Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
File:                     3138322e3235352e342e302f32322d3232203d3e203436303439.roa (raw, json)
Hash identifier:          WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=
Subject key identifier:   D7:CF:1B:CF:D7:5F:E0:29:01:7B:6A:8F:BE:7C:55:FF:1B:B7:02:70
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       653DAB7638457352199C141C281D3849839DE612
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa
Signing time:             Thu 19 Jun 2025 08:02:21 +0000
ROA not before:           Thu 19 Jun 2025 07:57:21 +0000
ROA not after:            Thu 18 Jun 2026 08:02:21 +0000
asID:                     46049
IP address blocks:        182.255.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 16:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3d:ab:76:38:45:73:52:19:9c:14:1c:28:1d:38:49:83:9d:e6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 19 07:57:21 2025 GMT
            Not After : Jun 18 08:02:21 2026 GMT
        Subject: CN=D7CF1BCFD75FE029017B6A8FBE7C55FF1BB70270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:cf:02:28:cf:ba:5a:11:c8:39:11:b9:38:
                    09:3c:f8:39:b5:b0:6c:ea:bb:66:62:d4:41:ed:25:
                    2e:da:ca:54:3b:89:75:62:90:86:a9:8e:30:18:a0:
                    ff:1b:43:f1:68:cb:1e:82:73:04:c1:39:31:1e:43:
                    4c:dc:cd:6e:a7:e8:e2:34:c8:e9:33:e9:57:b4:11:
                    8b:2d:b6:9b:bf:64:f0:58:10:4e:81:81:62:07:a9:
                    ad:da:2a:da:c9:95:2d:8e:56:80:ed:a8:88:4c:86:
                    70:3f:c7:43:58:6e:cc:3f:38:f8:60:c8:ca:0c:1d:
                    30:b8:52:16:26:39:0f:07:75:97:3a:13:78:f5:a8:
                    cf:12:f8:fd:1c:e4:30:61:04:1d:ee:8f:96:5f:0f:
                    4b:d6:68:c1:46:e2:7c:51:1f:00:2f:6b:a5:58:52:
                    d2:a6:bc:c8:08:27:15:61:dc:fe:48:2d:e9:e2:fe:
                    e3:2d:22:6c:94:4e:9d:f4:cd:3a:fd:ea:ad:60:5f:
                    c6:2c:2e:cb:c6:1c:19:2a:ea:8c:4e:34:1e:4f:8e:
                    99:9b:17:fa:39:dd:6a:65:31:b2:39:9a:f7:bd:56:
                    38:13:1e:b6:a8:50:23:78:8c:be:3f:9e:9f:40:7e:
                    ea:85:8b:35:62:db:97:54:61:23:21:c2:1c:57:d9:
                    da:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CF:1B:CF:D7:5F:E0:29:01:7B:6A:8F:BE:7C:55:FF:1B:B7:02:70
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32322d3232203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:31:13:46:38:fc:6a:5c:b5:b7:24:d4:bf:cd:15:d2:d8:04:
         b7:a3:1e:fd:41:a3:7b:e7:fd:7e:3a:f1:61:6a:87:f3:6e:28:
         f9:92:6d:52:d6:6d:21:18:de:57:35:01:69:91:78:80:06:b3:
         12:3a:23:da:01:a8:96:60:99:8d:be:0a:f7:66:86:2c:1f:d0:
         46:ba:bf:a9:b2:a7:18:43:91:40:c8:25:11:7f:75:86:17:c8:
         4e:07:14:3e:14:f3:18:9f:8b:4b:87:43:c8:d4:4b:9e:4e:8f:
         6a:f1:ce:ab:d4:b4:a7:c4:60:c3:0a:dc:0d:6d:17:b0:f2:76:
         37:33:b3:eb:f9:81:c3:6b:0f:ae:32:60:5e:d4:90:a4:9f:4d:
         2b:77:98:b0:26:93:17:44:79:66:44:21:cf:7d:f1:fc:34:2a:
         f6:cc:cb:22:bb:e1:99:b6:3a:89:d5:01:00:f5:f7:85:21:ca:
         e0:d5:3d:61:39:ac:69:b0:2f:6a:65:e3:f5:b2:e9:71:eb:fc:
         9e:7f:e7:40:47:e1:58:8d:52:50:a0:51:69:71:b2:a9:df:b9:
         83:03:20:19:19:32:7d:28:47:f2:81:a3:59:3f:a7:06:59:a7:
         58:24:d9:8e:03:19:2d:ef:7b:67:99:dd:bf:81:48:30:c3:bc:
         4a:e0:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:36:31 2025 by rpki-client