
                    39:f7:09:99:5a:3d:e8:4d:b0:1e:65:36:17:51:f7:
                    dc:ec:08:35:6f:f0:08:d8:4c:8f:39:b9:ca:ac:a9:
                    26:de:87:35:09:9d:f9:54:99:d9:79:7e:d3:d0:13:
                    e1:9a:b8:0d:95:95:cb:bc:03:2e:99:06:0c:2f:b4:
                    0e:57:0d:33:47:d8:11:c8:7a:1e:9c:0a:98:9c:c1:
                    b2:54:eb:a4:5e:57:06:dc:32:1c:a0:91:36:01:66:
                    43:65:a6:10:b9:e6:7f:41:a8:26:6b:19:19:35:89:
                    97:55:0f:99:cd:33:10:76:34:75:cd:6f:b6:25:c3:
                    73:a0:a3:22:0b:3b:24:43:b8:f6:83:19:4a:78:a3:
                    ea:94:42:73:64:72:0c:db:93:22:58:c4:da:48:97:
                    f3:21:6e:fc:cf:cd:ea:c9:71:fe:17:0c:16:e3:9e:
                    3e:9f:e4:62:29:1c:15:eb:ec:57:d4:30:e5:ab:4d:
                    71:90:74:d4:df:a4:d6:45:2d:45:95:b9:5c:e7:ca:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:AE:FB:BC:C0:C0:39:2A:BA:44:9C:44:13:83:1E:D0:CE:88:F1
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:05:ea:66:b2:9d:92:6d:84:26:1e:21:13:c8:57:03:9a:
         ad:b2:da:c6:46:72:29:73:27:dc:1d:17:36:23:ef:e2:89:20:
         73:c7:4d:16:79:1d:32:3f:8a:89:4b:b5:97:5e:d1:1d:05:e7:
         ed:14:c3:0f:43:98:d9:2b:9a:07:83:c6:a3:4c:5e:55:b6:92:
         fe:d4:dc:48:03:c5:85:b8:9f:71:af:89:9e:84:2f:81:a7:6e:
         7d:e2:f4:ee:ee:21:e0:27:6a:9d:26:e7:04:62:7e:d8:42:9e:
         da:f4:f1:46:4f:d6:8b:a6:53:a9:d1:2c:12:6e:63:b7:d1:f6:
         ae:0f:5d:35:64:c1:f9:3b:56:40:78:f5:fd:7f:e9:f9:cf:e9:
         74:e8:b5:a5:52:f5:1a:5d:24:ca:8b:0d:89:1c:45:14:38:87:
         54:16:1c:15:56:32:ae:84:33:29:de:0a:7c:a2:d9:27:e0:bc:
         99:d9:94:93:c2:c6:af:bf:2c:06:88:2d:7f:58:92:5a:6c:1a:
         32:7d:7d:bc:08:00:47:40:d3:91:d9:ea:38:2d:50:71:9d:34:
         84:2d:e1:d0:41:e5:85:47:0c:7c:74:ac:47:f7:42:bf:fd:b2:
         d9:83:d9:4a:a5:c0:6f:f8:ca:3f:5a:c8:c5:e2:83:0e:25:6c:
         9f:e7:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:52 2026 by rpki-client