Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
File:                     3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4rIiP2ikG4W+wTINg+vbNqBPRf5CVJMTpgaAB7yIpvA=
Subject key identifier:   58:EA:72:6D:55:14:EC:BF:5A:A3:EB:25:67:24:7E:3D:09:4E:E1:9D
Certificate issuer:       /CN=6410D3838A65954BC1C301FEAAE74108F878E75C
Certificate serial:       0B20F2FE2D6E190F49F66942E18164FBC4E4E52D
Authority key identifier: 64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:55:05 +0000
ROA not before:           Sun 03 May 2026 02:50:05 +0000
ROA not after:            Sun 02 May 2027 02:55:05 +0000
asID:                     17995
IP address blocks:        182.16.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl
                          rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 19:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:f2:fe:2d:6e:19:0f:49:f6:69:42:e1:81:64:fb:c4:e4:e5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6410D3838A65954BC1C301FEAAE74108F878E75C
        Validity
            Not Before: May  3 02:50:05 2026 GMT
            Not After : May  2 02:55:05 2027 GMT
        Subject: CN=58EA726D5514ECBF5AA3EB2567247E3D094EE19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:58:82:0f:f9:67:aa:51:6f:d1:9c:4a:0a:
                    61:ab:93:a0:ec:e0:4c:51:be:71:ad:cd:23:30:a7:
                    6a:b0:b3:32:01:d2:32:84:65:63:0b:48:82:e3:5f:
                    d8:55:1c:e7:a5:f1:a5:cb:13:c4:8a:a7:e7:e5:62:
                    a8:c5:42:cf:3a:71:d8:de:26:57:a6:49:26:87:02:
                    68:96:10:7e:d1:ae:84:f5:e3:ac:7e:fd:dd:0d:ee:
                    9d:ce:69:01:b9:f5:c7:f5:8e:57:c7:b4:b0:2b:23:
                    ca:fe:49:80:fe:0b:ac:c2:e1:63:f8:f7:0f:78:ec:
                    36:a4:cb:32:d1:4a:71:d5:8b:f2:41:65:7a:ef:a9:
                    39:f4:01:2b:e1:db:fc:1b:27:72:c2:33:7e:f1:ac:
                    35:04:75:3a:9f:2d:70:b2:6f:dd:c0:ca:24:8e:0a:
                    e0:04:57:38:0b:e8:32:b3:27:c3:1f:98:91:31:6c:
                    bb:4b:a4:bf:cb:0e:0a:6c:f4:a2:f8:68:6d:ff:8d:
                    9b:67:64:1a:9c:79:23:99:fc:75:5d:ee:45:7d:8f:
                    da:10:05:64:9e:12:11:c9:a4:7f:24:2b:ea:73:06:
                    0c:d3:f0:e6:47:41:59:99:49:65:70:86:4c:fb:17:
                    de:8d:8c:eb:fa:cd:d9:1f:b6:12:e2:1e:5a:99:59:
                    da:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EA:72:6D:55:14:EC:BF:5A:A3:EB:25:67:24:7E:3D:09:4E:E1:9D
            X509v3 Authority Key Identifier:
                keyid:64:10:D3:83:8A:65:95:4B:C1:C3:01:FE:AA:E7:41:08:F8:78:E7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/6410D3838A65954BC1C301FEAAE74108F878E75C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6410D3838A65954BC1C301FEAAE74108F878E75C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3138322e31362e3136302e302f31392d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:1d:22:cf:cf:95:59:8d:e7:f3:65:93:90:d7:2d:22:14:
         7c:0d:e2:8e:e7:fb:6b:f8:18:1d:89:c3:a8:d3:d5:50:7a:79:
         7a:14:58:3a:c4:1f:f5:a7:b8:e2:3e:93:24:6c:69:26:7e:51:
         9b:9b:d1:0c:7a:f2:ae:0a:a3:9c:1d:2d:e5:74:3a:36:c1:4a:
         66:d4:f1:79:7e:39:05:6d:b9:24:1f:27:6c:c8:4a:4b:13:26:
         e6:f8:6a:ad:5e:bc:cc:a7:29:41:d6:3e:72:06:8a:25:b4:cd:
         06:27:c2:f4:04:7b:81:53:f3:7a:73:58:be:30:f1:ea:f1:b7:
         6e:f4:52:ad:13:da:e8:b8:22:65:11:5e:06:a9:d3:90:9c:3f:
         0d:9d:73:26:31:3f:75:9f:e8:b9:e2:00:dd:69:33:90:87:0b:
         52:df:11:91:5d:69:ae:d5:d1:a5:e8:4a:70:a1:e8:d4:fc:b4:
         3f:bf:da:66:66:29:07:7e:0a:cc:32:ca:a8:0b:22:de:65:97:
         ff:78:49:df:de:18:31:de:e8:fd:24:fb:29:30:a8:7c:c6:34:
         37:20:fb:42:90:cf:3e:6e:7e:26:c1:b0:b1:78:8c:8f:36:42:
         a5:03:b5:f0:11:78:18:71:f5:b3:18:c9:6b:26:6f:e4:b4:1a:
         1e:23:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:33:43 2026 by rpki-client