Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa
File:                     AS38755.roa (raw, json)
Hash identifier:          rrRHicGoTqQQ5KVonJVs0FP/MR7/6NaqqXA8D/2TInc=
Subject key identifier:   E8:CB:0E:29:48:81:A3:30:03:6A:1E:F3:3D:AA:22:0E:72:80:B1:0B
Certificate issuer:       /CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
Certificate serial:       3EBE2B9B9C0CAA771757905C95EF36301EA61DE5
Authority key identifier: 1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa
Signing time:             Sun 03 May 2026 03:14:40 +0000
ROA not before:           Sun 03 May 2026 03:09:40 +0000
ROA not after:            Sun 02 May 2027 03:14:40 +0000
asID:                     38755
IP address blocks:        182.23.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl
                          rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:2b:9b:9c:0c:aa:77:17:57:90:5c:95:ef:36:30:1e:a6:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD138814ED6ED10A74AEDE620ECC6CB414D8D49
        Validity
            Not Before: May  3 03:09:40 2026 GMT
            Not After : May  2 03:14:40 2027 GMT
        Subject: CN=E8CB0E294881A330036A1EF33DAA220E7280B10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:2c:e1:ac:a5:05:a2:04:0b:f1:d6:93:05:
                    a4:f7:11:b0:7d:a0:d0:49:a3:e2:06:ec:f5:41:41:
                    58:06:e1:f6:19:c7:51:c7:8c:6f:f0:50:67:c1:66:
                    33:af:16:29:10:5a:52:f7:1f:65:62:0b:37:ca:c4:
                    48:d5:f3:cf:e1:ed:90:27:d1:7b:97:38:6e:0a:88:
                    0d:6f:24:2b:c1:04:7c:37:cb:b7:ae:75:8e:b6:64:
                    73:dd:7e:2b:8d:ce:a1:72:43:d4:83:43:b7:cb:be:
                    ab:dd:4d:1c:b9:29:46:2c:f9:6b:f7:79:53:8c:cc:
                    56:1b:b4:b0:35:84:09:1d:f9:2c:81:b7:59:a6:3f:
                    f4:fa:26:cc:40:6f:1f:76:58:12:17:b6:7f:6a:15:
                    ac:a5:18:9e:2f:b2:db:8f:f7:cc:ee:71:22:e0:b2:
                    c4:5a:03:13:af:17:23:86:75:77:4b:58:6e:77:93:
                    d3:cf:ea:2f:98:5b:2d:23:13:75:2a:a9:b8:57:ab:
                    07:9f:ae:b9:6b:a1:89:3b:4a:4e:25:5e:d7:36:af:
                    bb:b3:fd:f7:09:75:9c:d3:b8:4f:a6:e4:ad:ba:b1:
                    45:ba:d1:1a:ba:f9:f9:1d:b1:bc:d4:f9:06:cf:d3:
                    56:f6:40:d0:a0:f9:8d:5b:bf:45:14:9f:83:81:e5:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CB:0E:29:48:81:A3:30:03:6A:1E:F3:3D:AA:22:0E:72:80:B1:0B
            X509v3 Authority Key Identifier:
                keyid:1F:D1:38:81:4E:D6:ED:10:A7:4A:ED:E6:20:EC:C6:CB:41:4D:8D:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1FD138814ED6ED10A74AEDE620ECC6CB414D8D49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS38755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b8:8c:7e:81:1c:c0:aa:0a:02:86:0a:bf:83:48:b7:f8:6d:
