Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa
File:                     AS138885.roa (raw, json)
Hash identifier:          MXHah2Crj721VSI4LYqxgOTDqWKKFzAoSwM3O6/hIWs=
Subject key identifier:   E8:B7:22:28:BF:ED:85:BA:61:3F:09:5F:D4:C8:BB:FB:61:72:F5:E6
Certificate issuer:       /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial:       3974D9D137B6042D635F3BF14202259778CA44A5
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa
Signing time:             Sun 03 May 2026 03:14:39 +0000
ROA not before:           Sun 03 May 2026 03:09:39 +0000
ROA not after:            Sun 02 May 2027 03:14:39 +0000
asID:                     138885
IP address blocks:        182.23.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
                          rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:d9:d1:37:b6:04:2d:63:5f:3b:f1:42:02:25:97:78:ca:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
        Validity
            Not Before: May  3 03:09:39 2026 GMT
            Not After : May  2 03:14:39 2027 GMT
        Subject: CN=E8B72228BFED85BA613F095FD4C8BBFB6172F5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:37:36:0b:fc:7c:4c:4d:5a:65:d0:90:2c:d3:
                    fa:d0:4b:ce:24:65:16:46:8b:da:cf:40:45:e7:fc:
                    e0:a3:2e:f7:78:e9:c0:6a:5f:e8:fc:dd:0b:85:94:
                    24:ed:f3:9d:42:04:fe:98:59:f2:71:34:e0:96:5e:
                    4f:5b:d3:61:76:b6:d7:55:55:0e:65:d8:e6:b1:cb:
                    65:7d:af:91:ff:bd:52:be:8a:90:61:f1:27:85:06:
                    87:16:68:45:98:0f:ec:fa:e7:05:17:7e:82:a0:90:
                    c9:b4:d5:54:6c:c1:dc:8f:30:aa:b5:8a:e1:0e:2d:
                    b4:58:c4:ef:fd:e4:5a:4f:41:c4:d0:00:2f:b8:13:
                    cd:32:66:c9:c2:ca:58:ac:43:7a:7c:b2:c3:7d:eb:
                    0b:30:ae:4e:54:7b:dc:4a:07:f1:a8:d4:b1:cb:01:
                    61:1b:54:c6:b3:6c:be:0b:84:e9:61:de:d7:16:42:
                    13:ff:5c:38:b3:4d:1a:c4:cd:31:ad:4a:a6:08:b8:
                    18:57:55:5d:0b:e5:4b:35:c6:54:ee:10:0f:5a:53:
                    79:ad:56:9b:50:54:4b:4b:b2:fd:71:40:4d:76:32:
                    fc:0b:2e:ef:f5:0a:bf:89:91:59:e6:00:52:a0:bf:
                    48:ca:25:44:3a:b5:e5:4d:10:1c:80:3c:b9:9e:e3:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B7:22:28:BF:ED:85:BA:61:3F:09:5F:D4:C8:BB:FB:61:72:F5:E6
            X509v3 Authority Key Identifier:
                keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS138885.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:20:93:26:dd:7c:0b:8a:d8:56:1d:f1:3b:12:f9:47:70:
         0b:75:5d:fc:27:78:3c:07:b9:99:4d:be:b4:5b:d7:c3:93:fb:
         16:c3:2a:34:70:f8:7b:18:22:29:9c:87:bf:16:03:d8:59:a5:
         69:0c:3f:d5:ef:50:22:9e:f6:09:fc:81:95:1c:85:8f:d2:4e:
         64:9e:23:ca:1e:28:fe:0c:18:82:34:14:ce:ce:5d:64:fb:fc:
         e6:89:b9:aa:d1:76:e1:ef:4b:66:87:11:88:b8:5f:dc:2f:3b:
         d2:ab:58:11:10:a2:4a:41:71:16:64:a9:4e:2f:60:18:be:62:
         59:e3:d4:05:00:2b:c9:ba:ec:19:c4:1c:84:0b:f9:e9:7b:3a:
         fd:b5:c6:f0:45:ba:77:f1:ba:03:ee:fe:1e:c9:26:fe:28:63:
         8d:30:f0:eb:f9:b8:0b:3d:c9:ce:04:db:1c:39:df:7c:98:4d:
         fb:9a:ec:e5:7c:ad:26:a6:40:54:40:d0:70:c7:84:56:99:37:
         c8:78:57:be:65:63:76:d0:c9:a3:58:ec:ff:2c:b9:ed:f3:1b:
         51:73:a8:dd:47:46:49:b6:d8:c0:64:6b:1e:1f:0b:8a:69:4c:
         6e:d9:e3:7b:6c:2b:40:14:e2:96:87:59:b9:eb:41:21:86:b9:
         00:30:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:48 2026 by rpki-client