Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e322e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=
Subject key identifier:   2C:B2:46:65:65:5B:BD:5F:6F:FB:E2:A6:4E:5F:E3:F8:28:9F:E7:57
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       0423D0AF37E8A24810DDF2B124434EF4E09F7034
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 19 Jun 2025 07:01:33 +0000
ROA not before:           Thu 19 Jun 2025 06:56:33 +0000
ROA not after:            Thu 18 Jun 2026 07:01:33 +0000
asID:                     46049
IP address blocks:        182.255.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 13:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:23:d0:af:37:e8:a2:48:10:dd:f2:b1:24:43:4e:f4:e0:9f:70:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 19 06:56:33 2025 GMT
            Not After : Jun 18 07:01:33 2026 GMT
        Subject: CN=2CB24665655BBD5F6FFBE2A64E5FE3F8289FE757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:76:92:3b:17:c3:b6:b7:f1:d3:eb:34:38:
                    02:3b:71:f5:04:ea:e0:cf:b1:1d:dc:4c:3c:c5:46:
                    c0:59:9c:08:57:73:dd:bd:e0:37:17:03:32:30:34:
                    f3:57:3a:bd:e4:e2:09:19:10:f0:54:7d:b6:99:94:
                    07:45:23:5e:96:41:29:1f:18:84:a4:a9:b1:50:e5:
                    72:4c:f6:7b:2f:e7:e1:58:62:85:d5:e0:e4:32:19:
                    cf:da:1c:fe:24:61:5a:31:18:3d:b7:ff:98:42:17:
                    5f:82:ba:c5:dd:95:f4:cf:8b:69:72:73:72:0a:54:
                    c7:26:36:cb:4a:16:5f:c8:99:72:90:44:c2:8e:b9:
                    f2:0d:a6:53:c4:15:fa:4e:7d:40:52:c3:da:1d:f4:
                    51:fa:54:f2:76:7e:bd:ac:35:6b:fe:e0:99:35:41:
                    5a:7e:7d:fc:3b:50:f0:8a:58:62:7e:05:a5:d2:d2:
                    a8:ac:95:77:da:dd:a9:58:b7:ee:ce:4d:1c:dd:92:
                    35:70:dc:55:54:46:40:94:3d:93:f3:ef:ee:44:aa:
                    fd:7e:4a:b7:d6:59:5d:c0:9e:03:52:2b:a1:36:f4:
                    b7:b2:33:ff:73:3a:11:75:ae:87:f9:a3:ed:16:fd:
                    0f:f2:25:50:4c:06:99:57:a9:4b:87:bb:d3:d0:e9:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:46:65:65:5B:BD:5F:6F:FB:E2:A6:4E:5F:E3:F8:28:9F:E7:57
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e322e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:d0:51:3d:91:9c:48:43:0c:f7:f9:3d:a1:8b:28:cd:78:
         61:c6:ed:48:85:71:32:b0:c3:7d:62:68:a0:69:93:a0:e8:35:
         c4:02:27:e1:e7:8e:59:00:5e:f1:be:5e:cc:ed:6e:79:b0:af:
         3a:16:c6:72:1b:d5:89:b5:bd:a8:e5:33:3c:e6:89:5c:12:76:
         63:e6:25:ce:b4:f8:78:84:d2:c7:95:89:fe:01:99:88:84:a7:
         d6:32:74:5b:65:d2:a2:c9:6b:fc:e5:42:5a:a5:02:00:4a:47:
         cd:5a:61:a4:4a:ec:8d:fe:f5:d8:c1:b6:0c:ec:be:66:2b:69:
         a2:b4:6b:40:8b:e3:87:d9:fe:0f:7e:0d:1e:6a:e3:90:33:94:
         09:c0:45:8c:ab:e0:bd:7e:2d:d8:a4:b4:d6:7e:b6:a3:98:0d:
         89:2a:83:5c:6e:fa:17:56:71:bc:44:3c:db:40:8e:9c:5a:9d:
         e4:6e:14:de:7e:7f:69:37:dd:97:bb:1d:5c:d8:37:13:36:a7:
         91:f8:d7:09:26:6c:3e:35:54:24:b2:91:df:8a:cb:60:59:21:
         fd:5f:38:24:8b:03:44:4c:2b:78:11:1c:56:6d:37:a4:ef:64:
         fa:07:13:bd:82:e3:bd:0a:84:5f:3e:43:71:45:2f:9f:bd:25:
         fe:70:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:03 2025 by rpki-client