Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
File:                     3138322e3235352e342e302f32342d3234203d3e203436303439.roa (raw, json)
Hash identifier:          RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=
Subject key identifier:   1F:35:98:CD:31:19:53:AE:95:BE:F3:43:B5:84:D5:D5:CA:9A:59:AF
Certificate issuer:       /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial:       01688F99E66514D919632220EB59901A3FDFDDD9
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa
Signing time:             Wed 28 May 2025 02:00:01 +0000
ROA not before:           Wed 28 May 2025 01:55:01 +0000
ROA not after:            Wed 27 May 2026 02:00:01 +0000
asID:                     46049
IP address blocks:        182.255.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
                          rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:8f:99:e6:65:14:d9:19:63:22:20:eb:59:90:1a:3f:df:dd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
        Validity
            Not Before: May 28 01:55:01 2025 GMT
            Not After : May 27 02:00:01 2026 GMT
        Subject: CN=1F3598CD311953AE95BEF343B584D5D5CA9A59AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:bd:2b:3c:b6:94:f9:3b:86:0a:16:98:13:
                    93:6d:36:63:3a:90:be:73:e9:7e:69:3f:f8:b3:7b:
                    34:fc:e1:96:9a:cd:f6:e9:70:3f:bc:23:16:cb:27:
                    48:55:e4:f8:1f:cc:11:a6:c3:c8:43:3e:ee:0d:4c:
                    b5:fd:02:72:34:88:7a:57:0a:a1:2b:4b:b4:72:f6:
                    95:71:a8:00:00:93:0a:14:a3:46:ec:84:e3:cc:a3:
                    45:34:5d:28:21:e2:7f:d7:95:4a:bd:55:8a:e3:dc:
                    ea:71:f5:c8:9c:58:a4:85:75:4a:df:79:88:b1:ea:
                    f0:59:b8:5f:dc:86:b9:44:33:32:c2:a4:0d:ed:aa:
                    f7:3b:88:6a:ec:44:53:f5:13:b6:13:90:c7:26:86:
                    8e:d5:56:8e:38:5e:8b:56:11:3d:9a:91:32:19:36:
                    a8:c0:9d:62:22:a9:a4:b2:c6:d7:e4:e0:82:f5:32:
                    38:fe:58:c2:c8:63:3d:f2:07:0b:2b:5c:43:a1:74:
                    b5:59:b1:fc:cd:82:1b:9f:ea:a4:81:bb:12:75:e1:
                    27:c8:58:fe:aa:d8:9a:11:9a:85:95:0e:1f:5e:ce:
                    d8:e2:7e:99:b9:1b:26:11:11:d4:6b:38:26:dd:be:
                    01:ac:64:b1:60:4d:5d:58:57:cf:64:31:be:ba:c5:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:98:CD:31:19:53:AE:95:BE:F3:43:B5:84:D5:D5:CA:9A:59:AF
            X509v3 Authority Key Identifier:
                keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e342e302f32342d3234203d3e203436303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:3b:3e:d1:4b:df:ab:20:a2:77:cb:f6:a5:d9:57:2f:32:
         2b:fa:8d:07:5d:a6:97:f0:c6:9f:8d:e7:8f:23:c3:b3:8e:19:
         be:d7:81:c9:ce:ed:c0:71:6d:bf:0a:38:1f:05:ff:7f:25:29:
         52:b6:c0:c6:71:a3:36:5d:58:95:c8:df:6d:80:56:08:b5:27:
         ad:be:72:5e:ae:9d:69:18:5b:b0:4c:14:bc:87:5c:d3:18:02:
         f6:8f:88:e0:c5:dc:98:98:73:6b:fb:40:0d:95:16:26:4c:ff:
         46:23:19:4d:5f:5d:f5:03:b0:94:e9:d4:cd:05:7e:2d:15:b1:
         ec:3f:92:f0:92:51:83:bc:04:d6:66:06:39:38:84:81:aa:61:
         b7:0d:ba:2a:39:77:af:8e:ff:38:34:01:65:10:47:e7:a0:ad:
         bb:24:ff:93:ef:af:b4:7b:7e:75:6c:7c:98:62:22:18:7c:08:
         1f:3c:a1:4a:2c:f7:cb:5b:8a:b5:1b:64:f7:7f:38:8b:80:6b:
         d9:38:08:da:fa:67:79:70:0f:2a:89:f0:74:08:55:36:ce:74:
         9d:62:c8:42:04:da:6c:6d:4b:ea:6e:d3:cd:a4:c1:d8:5d:84:
         74:8d:e5:fc:69:98:0c:72:f2:9c:96:a0:79:ab:59:70:e0:32:
         2b:5d:e3:ef
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAWiPmeZlFNkZYyIg61mQGj/f3dkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz
MDlCM0YzQjAeFw0yNTA1MjgwMTU1MDFaFw0yNjA1MjcwMjAwMDFaMDMxMTAvBgNV
BAMTKDFGMzU5OENEMzExOTUzQUU5NUJFRjM0M0I1ODRENUQ1Q0E5QTU5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pL0rPLaU+TuGChaYE5NtNmM6
kL5z6X5pP/izezT84ZaazfbpcD+8IxbLJ0hV5PgfzBGmw8hDPu4NTLX9AnI0iHpX
CqErS7Ry9pVxqAAAkwoUo0bshOPMo0U0XSgh4n/XlUq9VYrj3Opx9cicWKSFdUrf
eYix6vBZuF/chrlEMzLCpA3tqvc7iGrsRFP1E7YTkMcmho7VVo44XotWET2akTIZ
NqjAnWIiqaSyxtfk4IL1Mjj+WMLIYz3yBwsrXEOhdLVZsfzNghuf6qSBuxJ14SfI
WP6q2JoRmoWVDh9eztjifpm5GyYREdRrOCbdvgGsZLFgTV1YV89kMb66xTC1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUHzWYzTEZU66VvvNDtYTV1cqaWa8wHwYDVR0j
BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx
RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC
M0YzQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDkyLTUyN2QtNDg4Zi1h
OWY3LTI0Nzk3ZDk3NzRjYi8wLzMxMzgzMjJlMzIzNTM1MmUzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC2/wQwDQYJKoZIhvcN
AQELBQADggEBAHm5Oz7RS9+rIKJ3y/al2VcvMiv6jQddppfwxp+N548jw7OOGb7X
gcnO7cBxbb8KOB8F/38lKVK2wMZxozZdWJXI322AVgi1J62+cl6unWkYW7BMFLyH
XNMYAvaPiODF3JiYc2v7QA2VFiZM/0YjGU1fXfUDsJTp1M0Ffi0Vsew/kvCSUYO8
BNZmBjk4hIGqYbcNuio5d6+O/zg0AWUQR+egrbsk/5Pvr7R7fnVsfJhiIhh8CB88
oUos98tbirUbZPd/OIuAa9k4CNr6Z3lwDyqJ8HQIVTbOdJ1iyEIE2mxtS+pu082k
wdhdhHSN5fxpmAxy8pyWoHmrWXDgMitd4+8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:07 2025 by rpki-client