Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32332d3234203d3e20313534343134.roa
File:                     3136332e36312e362e302f32332d3234203d3e20313534343134.roa (raw, json)
Hash identifier:          y2SWQDiorMVb0CUbtxKzRSTlLsTgGsBsbYUUXmrxSoA=
Subject key identifier:   13:5F:24:3B:DB:8B:13:ED:3E:B4:AB:F9:FC:0E:1A:38:29:55:11:7A
Certificate issuer:       /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Certificate serial:       5864F309F2FC44792DB0F53B16F4C3D0D634D098
Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32332d3234203d3e20313534343134.roa
Signing time:             Sun 03 May 2026 02:12:22 +0000
ROA not before:           Sun 03 May 2026 02:07:22 +0000
ROA not after:            Sun 02 May 2027 02:12:22 +0000
asID:                     154414
IP address blocks:        163.61.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl
                          rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:64:f3:09:f2:fc:44:79:2d:b0:f5:3b:16:f4:c3:d0:d6:34:d0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
        Validity
            Not Before: May  3 02:07:22 2026 GMT
            Not After : May  2 02:12:22 2027 GMT
        Subject: CN=135F243BDB8B13ED3EB4ABF9FC0E1A382955117A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:a1:b6:bf:c3:6f:3c:23:5e:ce:d3:49:fb:
                    0e:ba:0d:54:3a:2f:f1:35:56:18:26:52:21:8b:92:
                    4a:a9:88:2a:a3:2d:ec:5c:8d:43:52:80:ed:8d:96:
                    2f:98:b9:53:7f:2a:0e:93:5e:a8:bf:e4:91:a0:d4:
                    0c:ad:44:3b:8f:00:3b:0e:07:4c:d3:b5:3b:82:b9:
                    68:c0:03:0b:db:3d:11:fd:38:02:19:ad:f5:88:08:
                    74:97:30:97:0d:1e:85:b5:ce:dc:74:61:19:eb:36:
                    53:17:e5:00:8c:c3:3c:b5:bd:25:ed:6a:35:32:fe:
                    ad:25:07:e7:d5:53:c6:0b:f8:56:7b:54:8e:0b:14:
                    8d:ab:5d:e6:5f:bd:3d:1a:52:5b:17:53:65:68:f7:
                    bf:99:a4:34:1e:0d:df:77:27:8e:fc:3d:eb:e4:27:
                    10:11:15:d7:40:d7:ab:06:4a:f0:d7:5d:da:d0:93:
                    63:d9:55:58:70:f7:98:b9:1f:ec:59:d4:ed:af:50:
                    f4:2f:ee:32:f7:06:b1:b0:18:87:dd:f5:a0:8a:e3:
                    e0:30:1c:ca:cf:f9:d3:9f:ef:5d:82:db:d8:51:f6:
                    80:d1:d4:22:13:ef:26:b2:61:13:9b:8e:73:d6:ca:
                    3c:8a:90:d7:a2:7f:07:c9:29:a7:7a:1c:43:13:af:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:24:3B:DB:8B:13:ED:3E:B4:AB:F9:FC:0E:1A:38:29:55:11:7A
            X509v3 Authority Key Identifier:
                keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32332d3234203d3e20313534343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:40:67:08:da:47:ec:77:3d:dc:aa:76:57:a8:9e:1c:4b:84:
         73:8a:c0:40:84:19:b9:fc:8b:94:1c:ed:c8:5c:ac:ae:80:0c:
         d4:a7:2c:bc:80:fd:20:37:4f:82:32:50:74:36:20:f8:ad:0f:
         4c:e9:be:b3:42:03:cc:20:ee:6e:eb:ce:bb:a6:f1:1f:d5:25:
         1a:b3:3c:c3:b6:19:f7:ba:c3:08:d7:45:7c:e8:ce:ec:34:26:
         86:96:b8:b2:00:84:2e:8a:d7:60:93:98:2f:bb:98:77:db:75:
         0a:ff:b8:cc:90:90:51:5e:79:27:e3:b2:a1:f1:8c:e9:02:5a:
         99:38:20:85:82:2e:91:b6:7c:de:e4:d5:1d:fa:c8:19:d5:ab:
         a7:08:6c:e9:3e:1e:af:c5:e9:89:27:44:93:d7:7f:45:63:29:
         74:cf:eb:3b:e3:1a:7d:54:6e:d3:48:d2:5d:3d:7c:84:cb:cf:
         c8:84:b0:f0:8e:80:94:a3:81:c2:9c:79:44:69:03:a0:bc:45:
         72:4a:fc:c5:13:63:eb:49:19:c5:9b:58:b7:68:25:6b:eb:d3:
         78:11:d7:26:93:7d:50:65:5a:af:9f:ef:52:e5:f4:2e:63:ba:
         c0:67:9c:d1:dd:d7:a6:15:ef:ef:25:60:98:a9:04:64:d3:58:
         2c:66:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:29 2026 by rpki-client