Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa
File:                     3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=
Subject key identifier:   22:F2:F3:82:84:90:43:0C:6B:8D:3D:D7:B2:3E:ED:3A:13:43:C0:34
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       01AC65305DD4F688388120CA45DAF8BC782FA03E
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa
Signing time:             Mon 02 Jun 2025 02:04:31 +0000
ROA not before:           Mon 02 Jun 2025 01:59:31 +0000
ROA not after:            Mon 01 Jun 2026 02:04:31 +0000
asID:                     55685
IP address blocks:        182.54.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 10:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:65:30:5d:d4:f6:88:38:81:20:ca:45:da:f8:bc:78:2f:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Jun  2 01:59:31 2025 GMT
            Not After : Jun  1 02:04:31 2026 GMT
        Subject: CN=22F2F3828490430C6B8D3DD7B23EED3A1343C034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:97:ad:db:35:9e:f7:fa:a4:d3:45:f4:75:
                    50:a8:20:e2:31:2b:8c:67:56:89:f8:71:e4:4d:dd:
                    42:0e:56:84:46:6b:62:5b:60:cd:44:3d:06:c1:74:
                    25:88:72:c4:bb:0b:5d:7a:e1:02:8c:97:f5:9b:68:
                    49:e9:9b:e4:5f:86:48:24:4c:a1:d1:19:c5:4b:5f:
                    ef:c7:73:57:f3:b5:f4:62:20:82:d9:dc:0c:4c:21:
                    e2:37:a7:03:c3:75:ea:7b:dd:ae:1a:1f:af:af:02:
                    6d:3f:9b:e9:db:c3:e1:5c:1a:ec:7d:0a:8b:61:0e:
                    21:8c:61:e7:d5:a0:46:48:9c:b0:87:af:09:9f:d4:
                    8e:5b:56:33:75:3e:e1:7d:48:c9:10:a6:2f:f0:81:
                    ec:ce:03:f0:e3:c9:87:40:82:b6:c5:f1:a7:0e:5c:
                    ed:f4:c6:27:81:6d:ab:a7:42:10:6d:6d:2e:59:24:
                    59:56:bc:75:dc:49:47:02:0c:80:70:71:e4:e5:44:
                    c4:a2:8a:7b:e9:d6:e7:29:54:a5:9c:98:82:26:43:
                    b5:0d:2f:cb:aa:a0:15:fd:26:66:55:cf:6c:67:5d:
                    7d:98:52:3b:ba:3e:09:e5:30:a6:32:c4:e6:d9:7a:
                    17:69:8c:d3:9d:c9:aa:63:60:b1:fd:75:6a:7e:45:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:F3:82:84:90:43:0C:6B:8D:3D:D7:B2:3E:ED:3A:13:43:C0:34
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3138322e35342e3134302e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:ea:8c:ca:dc:24:af:6f:6c:0f:19:8f:67:f5:b6:5e:51:
         db:d0:ae:0f:8c:74:c6:6d:00:30:97:a7:89:7d:d7:d7:55:4d:
         13:fe:07:c8:e7:f6:6e:3b:f1:2e:92:73:ec:15:22:5b:32:79:
         58:f4:45:61:f7:45:b7:7b:98:30:e5:34:74:fa:ad:9f:a2:7b:
         43:77:cd:54:d0:f0:16:64:98:b3:3c:39:7b:dd:fb:a0:58:04:
         a8:18:d4:0a:0e:ae:0c:b3:df:bf:a7:9a:fc:38:80:07:d8:13:
         4d:39:64:8b:77:cf:64:28:a9:7a:c4:4b:3e:23:4f:35:21:e2:
         36:32:94:00:34:a4:9b:cb:cf:d2:ff:f4:2e:a1:78:fc:27:36:
         b8:09:ef:4b:28:ca:5f:b8:c7:cc:46:c7:fd:ed:db:70:0d:3e:
         c8:7c:81:9b:b4:71:b2:9a:c8:23:6b:34:8e:95:a9:69:df:69:
         19:3f:1f:b4:ec:1b:11:3d:84:c9:7c:68:d2:f2:e3:b5:7d:ec:
         f4:ab:28:18:9a:84:44:53:bf:46:e6:70:d1:f9:12:2c:6d:72:
         63:70:c5:59:b7:96:35:bf:6b:d0:9d:d5:74:72:ce:5d:ca:15:
         f5:a7:6b:98:eb:5d:af:ba:d0:16:00:d8:88:65:f1:ed:41:e2:
         8f:cd:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:59:20 2025 by rpki-client