Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa
File:                     3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (raw, json)
Hash identifier:          5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=
Subject key identifier:   00:F7:F4:BD:14:83:06:9F:4D:D1:D4:C6:36:00:4F:37:FD:6D:38:3D
Certificate issuer:       /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Certificate serial:       0218218460917CD4038F95AC0A4AE1A5D19D6AE8
Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa
Signing time:             Sun 03 May 2026 02:11:10 +0000
ROA not before:           Sun 03 May 2026 02:06:10 +0000
ROA not after:            Sun 02 May 2027 02:11:10 +0000
asID:                     152820
IP address blocks:        160.22.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
                          rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:18:21:84:60:91:7c:d4:03:8f:95:ac:0a:4a:e1:a5:d1:9d:6a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
        Validity
            Not Before: May  3 02:06:10 2026 GMT
            Not After : May  2 02:11:10 2027 GMT
        Subject: CN=00F7F4BD1483069F4DD1D4C636004F37FD6D383D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:4e:eb:11:c8:f8:5e:99:c3:b5:30:03:ef:
                    f5:52:ca:80:70:bd:9b:c0:26:9a:51:65:1b:bb:e6:
                    96:80:2c:d3:c1:22:79:b2:3a:db:3b:86:6b:69:5f:
                    7d:5c:8e:f8:c6:0e:62:ad:d1:33:3a:e9:5e:86:72:
                    df:10:9b:5c:8b:b5:ff:e3:ca:50:d8:11:25:35:f3:
                    b0:cc:7d:c6:19:92:af:23:e7:4a:98:6f:55:c4:00:
                    ac:2a:24:e4:0f:62:cc:b6:db:72:5c:08:fa:b7:86:
                    76:e4:00:d6:f8:c3:94:c5:52:86:c5:70:e7:c8:22:
                    be:f8:89:01:8a:84:72:e3:69:6c:5e:6d:31:3a:59:
                    53:d5:f4:5e:b3:c1:7f:4a:6d:35:3c:db:63:46:7b:
                    2a:a1:5e:c0:f2:69:74:79:fd:e5:33:6c:f8:a0:f4:
                    eb:60:4f:08:44:3d:65:a7:a2:eb:79:1c:65:a7:a1:
                    7c:27:27:e9:11:81:da:83:f0:c4:55:f2:05:66:77:
                    92:5b:c2:0a:a8:dd:da:3a:2d:39:76:9b:11:a5:04:
                    e5:91:4a:13:00:c3:55:39:ba:53:bc:3b:88:4f:57:
                    2f:7e:fc:7c:7c:e0:3b:93:d2:95:f2:10:59:77:f4:
                    e7:db:30:1e:19:ef:4f:3b:91:02:27:86:2d:75:44:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:F4:BD:14:83:06:9F:4D:D1:D4:C6:36:00:4F:37:FD:6D:38:3D
            X509v3 Authority Key Identifier:
                keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:04:a9:7c:46:fa:02:71:a7:1f:04:e3:6b:ed:58:b8:01:ea:
         53:f9:87:fa:8b:9b:af:81:7b:03:7c:77:fc:26:c9:6e:5d:ce:
         a6:a7:bd:8c:1a:15:97:a9:bd:67:de:39:92:e8:fb:c1:78:8d:
         dc:be:a7:23:a8:76:19:ae:41:22:31:0a:89:9a:24:90:13:cd:
         a4:80:9c:a6:ff:6f:cb:b2:2c:5a:93:d9:c9:f4:a9:13:96:10:
         1d:b2:ab:b8:4c:40:13:e4:d2:70:b6:b4:d8:50:98:dc:12:32:
         7d:e1:c2:86:a8:b3:1b:1a:83:5a:89:13:01:03:93:c4:97:20:
         1c:0f:77:d4:d9:93:76:4b:43:5d:09:23:d0:6d:8b:29:45:89:
         0a:90:ec:2c:e3:58:d2:2a:65:a5:a7:5b:66:6a:69:01:ca:22:
         2e:b1:da:db:46:b4:8b:74:97:e5:22:97:2d:dd:cf:ef:49:2c:
         f8:03:fb:5c:b2:89:52:b7:0e:07:23:76:fd:0e:b2:0a:6f:d1:
         06:2a:ac:e9:84:35:db:84:cb:b5:8e:bb:7e:6e:c0:e7:7a:57:
         93:7e:8e:db:01:58:e7:37:22:90:18:a0:05:88:ea:d4:39:cc:
         b1:eb:63:cf:79:9b:e0:fe:62:33:c3:fa:b5:88:68:ea:8e:64:
         df:b7:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:51 2026 by rpki-client