Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/38322e3135382e3133322e302f32342d3234203d3e203436303635.roa
File:                     38322e3135382e3133322e302f32342d3234203d3e203436303635.roa (raw, json)
Hash identifier:          tOxxL7zn18yWZvrkhQ7IMkV5ohEbFf926lidGzIe3nY=
Subject key identifier:   76:15:56:21:A1:13:61:AD:45:B3:49:67:77:E0:E0:11:81:E3:60:CB
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       664E25931C7D739D8778B1B94DDEF2AE5CF70F91
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/38322e3135382e3133322e302f32342d3234203d3e203436303635.roa
Signing time:             Wed 29 Jul 2026 00:57:44 +0000
ROA not before:           Wed 29 Jul 2026 00:52:44 +0000
ROA not after:            Wed 28 Jul 2027 00:57:44 +0000
asID:                     46065
IP address blocks:        82.158.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 03:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4e:25:93:1c:7d:73:9d:87:78:b1:b9:4d:de:f2:ae:5c:f7:0f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: Jul 29 00:52:44 2026 GMT
            Not After : Jul 28 00:57:44 2027 GMT
        Subject: CN=76155621A11361AD45B3496777E0E01181E360CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:5a:0f:fe:66:60:c0:8d:8b:6d:7e:86:27:
                    b2:37:64:62:0b:3a:30:11:4e:ff:7d:e3:71:6a:6d:
                    d3:a7:fc:06:90:da:c4:14:d3:78:42:67:dd:e2:1b:
                    55:07:32:78:c7:96:47:b6:60:3c:fa:93:78:e2:3f:
                    d9:89:77:ae:94:ce:5e:06:c1:23:6b:71:d4:5f:a6:
                    d5:a2:d9:0a:b7:e5:fe:02:80:52:bd:76:ec:05:74:
                    d7:a4:d7:dc:7a:0b:b2:94:d8:17:e3:ec:20:5d:5d:
                    ed:52:03:bc:b1:d6:aa:bf:32:99:7d:6e:a0:20:b0:
                    27:0e:2d:51:36:1d:e9:d9:12:cd:f2:81:54:7a:e6:
                    58:b6:2e:c5:16:83:e0:a8:a0:ec:48:1d:42:4e:08:
                    62:39:6b:51:43:1b:96:5d:76:d5:a1:4b:91:85:57:
                    0b:b8:76:c8:61:47:cf:d1:e8:9f:18:fa:98:d6:9d:
                    49:a6:19:bf:b6:90:2f:6e:b9:60:3d:99:eb:93:ca:
                    71:1c:20:7d:fd:e4:a5:40:c1:8f:3a:df:1b:e0:8f:
                    a1:fd:20:94:c3:45:63:7e:80:26:2b:96:f1:42:0e:
                    4b:00:b0:67:c0:7f:56:34:73:92:44:ee:84:b7:11:
                    16:52:ae:fd:ab:9f:c6:42:8c:d4:06:5e:1e:01:fa:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:56:21:A1:13:61:AD:45:B3:49:67:77:E0:E0:11:81:E3:60:CB
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/38322e3135382e3133322e302f32342d3234203d3e203436303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.158.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:c2:42:69:cb:1b:a7:e9:43:d3:b1:65:92:16:8a:e2:d9:
         a7:72:93:d8:e3:b6:09:38:77:ff:a4:92:cd:99:5d:57:cc:65:
         b9:5b:62:db:10:d7:7c:fc:6f:31:f1:e0:95:12:63:ae:af:dc:
         38:45:2e:17:a9:36:10:49:32:b8:06:f2:ec:65:e4:0a:bb:ba:
         fc:5e:6f:95:0f:5d:a6:c8:cf:83:44:0d:1f:60:c5:6e:72:b1:
         d4:5e:0d:3e:e8:43:a4:52:ae:68:45:40:a9:bc:e8:bd:1b:4d:
         e5:de:8a:70:19:b7:c1:73:4c:41:b4:fa:0a:b5:ea:49:2c:ec:
         cb:a0:9d:0a:e9:b7:f6:c1:3e:5a:a7:86:95:3d:4d:e7:41:be:
         ea:e4:9f:98:c0:94:0c:ff:21:e0:6b:31:5f:e3:7d:af:b1:84:
         11:f4:82:8d:20:46:96:ca:6d:a8:a2:da:4e:dd:5b:37:a7:71:
         1b:43:3d:33:1e:ed:6a:b9:b2:06:e5:2b:00:6b:0a:eb:50:7c:
         fc:d8:db:9a:dc:a1:b3:23:5b:8d:fa:04:48:38:24:af:fc:cb:
         03:8e:5d:b0:fb:1a:8f:40:91:ef:7d:56:79:27:e5:f1:89:0b:
         20:b8:9a:ad:50:47:07:86:6f:2c:ab:26:a4:e9:60:05:74:19:
         e1:1f:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 04:40:51 2026 by rpki-client