Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa
File:                     3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (raw, json)
Hash identifier:          tb4HMbJzm5E9BpXGwrKxpbm2itdy7HZ1U0Ugee7wm+I=
Subject key identifier:   CF:71:3C:D0:5D:9A:8B:A4:3E:11:5A:30:2A:C6:AE:6E:88:7A:94:DB
Certificate issuer:       /CN=13E54012E6F655E86F06520A89313738550A03EF
Certificate serial:       309C317BF054B9E13D79EDD536D9D4CF5A49550B
Authority key identifier: 13:E5:40:12:E6:F6:55:E8:6F:06:52:0A:89:31:37:38:55:0A:03:EF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/13E54012E6F655E86F06520A89313738550A03EF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa
Signing time:             Sun 03 May 2026 02:14:21 +0000
ROA not before:           Sun 03 May 2026 02:09:21 +0000
ROA not after:            Sun 02 May 2027 02:14:21 +0000
asID:                     152768
IP address blocks:        160.19.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/13E54012E6F655E86F06520A89313738550A03EF.crl
                          rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/13E54012E6F655E86F06520A89313738550A03EF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/13E54012E6F655E86F06520A89313738550A03EF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9c:31:7b:f0:54:b9:e1:3d:79:ed:d5:36:d9:d4:cf:5a:49:55:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13E54012E6F655E86F06520A89313738550A03EF
        Validity
            Not Before: May  3 02:09:21 2026 GMT
            Not After : May  2 02:14:21 2027 GMT
        Subject: CN=CF713CD05D9A8BA43E115A302AC6AE6E887A94DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:bc:8e:a3:1f:fb:c7:e4:c1:3c:b7:a3:64:
                    07:d4:4b:9b:a5:d3:f1:47:a6:2e:81:30:d2:be:ed:
                    1b:49:ff:69:8b:82:dc:a3:56:0a:af:24:c7:91:14:
                    7a:fb:dc:94:d3:ca:40:62:60:3c:74:2b:48:27:86:
                    03:97:83:cd:ac:50:3b:9a:e6:5e:8f:99:f5:15:a8:
                    ab:e1:c3:92:89:c3:8e:63:ae:db:73:ed:78:84:82:
                    63:a3:ad:28:d3:d2:6e:66:15:0c:46:48:55:e1:89:
                    e1:54:df:b3:eb:5d:1a:8a:f2:02:24:d1:7c:78:18:
                    74:43:07:68:a7:af:1b:0b:6a:e6:ff:14:4e:36:85:
                    50:06:b1:f0:8a:b6:5a:d2:12:a4:70:21:28:2b:01:
                    a5:3b:5b:83:cf:5a:3f:e2:f5:41:ab:31:81:73:b6:
                    50:53:8f:58:a1:b1:34:01:c8:68:c1:c1:50:bf:e1:
                    00:a1:7d:c2:c1:fa:2a:9b:51:3e:b4:db:4d:21:a2:
                    5f:03:9c:02:9f:1d:21:86:32:44:1c:99:18:71:7e:
                    30:03:b7:b8:f1:19:2f:40:20:4f:90:4e:58:78:8a:
                    d5:ed:b0:20:76:e6:ce:42:84:2b:4c:49:ce:0b:2a:
                    3e:e2:b9:2c:56:2e:ef:9d:09:89:5f:46:d4:14:41:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:3C:D0:5D:9A:8B:A4:3E:11:5A:30:2A:C6:AE:6E:88:7A:94:DB
            X509v3 Authority Key Identifier:
