Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32342d3234203d3e20313534343134.roa
File:                     3136332e36312e362e302f32342d3234203d3e20313534343134.roa (raw, json)
Hash identifier:          XD8BvYm1biavlW1Q3HzD/pWFbqnbw6Lp7bWjvS0iO0U=
Subject key identifier:   58:D1:C4:68:C0:66:4A:E9:9B:A3:79:CC:33:A6:DC:82:43:E3:7A:C4
Certificate issuer:       /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Certificate serial:       2CE955AC3168DECE3033C9912E5325E81E2F91DE
Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32342d3234203d3e20313534343134.roa
Signing time:             Sun 03 May 2026 02:12:22 +0000
ROA not before:           Sun 03 May 2026 02:07:22 +0000
ROA not after:            Sun 02 May 2027 02:12:22 +0000
asID:                     154414
IP address blocks:        163.61.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl
                          rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e9:55:ac:31:68:de:ce:30:33:c9:91:2e:53:25:e8:1e:2f:91:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
        Validity
            Not Before: May  3 02:07:22 2026 GMT
            Not After : May  2 02:12:22 2027 GMT
        Subject: CN=58D1C468C0664AE99BA379CC33A6DC8243E37AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:7c:f0:2a:b8:1a:e8:07:ae:b5:89:28:b7:
                    2f:a1:fa:73:af:63:29:77:d3:32:0b:ae:c4:fc:ee:
                    9f:28:a3:69:a7:af:31:7e:e7:56:25:28:47:41:e0:
                    d1:e5:d7:71:59:e1:5d:57:2d:d9:a3:cb:6a:0a:bb:
                    7e:23:4d:c6:6e:fa:0c:00:b2:bf:f2:d4:7d:75:07:
                    c6:0c:5d:31:7a:ca:b2:1d:f8:ea:c6:0a:f5:b8:c9:
                    9d:28:83:0f:8b:a9:f3:e4:3d:70:e6:1a:c7:e5:32:
                    25:5d:f1:7c:49:6b:08:4e:be:b6:75:5f:66:98:be:
                    34:87:62:60:2c:e9:3d:b3:a2:3b:be:88:5b:6a:dd:
                    df:96:84:11:80:b2:d9:fc:28:ea:a5:df:98:75:95:
                    05:ca:fc:b1:46:48:ea:f9:d2:7d:94:1a:fa:50:c8:
                    61:0c:d4:e2:f5:b5:73:88:a6:dc:66:11:31:62:fd:
                    23:db:83:1c:b4:99:9b:97:a9:70:e7:d6:32:b3:66:
                    21:61:36:a7:5f:9f:9c:1b:75:b9:55:b5:9c:ed:aa:
                    41:23:63:70:c7:8e:25:d9:85:45:55:23:34:6b:57:
                    4d:ad:5a:98:96:1b:c1:30:97:83:b7:dd:a4:c7:4f:
                    d6:59:77:36:de:5d:5c:36:61:5d:21:68:e5:47:a7:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D1:C4:68:C0:66:4A:E9:9B:A3:79:CC:33:A6:DC:82:43:E3:7A:C4
            X509v3 Authority Key Identifier:
                keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e362e302f32342d3234203d3e20313534343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:05:46:fc:31:8a:19:b3:05:3c:24:26:bc:e2:ac:15:c5:78:
