Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e362e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=
Subject key identifier:   85:E8:39:EC:3C:D9:C4:FC:00:56:5A:39:8E:6A:31:BA:46:FA:DE:F0
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       38062C7188C294C43F4BEA3B5CE9C0A529A7E4D3
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 19 Jun 2025 06:00:01 +0000
ROA not before:           Thu 19 Jun 2025 05:55:01 +0000
ROA not after:            Thu 18 Jun 2026 06:00:01 +0000
asID:                     46049
IP address blocks:        182.255.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 19:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:06:2c:71:88:c2:94:c4:3f:4b:ea:3b:5c:e9:c0:a5:29:a7:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 19 05:55:01 2025 GMT
            Not After : Jun 18 06:00:01 2026 GMT
        Subject: CN=85E839EC3CD9C4FC00565A398E6A31BA46FADEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:05:fc:89:0b:17:5d:24:c1:a2:7f:e2:e8:
                    6b:8c:d1:2a:5a:a5:84:34:89:e5:70:af:79:47:76:
                    6d:4e:94:79:85:9f:64:d4:ee:c8:c2:68:74:13:5d:
                    8c:5d:30:a9:52:42:d8:e9:83:2b:7e:bd:70:30:22:
                    98:27:00:91:81:ea:0d:8f:30:55:29:5c:3a:70:9d:
                    fd:3a:9b:6a:ae:4b:f9:2d:13:dd:6a:5f:2b:27:f1:
                    6b:3f:e7:a8:0c:37:7e:ca:b7:d5:78:94:bc:81:92:
                    33:3a:be:7e:b7:3c:00:ba:ab:f8:a2:4e:2d:4c:98:
                    15:7b:fc:b5:a2:2c:5e:a6:35:fd:20:12:41:ca:fe:
                    ac:16:03:09:8b:f3:cc:cd:39:7f:17:44:14:d1:a4:
                    91:e1:aa:bc:3e:7e:18:7b:b0:9e:b2:0a:5b:78:50:
                    5f:d0:79:8b:b0:d5:bd:6d:76:f2:60:cd:63:f0:b6:
                    ff:ad:85:dd:3e:81:3d:fb:bf:c0:dc:94:2b:9b:22:
                    fc:fe:de:d0:ee:40:4e:4d:aa:d3:7f:f3:31:50:09:
                    e7:15:05:1a:f3:5a:08:37:7e:41:3d:41:c7:13:d5:
                    b7:c6:29:d9:0e:03:e7:0e:16:30:75:2c:0d:31:ea:
                    65:a5:1f:38:88:93:e9:b4:7a:b1:f4:b3:e7:cd:56:
                    30:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E8:39:EC:3C:D9:C4:FC:00:56:5A:39:8E:6A:31:BA:46:FA:DE:F0
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e362e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:27:17:e4:18:30:4f:27:87:af:70:6a:11:b7:b7:ae:a9:
         1a:05:3e:e0:1c:f2:dd:b9:2b:3c:d8:12:33:c3:25:58:54:18:
         6b:8b:fa:bc:7e:d9:f2:8c:ba:10:f4:8c:ae:8c:42:8c:cb:d0:
         6b:0a:c9:65:1e:6f:d7:fb:2d:a0:bb:7f:51:53:ec:8d:40:d4:
         3e:ef:ea:64:6b:68:5f:84:24:72:d2:8a:dd:ed:2c:99:cb:24:
         7e:c8:b8:26:c0:3c:05:21:f7:e5:cf:cc:8a:0a:52:7b:24:27:
         0c:d1:5e:fc:85:2c:f5:11:8c:80:d9:0d:94:36:f4:64:eb:c9:
         0f:15:aa:f3:8f:fc:5c:6a:ea:73:2d:78:bc:57:0f:0f:6e:f6:
         25:48:3a:d7:4d:3c:5d:03:76:ee:b3:a5:f8:82:1a:a6:0a:f2:
         bb:d7:7c:3b:cf:59:28:fb:f3:e1:4c:44:73:da:6a:b5:f1:57:
         a9:bd:15:06:c5:d1:e2:f2:95:88:1c:71:ba:35:e4:21:3b:e8:
         c1:a2:5e:80:93:35:5d:4d:cb:52:0f:c1:5f:89:44:1c:e7:82:
         10:47:b8:59:b9:a1:73:2a:91:35:fb:af:02:8e:5b:aa:2a:12:
         88:62:61:88:78:7c:4f:cd:24:d5:d2:66:c0:99:c2:01:7a:b4:
         84:af:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:00:43 2025 by rpki-client