Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa
File:                     3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          C1DugQVHSreAgPaO3qUxUKJqTe7dreglrdn7g96ChCQ=
Subject key identifier:   76:AD:BF:B6:A3:46:C7:DE:11:9B:13:9D:A5:7D:CD:28:5B:0B:D6:FF
Certificate issuer:       /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
Certificate serial:       221E6A002E9903D90087F54C8AF2B47060BE8475
Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa
Signing time:             Mon 23 Mar 2026 07:02:41 +0000
ROA not before:           Mon 23 Mar 2026 06:57:41 +0000
ROA not after:            Mon 22 Mar 2027 07:02:41 +0000
asID:                     138115
IP address blocks:        160.19.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl
                          rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 20:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:6a:00:2e:99:03:d9:00:87:f5:4c:8a:f2:b4:70:60:be:84:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1
        Validity
            Not Before: Mar 23 06:57:41 2026 GMT
            Not After : Mar 22 07:02:41 2027 GMT
        Subject: CN=76ADBFB6A346C7DE119B139DA57DCD285B0BD6FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:be:0c:6a:b1:8f:d8:07:7e:43:9a:9a:9d:
                    fb:89:4d:fb:ad:b3:3c:3c:17:60:d9:9d:8c:8b:89:
                    ae:76:1e:76:77:33:59:df:69:db:01:d2:26:34:37:
                    b2:5c:ef:85:e7:dd:bb:04:03:0f:b9:5b:a2:9c:cc:
                    de:43:ca:24:5b:07:5b:e7:49:c8:10:6c:83:bd:49:
                    2f:cb:2a:b5:ff:1f:c2:7e:b2:51:3b:2d:69:ba:9e:
                    5c:56:e1:61:9d:a9:04:3a:7b:92:d3:f9:e3:f8:ae:
                    0d:ad:05:73:8a:05:83:39:12:c6:70:e7:b0:36:09:
                    79:1e:a6:42:21:79:0a:7c:fa:86:bd:98:be:d7:23:
                    e0:e3:5a:93:f1:0e:0d:28:7d:23:ff:b1:5f:02:b9:
                    93:c9:bb:1a:d3:2f:1b:3a:4d:04:7f:ea:23:04:b6:
                    7e:38:54:a6:c4:aa:bf:4b:dc:ef:76:13:12:bf:aa:
                    94:61:fb:0b:8e:f2:21:10:93:74:af:d3:32:44:06:
                    83:54:68:c7:56:3f:39:31:20:0e:05:5b:54:8a:fc:
                    d0:ea:3b:2d:a3:53:d6:9b:9a:65:90:bf:7a:fe:13:
                    a3:fc:62:5a:6f:c9:e1:b9:c5:da:01:e6:3c:71:8d:
                    ba:b7:bd:f3:81:b1:2d:23:39:38:05:ae:c8:fd:2b:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:BF:B6:A3:46:C7:DE:11:9B:13:9D:A5:7D:CD:28:5B:0B:D6:FF
            X509v3 Authority Key Identifier:
                keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0f:26:02:27:b1:d5:d2:3d:30:e7:f0:e9:0a:0f:61:b0:4c:
         69:c8:bb:72:b3:dd:53:1b:e1:3c:ce:fc:99:55:6f:b3:6d:7e:
         bb:e1:0e:3e:28:31:57:b2:0c:b7:86:71:d1:cc:63:4a:c0:e7:
         91:68:ea:bb:5e:6b:0d:81:53:31:02:ae:92:5d:a4:ef:34:42:
         be:10:ce:43:29:02:6d:ba:d3:fe:c0:32:51:7f:83:6a:d5:1a:
         08:13:75:50:52:1e:ee:dc:0a:1e:2a:11:f9:64:87:31:08:22:
         17:62:27:1b:58:af:fe:cf:35:b6:a4:57:5d:51:11:10:0e:f8:
         d6:76:67:29:b9:f3:d3:9c:47:8a:a0:ec:e5:a1:48:20:20:4b:
         eb:9d:d2:b5:a2:af:28:f8:60:26:26:1a:68:a7:2b:c7:26:2b:
         f7:79:e1:b6:8a:e9:f5:e7:1b:a4:cf:22:e1:c7:df:25:4f:46:
         66:52:14:8b:ec:0b:e9:f2:88:0e:26:52:a8:c3:73:55:85:a6:
         6d:25:98:fd:87:fa:90:83:1c:0e:7c:8b:b6:ef:3b:6d:b8:45:
         3d:b3:1f:57:76:be:a2:95:56:73:a8:a3:4b:ae:d4:aa:d9:b0:
         69:7d:58:4e:e2:aa:56:87:6d:b8:9c:3b:fb:4c:f5:e5:50:98:
         b3:2c:28:8c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIh5qAC6ZA9kAh/VMivK0cGC+hHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx
N0EwRDJFMTAeFw0yNjAzMjMwNjU3NDFaFw0yNzAzMjIwNzAyNDFaMDMxMTAvBgNV
BAMTKDc2QURCRkI2QTM0NkM3REUxMTlCMTM5REE1N0RDRDI4NUIwQkQ2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ub4MarGP2Ad+Q5qanfuJTfut
szw8F2DZnYyLia52HnZ3M1nfadsB0iY0N7Jc74Xn3bsEAw+5W6KczN5DyiRbB1vn
ScgQbIO9SS/LKrX/H8J+slE7LWm6nlxW4WGdqQQ6e5LT+eP4rg2tBXOKBYM5EsZw
57A2CXkepkIheQp8+oa9mL7XI+DjWpPxDg0ofSP/sV8CuZPJuxrTLxs6TQR/6iME
tn44VKbEqr9L3O92ExK/qpRh+wuO8iEQk3Sv0zJEBoNUaMdWPzkxIA4FW1SK/NDq
Oy2jU9abmmWQv3r+E6P8YlpvyeG5xdoB5jxxjbq3vfOBsS0jOTgFrsj9K309AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdq2/tqNGx94RmxOdpX3NKFsL1v8wHwYDVR0j
BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG
Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew
RDJFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1ODJmY2E5LTMyMjItNDViNi1i
NDIyLWZmMmM2YTlmZDI0Ny8wLzMxMzYzMDJlMzEzOTJlMzEzNjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBOnMA0GCSqG
SIb3DQEBCwUAA4IBAQBdDyYCJ7HV0j0w5/DpCg9hsExpyLtys91TG+E8zvyZVW+z
bX674Q4+KDFXsgy3hnHRzGNKwOeRaOq7XmsNgVMxAq6SXaTvNEK+EM5DKQJtutP+
wDJRf4Nq1RoIE3VQUh7u3AoeKhH5ZIcxCCIXYicbWK/+zzW2pFddUREQDvjWdmcp
ufPTnEeKoOzloUggIEvrndK1oq8o+GAmJhpopyvHJiv3eeG2iun15xukzyLhx98l
T0ZmUhSL7Avp8ogOJlKow3NVhaZtJZj9h/qQgxwOfIu27zttuEU9sx9Xdr6ilVZz
qKNLrtSq2bBpfVhO4qpWh224nDv7TPXlUJizLCiM
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:41 2026 by rpki-client