Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e312e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=
Subject key identifier:   60:42:3C:1B:56:BE:5E:83:6F:25:66:CE:C4:C0:ED:67:03:C6:7B:5B
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       75A3C73EE3B1B158A74D0731332E916A7DAC2B2E
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 19 Jun 2025 07:01:33 +0000
ROA not before:           Thu 19 Jun 2025 06:56:33 +0000
ROA not after:            Thu 18 Jun 2026 07:01:33 +0000
asID:                     46049
IP address blocks:        182.255.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 19:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a3:c7:3e:e3:b1:b1:58:a7:4d:07:31:33:2e:91:6a:7d:ac:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 19 06:56:33 2025 GMT
            Not After : Jun 18 07:01:33 2026 GMT
        Subject: CN=60423C1B56BE5E836F2566CEC4C0ED6703C67B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:f1:3b:6f:e8:61:fa:c5:e4:28:5b:10:e8:
                    6a:d9:7b:41:69:c9:fb:59:a2:64:65:91:32:26:0f:
                    e7:c8:2e:9e:7e:e7:b8:a7:07:f4:ef:c0:41:8f:4f:
                    c2:4e:3c:07:2a:a7:24:bb:3d:bf:38:70:d4:10:88:
                    21:07:54:d8:a0:fb:b2:53:ec:8b:ad:13:93:03:58:
                    e9:b7:6a:e3:c8:bc:b6:44:b9:f1:3b:8d:11:f1:c5:
                    e5:c7:81:c9:43:82:fe:47:aa:2d:8a:97:87:82:4d:
                    3b:60:a3:78:52:e6:65:2a:ad:9b:e0:ae:92:e9:74:
                    b4:78:5e:7b:4e:6c:8a:7f:23:d6:f6:d4:59:73:3f:
                    3d:30:e0:b2:86:77:ac:b5:e4:7b:95:dc:8c:55:66:
                    61:35:c2:28:d8:73:8a:d1:ae:d6:cb:8a:26:c3:76:
                    7d:c8:39:4a:40:8c:ee:51:f6:2a:50:c4:6a:da:bf:
                    05:3e:eb:ee:b5:b6:56:cc:3f:d6:73:35:89:a9:e9:
                    3a:21:e8:e2:be:5c:e5:cc:52:50:85:68:cb:29:6f:
                    1c:bf:37:25:b6:f9:30:10:ec:3b:1f:f4:05:0e:21:
                    ba:07:88:1a:6f:d0:49:bb:af:54:64:f8:9c:c1:a1:
                    d2:0f:ce:0d:26:e3:83:15:4e:c4:f9:c3:49:59:42:
                    28:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:3C:1B:56:BE:5E:83:6F:25:66:CE:C4:C0:ED:67:03:C6:7B:5B
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e312e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:94:a5:11:2c:86:f5:eb:4e:13:7c:98:1a:b9:1a:72:2a:
         7b:d6:75:1b:9b:1d:ef:2a:37:67:88:7b:02:7a:34:79:2f:f2:
         86:71:e8:5f:db:c1:01:00:37:e2:76:7c:8c:ea:1a:40:73:2c:
         87:67:68:ce:05:ce:b8:72:1d:5a:b6:b8:5f:ff:43:a4:3b:00:
         f8:8f:ce:16:43:a6:0e:76:26:9d:a3:9b:23:00:c5:2d:5d:a7:
         d2:ff:85:a5:5a:fa:64:64:d8:08:96:9c:97:b2:0b:90:98:fb:
         40:97:fc:b3:c9:be:37:5a:1e:d0:2d:ec:9e:cf:a3:8f:2f:76:
         42:a3:ec:55:db:0b:68:c3:7b:e1:2c:6a:79:64:5e:0d:80:67:
         da:eb:b8:8e:af:2a:b6:47:2f:db:3d:17:d1:a4:4d:09:9d:31:
         fa:cc:87:3c:ae:f5:2b:0e:18:dd:4f:d6:c9:72:88:93:88:cc:
         4a:5a:de:3d:e5:f1:b8:d0:a0:3c:b2:d6:c1:12:f1:6f:9f:fd:
         a9:51:3e:8a:0c:cf:a6:fa:0a:78:ff:fe:0e:c3:be:61:b5:87:
         5b:55:07:6b:6a:c9:9c:ce:a6:b9:81:de:d7:fc:10:86:14:63:
         47:37:56:03:6f:ce:fe:cf:7f:b4:19:73:ae:25:6b:eb:d9:82:
         36:48:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:17:45 2025 by rpki-client