                keyid:13:E5:40:12:E6:F6:55:E8:6F:06:52:0A:89:31:37:38:55:0A:03:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/13E54012E6F655E86F06520A89313738550A03EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/13E54012E6F655E86F06520A89313738550A03EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:da:88:76:09:8f:2b:45:af:18:25:62:b3:6c:67:cf:b4:22:
         dd:b0:be:f6:06:0d:c3:db:dd:27:95:3f:7d:bb:b5:80:a5:cb:
         d2:22:0a:70:e7:d8:42:e2:4f:77:39:d8:86:1f:28:0e:50:2e:
         69:8d:cf:e7:56:02:35:66:4e:d7:06:3c:25:dd:e9:66:7a:08:
         ab:a6:1a:94:1c:a7:82:25:31:ea:36:ad:94:b5:82:dd:5c:c7:
         ad:5a:1d:16:73:b6:99:5a:d6:67:0e:f2:bb:1c:9e:a1:0b:9c:
         f9:91:90:ac:ea:8b:f5:67:37:bb:ed:74:33:93:56:a5:58:17:
         d6:bd:20:4f:4a:e0:ec:3e:af:03:51:36:61:21:d6:1e:71:50:
         64:d4:76:40:2c:0e:d3:b5:71:87:f8:62:0e:8a:7a:90:3b:42:
         7e:3b:cf:28:02:7e:cb:5a:cf:be:8f:8a:d8:37:81:66:dd:5d:
         1d:e1:97:0d:4c:b9:36:4d:27:02:36:b8:bb:32:47:c2:21:59:
         07:15:e6:16:f5:6c:f8:cd:60:4b:b9:7f:a8:28:55:90:4f:a1:
         a5:e5:37:c6:98:86:52:c0:ff:07:39:d9:3f:ef:d4:00:3d:26:
         8d:c9:c2:76:b1:d5:c6:8f:c8:e8:82:d2:cd:51:14:47:4e:93:
         ea:9c:96:85
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMJwxe/BUueE9ee3VNtnUz1pJVQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNFNTQwMTJFNkY2NTVFODZGMDY1MjBBODkzMTM3Mzg1
NTBBMDNFRjAeFw0yNjA1MDMwMjA5MjFaFw0yNzA1MDIwMjE0MjFaMDMxMTAvBgNV
BAMTKENGNzEzQ0QwNUQ5QThCQTQzRTExNUEzMDJBQzZBRTZFODg3QTk0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/7yOox/7x+TBPLejZAfUS5ul
0/FHpi6BMNK+7RtJ/2mLgtyjVgqvJMeRFHr73JTTykBiYDx0K0gnhgOXg82sUDua
5l6PmfUVqKvhw5KJw45jrttz7XiEgmOjrSjT0m5mFQxGSFXhieFU37PrXRqK8gIk
0Xx4GHRDB2inrxsLaub/FE42hVAGsfCKtlrSEqRwISgrAaU7W4PPWj/i9UGrMYFz
tlBTj1ihsTQByGjBwVC/4QChfcLB+iqbUT60200hol8DnAKfHSGGMkQcmRhxfjAD
t7jxGS9AIE+QTlh4itXtsCB25s5ChCtMSc4LKj7iuSxWLu+dCYlfRtQUQaMZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUz3E80F2ai6Q+EVowKsauboh6lNswHwYDVR0j
BBgwFoAUE+VAEub2VehvBlIKiTE3OFUKA+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTJmODA4YTQtOWRiMy00Njk4LWEwN2ItNDc2OWRjZTE4ZWM3LzAvMTNFNTQwMTJF
NkY2NTVFODZGMDY1MjBBODkzMTM3Mzg1NTBBMDNFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8xM0U1NDAxMkU2RjY1NUU4NkYwNjUyMEE4OTMxMzczODU1MEEw
M0VGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzEyZjgwOGE0LTlkYjMtNDY5OC1h
MDdiLTQ3NjlkY2UxOGVjNy8wLzMxMzYzMDJlMzEzOTJlMzEzNTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBOcMA0GCSqG
SIb3DQEBCwUAA4IBAQAG2oh2CY8rRa8YJWKzbGfPtCLdsL72Bg3D290nlT99u7WA
pcvSIgpw59hC4k93OdiGHygOUC5pjc/nVgI1Zk7XBjwl3elmegirphqUHKeCJTHq
Nq2UtYLdXMetWh0Wc7aZWtZnDvK7HJ6hC5z5kZCs6ov1Zze77XQzk1alWBfWvSBP
SuDsPq8DUTZhIdYecVBk1HZALA7TtXGH+GIOinqQO0J+O88oAn7LWs++j4rYN4Fm
3V0d4ZcNTLk2TScCNri7MkfCIVkHFeYW9Wz4zWBLuX+oKFWQT6Gl5TfGmIZSwP8H
Odk/79QAPSaNycJ2sdXGj8jogtLNURRHTpPqnJaF
-----END CERTIFICATE-----
Generated at Wed May 13 06:08:13 2026 by rpki-client