         e0:d4:25:51:49:e7:80:78:cb:4c:ac:24:8b:c9:37:f2:26:2d:
         98:67:a2:c5:0e:01:29:c1:2a:a2:1c:3f:04:10:c2:0f:b4:9a:
         7d:91:7d:89:62:6d:7a:cd:d0:73:c5:5b:1a:98:a0:17:e3:38:
         6e:1e:8b:90:10:a9:18:e1:70:ca:83:db:15:1c:71:6f:b7:c9:
         fc:da:51:d1:07:66:10:45:b7:14:61:71:de:f2:4c:0b:b5:cb:
         03:31:12:6b:19:db:ed:69:6e:5a:85:4e:8d:fe:b0:3f:59:dc:
         73:37:82:c1:f6:6c:1f:a6:9f:e7:4b:af:b0:5c:70:f9:b2:e9:
         50:ae:f2:03:4e:4a:b4:fc:29:f4:b0:b2:4e:3c:a6:2e:be:2a:
         6f:b5:59:6d:0f:1f:a4:17:5a:61:fe:c2:f4:d5:18:f0:40:b7:
         00:b4:f3:a5:0a:32:68:72:88:06:4f:7e:26:eb:c4:ed:4d:10:
         2a:87:29:65:ec:ba:22:c0:79:65:75:40:26:c8:db:8a:0b:64:
         e5:ed:be:b2:d6:75:ab:9d:5e:cb:f1:a3:1d:ad:1b:e5:c9:28:
         5e:ef:c9:e0:ce:c2:2a:97:1f:c9:c6:1a:dc:2e:d5:6d:b1:95:
         33:ff:74:47
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULOlVrDFo3s4wM8mRLlMl6B4vkd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU5N0FGQkREMkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEy
OTEyQTFDQTAeFw0yNjA1MDMwMjA3MjJaFw0yNzA1MDIwMjEyMjJaMDMxMTAvBgNV
BAMTKDU4RDFDNDY4QzA2NjRBRTk5QkEzNzlDQzMzQTZEQzgyNDNFMzdBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrXzwKrga6AeutYkoty+h+nOv
Yyl30zILrsT87p8oo2mnrzF+51YlKEdB4NHl13FZ4V1XLdmjy2oKu34jTcZu+gwA
sr/y1H11B8YMXTF6yrId+OrGCvW4yZ0ogw+LqfPkPXDmGsflMiVd8XxJawhOvrZ1
X2aYvjSHYmAs6T2zoju+iFtq3d+WhBGAstn8KOql35h1lQXK/LFGSOr50n2UGvpQ
yGEM1OL1tXOIptxmETFi/SPbgxy0mZuXqXDn1jKzZiFhNqdfn5wbdblVtZztqkEj
Y3DHjiXZhUVVIzRrV02tWpiWG8Ewl4O33aTHT9ZZdzbeXVw2YV0haOVHpxt/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUWNHEaMBmSumbo3nMM6bcgkPjesQwHwYDVR0j
BBgwFoAUHpevvdKpx+Rl0M1j9Xi7ISkSocowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDk2MzIzZGMtYWIyNi00OWRkLThiMmMtMzA2ZTUwZWUyM2EzLzAvMUU5N0FGQkRE
MkE5QzdFNDY1RDBDRDYzRjU3OEJCMjEyOTEyQTFDQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xRTk3QUZCREQyQTlDN0U0NjVEMENENjNGNTc4QkIyMTI5MTJB
MUNBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA5NjMyM2RjLWFiMjYtNDlkZC04
YjJjLTMwNmU1MGVlMjNhMy8wLzMxMzYzMzJlMzYzMTJlMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzQzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACjPQYwDQYJKoZIhvcN
AQELBQADggEBAM8FRvwxihmzBTwkJrzirBXFeODUJVFJ54B4y0ysJIvJN/ImLZhn
osUOASnBKqIcPwQQwg+0mn2RfYlibXrN0HPFWxqYoBfjOG4ei5AQqRjhcMqD2xUc
cW+3yfzaUdEHZhBFtxRhcd7yTAu1ywMxEmsZ2+1pblqFTo3+sD9Z3HM3gsH2bB+m
n+dLr7BccPmy6VCu8gNOSrT8KfSwsk48pi6+Km+1WW0PH6QXWmH+wvTVGPBAtwC0
86UKMmhyiAZPfibrxO1NECqHKWXsuiLAeWV1QCbI24oLZOXtvrLWdaudXsvxox2t
G+XJKF7vyeDOwiqXH8nGGtwu1W2xlTP/dEc=
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:28 2026 by rpki-client