Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          1gobVsaSxO0dmgTm03advWFjAo3mIuYtXLDwQhr/ok0=
Subject key identifier:   98:16:3B:6E:E1:6F:54:7E:FB:D7:F7:34:7D:20:ED:22:74:D8:A6:2A
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       572AA9079D228100D3184C387E91CA35400285AB
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa
Signing time:             Fri 17 Apr 2026 20:19:14 +0000
ROA not before:           Fri 17 Apr 2026 20:14:14 +0000
ROA not after:            Fri 16 Apr 2027 20:19:14 +0000
asID:                     45298
IP address blocks:        182.16.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 23:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2a:a9:07:9d:22:81:00:d3:18:4c:38:7e:91:ca:35:40:02:85:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Apr 17 20:14:14 2026 GMT
            Not After : Apr 16 20:19:14 2027 GMT
        Subject: CN=98163B6EE16F547EFBD7F7347D20ED2274D8A62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:c1:2e:c9:45:6a:fb:69:a9:f2:bb:9d:65:
                    31:b7:29:46:b3:f3:80:5c:3e:f1:2e:3d:d9:cf:36:
                    eb:7e:3c:91:b2:bf:b0:3f:1e:bd:c2:8f:10:73:8d:
                    7b:fe:01:39:d4:2a:e6:93:6e:4a:f0:3f:78:02:d9:
                    86:05:1b:86:b1:45:01:0a:5b:bc:ef:d5:05:d5:54:
                    22:e1:1d:af:f4:e6:c9:29:ad:b0:01:a8:b0:8a:8f:
                    57:c5:71:7c:11:dc:c1:15:db:d4:8f:ea:08:a9:ef:
                    3b:17:24:86:0e:28:e7:4f:6f:8a:b5:89:bd:da:11:
                    1e:d0:65:8b:2b:fc:d2:a6:bc:46:93:ba:18:91:71:
                    23:e3:3f:58:88:54:ef:bc:d7:7a:6e:17:a4:e6:14:
                    f4:d8:2b:db:c0:e6:5a:c8:36:07:50:ce:39:8a:fb:
                    df:32:c8:27:18:7d:92:1f:95:3c:9b:1c:d2:d1:f5:
                    b6:f4:8f:24:e6:7e:33:80:83:0e:6b:12:ae:ce:72:
                    1b:c5:e7:0c:ca:48:d7:78:57:c1:1d:0f:73:ec:ff:
                    d2:25:c8:a5:23:3c:8a:3e:c4:9b:24:d7:60:52:ac:
                    8a:45:89:d6:fb:0a:ab:2e:fe:33:2e:bf:d3:c6:01:
                    51:0e:cf:ca:e5:40:ba:f1:a3:50:b1:82:80:db:0b:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:3B:6E:E1:6F:54:7E:FB:D7:F7:34:7D:20:ED:22:74:D8:A6:2A
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6b:5e:45:5e:e1:ce:3a:83:87:02:23:b4:92:80:59:d3:fa:
         78:23:42:c8:04:7f:28:07:be:a1:a8:5c:70:c8:91:f8:3c:94:
         f5:fd:35:bf:9d:69:18:cd:64:25:11:34:36:d2:a8:ff:fa:d9:
         67:e3:4c:dd:94:96:a7:53:66:aa:52:06:4f:3f:6e:88:0a:d9:
         b4:f5:cd:35:f3:eb:02:da:c3:19:1f:70:22:18:ec:dd:fe:68:
         8a:3e:b7:db:7e:26:99:f8:ac:fc:bb:44:1d:fd:56:2e:b8:4c:
         34:47:1e:c1:ce:8b:cf:3b:d2:3b:de:8c:81:a5:eb:77:8d:ba:
         dc:86:47:70:5c:ce:8e:06:64:03:fc:3b:78:f8:d5:f2:85:19:
         9a:f5:e4:ab:fc:b5:ba:10:ae:a6:8c:cf:bb:ab:1b:56:45:a0:
         45:25:a7:5e:ac:56:09:8d:27:f5:6a:0d:0b:e4:d6:70:92:84:
         80:0b:90:f7:15:05:dd:e3:e0:ed:fe:ae:c5:d7:fc:f8:6e:d9:
         fb:98:63:fb:26:0e:50:d2:a4:6d:ef:4f:4a:d3:e4:69:ae:4a:
         35:6a:5c:09:87:06:b2:f4:23:af:c3:05:45:83:05:7f:47:b8:
         9f:fc:f9:dd:77:c0:e5:2d:2e:dd:f4:cd:b6:ec:5c:f2:e7:80:
         d0:3a:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:48:46 2026 by rpki-client