Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e332e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e332e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=
Subject key identifier:   11:F6:E1:64:46:3E:79:60:5C:2B:54:11:3A:60:5D:E4:D7:25:3A:EF
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       035F067FAA9B8D1F108800DE7001741613F91876
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e332e302f32342d3234203d3e203436303439.roa
Signing time:             Thu 19 Jun 2025 08:02:21 +0000
ROA not before:           Thu 19 Jun 2025 07:57:21 +0000
ROA not after:            Thu 18 Jun 2026 08:02:21 +0000
asID:                     46049
IP address blocks:        182.255.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 13:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5f:06:7f:aa:9b:8d:1f:10:88:00:de:70:01:74:16:13:f9:18:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: Jun 19 07:57:21 2025 GMT
            Not After : Jun 18 08:02:21 2026 GMT
        Subject: CN=11F6E164463E79605C2B54113A605DE4D7253AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:0a:f2:e4:e4:70:30:2d:28:13:bb:75:3e:
                    e3:a6:ce:1a:99:f2:9c:ef:c3:3f:47:47:59:cc:66:
                    7b:48:fa:50:98:73:6f:71:98:cb:f8:09:fb:63:9c:
                    8e:98:b8:50:cf:84:c7:7a:bf:2d:5d:0e:b7:88:9a:
                    5f:6c:df:94:20:65:64:01:65:ce:10:5a:cd:0e:42:
                    f3:96:1f:91:ec:35:7a:91:bd:8e:32:4d:8b:c6:9d:
                    d5:8a:62:bc:49:e4:c7:fc:a2:23:63:1f:b0:7d:cf:
                    b5:dd:41:a9:a0:4f:be:f5:ca:b0:f8:c0:54:78:55:
                    c3:6f:94:38:d6:e8:5f:4d:3e:03:d5:0c:f1:6c:fd:
                    1e:45:cc:47:4d:6e:aa:41:4e:9e:b7:42:31:d5:84:
                    bf:41:d6:82:f3:de:65:c3:d9:71:d9:31:97:f8:d0:
                    09:68:63:dc:77:ba:1e:ec:c1:dd:cf:52:ec:8c:e9:
                    0f:2e:16:ce:fc:7c:7a:fd:0b:ac:2a:e7:f6:8f:d5:
                    e3:3b:81:c9:10:fd:68:08:6f:b7:7f:c4:7c:06:87:
                    e9:04:e3:58:13:c2:3d:75:30:b0:e7:c4:bf:99:1d:
                    fa:34:cc:3e:41:ed:3f:c0:92:95:1e:74:7e:bf:53:
                    fa:2f:7b:88:36:d3:4a:61:de:31:39:8b:3b:54:e0:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:E1:64:46:3E:79:60:5C:2B:54:11:3A:60:5D:E4:D7:25:3A:EF
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e332e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:88:cc:79:44:65:c9:3f:dc:27:16:3f:3a:2f:33:23:c0:f4:
         8e:d4:a3:7d:e2:a3:ef:92:5f:f0:5a:c9:71:8c:91:a8:22:85:
         4b:04:ae:03:49:63:96:ac:2e:f9:7a:6b:3b:e9:8d:19:83:3c:
         7d:ca:d2:8c:c5:28:67:de:91:5b:ea:4f:8c:db:12:b4:7b:99:
         2a:1e:21:dc:50:6e:99:d0:35:20:3f:fc:6c:d5:91:9a:b9:ef:
         d1:b9:a3:21:cb:50:92:0f:a4:7d:86:60:3a:13:3e:a2:a4:f5:
         5f:a7:b6:76:55:fe:39:70:5c:a8:fb:47:db:e9:e0:e8:29:4b:
         61:3d:53:3d:02:13:24:85:dd:7e:a8:38:ce:5e:ce:57:c0:76:
         c0:b4:cb:68:58:6d:48:f9:42:82:d5:87:89:59:ef:70:90:81:
         1a:74:aa:2c:02:5a:9f:af:e7:81:5f:41:e0:a0:c8:c6:f6:89:
         ab:00:d8:47:bb:26:14:29:f9:c2:a4:7d:fa:a5:6f:cc:39:7a:
         34:ad:91:9b:d3:f9:22:2c:dc:11:5c:c2:5f:54:d7:65:98:db:
         51:43:b5:9c:c5:63:92:a2:36:f4:d1:eb:20:85:4a:a6:8e:47:
         fe:d4:af:3e:ff:f0:05:91:58:75:60:8f:b0:e4:a4:bd:e6:fb:
         0e:1f:4b:ba
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUA18Gf6qbjR8QiADecAF0FhP5GHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz
MDlCM0YzQjAeFw0yNTA2MTkwNzU3MjFaFw0yNjA2MTgwODAyMjFaMDMxMTAvBgNV
BAMTKDExRjZFMTY0NDYzRTc5NjA1QzJCNTQxMTNBNjA1REU0RDcyNTNBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOgry5ORwMC0oE7t1PuOmzhqZ
8pzvwz9HR1nMZntI+lCYc29xmMv4CftjnI6YuFDPhMd6vy1dDreIml9s35QgZWQB
Zc4QWs0OQvOWH5HsNXqRvY4yTYvGndWKYrxJ5Mf8oiNjH7B9z7XdQamgT771yrD4
wFR4VcNvlDjW6F9NPgPVDPFs/R5FzEdNbqpBTp63QjHVhL9B1oLz3mXD2XHZMZf4
0AloY9x3uh7swd3PUuyM6Q8uFs78fHr9C6wq5/aP1eM7gckQ/WgIb7d/xHwGh+kE
41gTwj11MLDnxL+ZHfo0zD5B7T/AkpUedH6/U/ove4g200ph3jE5iztU4H3pAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUEfbhZEY+eWBcK1QROmBd5NclOu8wHwYDVR0j
BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx
RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC
M0YzQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDkyLTUyN2QtNDg4Zi1h
OWY3LTI0Nzk3ZDk3NzRjYi8wLzMxMzgzMjJlMzIzNTM1MmUzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC2/wMwDQYJKoZIhvcN
AQELBQADggEBAFSIzHlEZck/3CcWPzovMyPA9I7Uo33io++SX/BayXGMkagihUsE
rgNJY5asLvl6azvpjRmDPH3K0ozFKGfekVvqT4zbErR7mSoeIdxQbpnQNSA//GzV
kZq579G5oyHLUJIPpH2GYDoTPqKk9V+ntnZV/jlwXKj7R9vp4OgpS2E9Uz0CEySF
3X6oOM5ezlfAdsC0y2hYbUj5QoLVh4lZ73CQgRp0qiwCWp+v54FfQeCgyMb2iasA
2Ee7JhQp+cKkffqlb8w5ejStkZvT+SIs3BFcwl9U12WY21FDtZzFY5KiNvTR6yCF
SqaOR/7Urz7/8AWRWHVgj7DkpL3m+w4fS7o=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:02 2025 by rpki-client