Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa
File:                     3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (raw, json)
Hash identifier:          eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=
Subject key identifier:   87:88:EF:F0:F2:17:79:EA:22:C4:0F:7A:99:5A:F3:BB:D8:69:97:21
Certificate issuer:       /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3
Certificate serial:       26AC558B8000E3FEA1414EEDB1F03E6AA4B4149D
Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa
Signing time:             Sun 03 May 2026 02:19:05 +0000
ROA not before:           Sun 03 May 2026 02:14:05 +0000
ROA not after:            Sun 02 May 2027 02:19:05 +0000
asID:                     153129
IP address blocks:        160.191.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl
                          rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ac:55:8b:80:00:e3:fe:a1:41:4e:ed:b1:f0:3e:6a:a4:b4:14:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3
        Validity
            Not Before: May  3 02:14:05 2026 GMT
            Not After : May  2 02:19:05 2027 GMT
        Subject: CN=8788EFF0F21779EA22C40F7A995AF3BBD8699721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:ae:90:42:37:55:5a:fd:7a:e3:a3:7f:ea:
                    36:23:71:99:60:57:a2:af:64:fc:15:c5:c1:01:94:
                    81:37:93:57:54:58:82:4a:63:7e:19:9f:07:35:c6:
                    c5:97:8d:07:67:48:a3:15:cc:d7:46:30:48:1b:22:
                    74:2b:f4:92:97:f2:24:36:a9:fd:80:25:9f:2b:83:
                    db:32:a8:be:c4:88:e1:99:f4:ae:3d:36:69:90:e3:
                    e8:fc:d8:87:11:cc:e3:05:a1:1a:8e:1c:eb:ea:3c:
                    a1:50:61:76:8a:d2:b1:7a:f0:6f:93:d2:c1:38:b5:
                    ed:bb:83:9b:bb:a9:fb:28:8d:d5:15:2c:e5:23:12:
                    93:6e:97:09:3f:34:f0:7c:6e:04:a2:39:fe:61:de:
                    34:7e:e8:5a:c6:24:7e:81:d9:44:7b:27:92:24:99:
                    c1:72:c6:e6:6b:f0:9d:2f:3b:25:50:0c:38:09:3d:
                    3b:09:e1:3d:d1:e2:b0:80:79:d9:2e:eb:84:4a:35:
                    14:3b:54:5c:2f:3d:66:53:08:85:62:b6:64:25:fa:
                    c2:ae:af:a5:21:be:d3:c0:32:9b:3d:ee:38:87:53:
                    93:08:c6:67:02:81:9c:f1:ff:05:bb:a0:d2:1f:0c:
                    f1:44:b2:7b:7c:8c:5b:bb:bc:16:2f:9c:d3:df:48:
                    d5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:88:EF:F0:F2:17:79:EA:22:C4:0F:7A:99:5A:F3:BB:D8:69:97:21
            X509v3 Authority Key Identifier:
                keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:08:70:42:56:ec:c3:68:f8:2c:65:13:7e:8f:e4:1d:f3:9e:
         f9:18:a2:03:cd:cd:fc:6b:b1:49:4b:5d:d4:80:85:0d:5c:88:
         7e:d5:18:da:e2:b9:f2:2f:fd:7f:7a:60:f2:1e:54:45:c7:c3:
         09:d5:c5:8c:f0:7c:f7:ad:9c:13:64:d1:01:d3:ed:21:b2:66:
         67:d5:6b:ce:0f:4f:08:17:9d:fa:f4:79:2e:d4:06:4b:a4:0b:
         88:10:40:52:62:5b:a9:32:2b:3b:a9:6c:34:16:cb:aa:f6:42:
         56:96:ac:d4:41:16:b3:c8:83:55:3e:14:61:80:c7:ab:a4:8d:
         08:8f:79:1d:dd:74:3e:68:14:0a:70:bf:e5:9f:13:61:3f:4f:
         1f:60:b5:5c:da:15:03:15:a4:f8:21:5e:e7:e4:29:02:28:c4:
         05:e0:78:a4:ca:08:53:3c:79:19:0a:a9:f0:d1:30:f8:67:2e:
         d4:75:fc:73:77:ff:c3:97:a1:5d:4c:68:3d:0b:b2:e9:ec:4a:
         08:ad:0c:7a:53:36:a4:c2:83:a2:53:53:8a:d0:20:8a:00:2d:
         f6:ce:aa:39:4c:c3:88:58:2c:77:8d:78:67:ab:8f:38:04:5b:
         b9:7a:19:30:be:38:b3:3e:e3:52:da:c2:0b:19:90:9d:f9:4e:
         ba:ab:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:58 2026 by rpki-client