         80:45:44:e3:e1:96:7d:98:8e:94:97:fc:36:0b:ea:25:83:09:
         93:a9:85:81:45:fe:49:67:ea:28:47:79:56:12:18:a4:21:57:
         1e:73:0d:b4:c9:35:5a:d8:60:80:b1:8d:ef:10:f8:db:79:7a:
         b6:e1:f8:60:58:f2:17:f8:73:97:ec:d7:25:83:de:6c:10:cb:
         7a:2c:c5:51:24:ba:74:b2:40:88:8d:aa:be:32:d1:25:0b:a2:
         e5:5a:5b:45:40:74:c3:ad:7f:02:ea:a9:0b:08:ea:a9:43:be:
         c6:e6:32:4d:77:20:7d:94:a9:14:e6:4c:19:49:8f:32:73:54:
         f4:f9:33:be:86:9a:b2:7a:c5:64:0a:71:03:66:28:d6:a0:47:
         53:e5:fc:05:db:5f:00:1d:71:91:11:d0:03:70:b4:9a:3a:1d:
         11:f0:87:b4:67:af:5e:da:59:54:91:7a:f3:87:17:34:2c:e1:
         53:f1:a8:52:e7:05:68:33:62:9b:09:c3:ea:15:ab:10:8f:c6:
         0c:19:a3:f7:18:fc:22:69:08:3a:37:4f:f1:78:c7:40:79:a5:
         00:d2:8a:96:c0:19:29:40:aa:8d:63:9a:71:a2:41:fb:d3:72:
         ff:24:6c:69
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUPr4rm5wMqncXV5Bcle82MB6mHeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZEMTM4ODE0RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0
MTREOEQ0OTAeFw0yNjA1MDMwMzA5NDBaFw0yNzA1MDIwMzE0NDBaMDMxMTAvBgNV
BAMTKEU4Q0IwRTI5NDg4MUEzMzAwMzZBMUVGMzNEQUEyMjBFNzI4MEIxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrSzhrKUFogQL8daTBaT3EbB9
oNBJo+IG7PVBQVgG4fYZx1HHjG/wUGfBZjOvFikQWlL3H2ViCzfKxEjV88/h7ZAn
0XuXOG4KiA1vJCvBBHw3y7eudY62ZHPdfiuNzqFyQ9SDQ7fLvqvdTRy5KUYs+Wv3
eVOMzFYbtLA1hAkd+SyBt1mmP/T6JsxAbx92WBIXtn9qFaylGJ4vstuP98zucSLg
ssRaAxOvFyOGdXdLWG53k9PP6i+YWy0jE3UqqbhXqwefrrlroYk7Sk4lXtc2r7uz
/fcJdZzTuE+m5K26sUW60Rq6+fkdsbzU+QbP01b2QNCg+Y1bv0UUn4OB5ZnLAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQU6MsOKUiBozADah7zPaoiDnKAsQswHwYDVR0j
BBgwFoAUH9E4gU7W7RCnSu3mIOzGy0FNjUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTg3MzQ5ZmItNDY1ZS00ZThiLWE5NzQtOTBlOTM5YmNiMGZiLzAvMUZEMTM4ODE0
RUQ2RUQxMEE3NEFFREU2MjBFQ0M2Q0I0MTREOEQ0OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRkQxMzg4MTRFRDZFRDEwQTc0QUVERTYyMEVDQzZDQjQxNEQ4
RDQ5LmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBr
aS1yc3luYy5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05
MGU5MzliY2IwZmIvMC9BUzM4NzU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtheqMA0GCSqGSIb3DQEB
CwUAA4IBAQAouIx+gRzAqgoChgq/g0i3+G2ARUTj4ZZ9mI6Ul/w2C+olgwmTqYWB
Rf5JZ+ooR3lWEhikIVcecw20yTVa2GCAsY3vEPjbeXq24fhgWPIX+HOX7Nclg95s
EMt6LMVRJLp0skCIjaq+MtElC6LlWltFQHTDrX8C6qkLCOqpQ77G5jJNdyB9lKkU
5kwZSY8yc1T0+TO+hpqyesVkCnEDZijWoEdT5fwF218AHXGREdADcLSaOh0R8Ie0
Z69e2llUkXrzhxc0LOFT8ahS5wVoM2KbCcPqFasQj8YMGaP3GPwiaQg6N0/xeMdA
eaUA0oqWwBkpQKqNY5pxokH703L/JGxp
-----END CERTIFICATE-----
Generated at Tue May 12 23:00:49 2026 by rpki-client