Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa
File:                     3136332e36312e372e302f32342d3234203d3e20313534343134.roa (raw, json)
Hash identifier:          xZf6NghAkeA3rnWZR27UkazUN/6A+OfxJZ+uYiCfjSs=
Subject key identifier:   CC:17:4E:4D:8B:76:EA:E1:13:BF:1A:21:76:74:BE:A0:4B:82:DD:52
Certificate issuer:       /CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
Certificate serial:       477C3A49D51AACF35409464A9B3989CB3F2CDDBA
Authority key identifier: 1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa
Signing time:             Sun 03 May 2026 02:12:22 +0000
ROA not before:           Sun 03 May 2026 02:07:22 +0000
ROA not after:            Sun 02 May 2027 02:12:22 +0000
asID:                     154414
IP address blocks:        163.61.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl
                          rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7c:3a:49:d5:1a:ac:f3:54:09:46:4a:9b:39:89:cb:3f:2c:dd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA
        Validity
            Not Before: May  3 02:07:22 2026 GMT
            Not After : May  2 02:12:22 2027 GMT
        Subject: CN=CC174E4D8B76EAE113BF1A217674BEA04B82DD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:eb:a6:62:26:3e:43:0c:d9:fd:06:cd:7a:
                    b8:f2:bf:6c:1d:23:54:de:a8:58:5e:4e:f3:43:a9:
                    3d:15:9a:a8:b0:e1:8d:88:92:b9:c5:c7:48:86:b6:
                    ca:9a:5f:75:0a:21:9c:37:e9:a5:ad:30:99:d8:dc:
                    18:97:27:e4:6e:e1:f2:91:d0:0d:96:de:d3:86:76:
                    6c:d0:a0:28:14:33:80:e1:05:35:33:21:55:3c:1c:
                    d0:1f:32:54:4c:8b:86:7d:df:40:db:77:a0:e2:c3:
                    18:2f:03:46:6c:d8:a0:22:35:c3:2c:ba:3d:e5:a7:
                    c5:47:2a:20:ca:fb:5a:2b:65:7e:c5:35:be:de:43:
                    57:44:d9:01:e6:40:3b:de:44:c7:c5:e9:1b:cf:19:
                    4c:98:1a:64:f2:a8:0b:eb:34:03:42:89:4c:0a:c8:
                    ce:1b:22:af:04:2f:f0:b3:37:a3:14:68:f2:26:14:
                    95:dc:84:f1:10:db:bc:ae:c8:6f:08:36:9e:bd:de:
                    e7:bd:48:34:2d:3e:27:cd:b0:e1:f0:9a:7e:39:88:
                    19:08:18:47:5a:14:e7:bf:91:ad:e6:32:b2:6a:bc:
                    29:95:f4:9e:4e:56:f3:4b:a0:12:54:c6:81:66:49:
                    cb:4f:3c:83:ff:16:35:b5:73:a4:41:30:9f:46:03:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:17:4E:4D:8B:76:EA:E1:13:BF:1A:21:76:74:BE:A0:4B:82:DD:52
            X509v3 Authority Key Identifier:
                keyid:1E:97:AF:BD:D2:A9:C7:E4:65:D0:CD:63:F5:78:BB:21:29:12:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1E97AFBDD2A9C7E465D0CD63F578BB212912A1CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:89:70:f4:db:29:f8:69:ea:07:a8:07:5a:ba:4e:d6:e6:5a:
         13:89:66:ea:ba:7b:ee:51:d7:b9:b4:e3:8a:b8:49:3d:52:c1:
         b0:e6:51:0b:3d:ef:f4:22:81:02:61:c8:fb:01:34:87:42:ff:
         78:de:06:08:d7:11:70:b0:b6:d8:9d:82:d3:0e:25:20:c8:4d:
         7d:46:e6:97:4f:30:c8:e5:3b:f5:4a:f8:78:b7:4d:ef:83:f2:
         e0:b6:c0:a6:cb:bb:26:40:73:31:c2:52:56:5c:e8:e4:b9:90:
         e0:f8:39:0d:36:d8:ab:ab:aa:c4:dc:e7:23:b7:a7:a1:7f:b2:
         85:05:55:49:8e:e9:51:47:77:a2:fd:3e:c4:b6:bc:b4:ee:aa:
         c2:c5:70:c1:83:50:df:f3:5b:e8:41:b1:4e:66:a0:35:df:9d:
         b6:93:b9:a7:af:c2:b0:be:79:c6:eb:8d:4f:c3:1a:99:f9:3c:
         21:d1:7e:96:09:3e:2a:2c:3f:b9:0d:86:f5:d4:9f:4d:b2:97:
         e2:6b:b6:d5:2b:48:35:b9:07:a3:fa:4c:97:5e:0a:9e:9c:f9:
         e0:99:b0:03:d4:b7:77:27:58:4a:75:73:80:16:39:57:4e:02:
         b7:ad:f1:84:fa:b1:80:44:03:eb:61:e8:80:7c:51:f0:03:c4:
         00:4e:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:44 2026 by rpki-client