Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
File:                     3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (raw, json)
Hash identifier:          fT+ijd0/vxnImzejYzyk0a9FLi5T/K3JxSUJprhaarY=
Subject key identifier:   27:72:9D:B8:9B:FA:6F:90:CB:10:B9:C3:4C:D3:52:73:67:DC:E7:C4
Certificate issuer:       /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial:       5A3E22F765BE404006DF2431B1F1C80B527E7DD3
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa
Signing time:             Sun 03 May 2026 02:25:18 +0000
ROA not before:           Sun 03 May 2026 02:20:18 +0000
ROA not after:            Sun 02 May 2027 02:25:18 +0000
asID:                     152825
IP address blocks:        160.22.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
                          rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3e:22:f7:65:be:40:40:06:df:24:31:b1:f1:c8:0b:52:7e:7d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
        Validity
            Not Before: May  3 02:20:18 2026 GMT
            Not After : May  2 02:25:18 2027 GMT
        Subject: CN=27729DB89BFA6F90CB10B9C34CD3527367DCE7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:f8:da:9c:2b:93:58:60:fc:ea:63:02:f0:
                    c2:b6:59:46:a1:75:f3:13:7c:b1:cc:15:c6:ee:df:
                    7f:04:28:a7:6a:ec:62:02:64:23:6a:8c:11:0f:5c:
                    7c:18:2d:60:7e:2c:ae:c4:5e:34:46:9b:0d:3a:53:
                    98:05:7b:24:37:8a:75:ec:0d:70:07:2f:de:38:5e:
                    4b:fa:42:f8:e5:b5:ca:b9:46:e1:62:d9:df:91:8f:
                    7b:cc:ff:27:19:b7:a7:f7:91:91:40:01:5c:61:ce:
                    14:39:b2:98:f0:ce:ce:c9:51:82:99:45:e8:66:f9:
                    7b:a7:4c:66:01:a3:4a:9d:56:a8:4f:fd:80:00:a9:
                    ad:6b:eb:c2:cd:b4:9d:c3:da:68:27:16:8c:e4:c7:
                    8b:cb:a0:eb:99:65:32:69:8c:02:aa:39:b7:6d:d5:
                    44:01:43:e8:7f:d3:a3:44:7a:e2:4e:72:95:e6:cc:
                    34:49:64:cf:43:2c:a6:43:22:60:30:35:0d:d7:14:
                    50:67:44:33:8d:f1:df:7e:4d:11:eb:71:34:2c:d2:
                    6c:b4:f1:17:98:f4:2f:56:4c:ff:e1:62:74:44:cd:
                    fe:71:3b:a2:56:a9:e9:0b:2b:d5:92:3e:4d:75:77:
                    ce:01:92:26:f0:5c:50:6c:17:4a:92:1a:5c:23:64:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:72:9D:B8:9B:FA:6F:90:CB:10:B9:C3:4C:D3:52:73:67:DC:E7:C4
            X509v3 Authority Key Identifier:
                keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:11:d2:50:26:4b:80:66:ed:66:dc:99:81:c5:81:a2:db:
         70:8e:90:66:04:7e:be:33:a7:8b:d4:08:69:cc:e7:e1:16:d8:
         62:0a:df:8d:32:ba:3f:74:71:da:7e:b6:90:ff:16:90:6b:3f:
         98:28:e0:b0:c5:34:d8:48:f1:46:59:80:a4:06:00:66:8e:5c:
         54:5d:c3:5c:da:8a:4a:44:84:a8:61:1f:01:26:88:44:eb:67:
         e8:e9:5f:2b:e3:56:43:7b:6f:0d:9f:03:72:55:39:6d:3a:dc:
         c7:70:4c:61:de:f2:54:86:e1:df:3d:f4:aa:0f:3b:74:6e:1d:
         52:c8:2f:2f:f3:be:fe:30:68:4f:0d:f7:13:c0:e9:79:d3:f5:
         e1:9c:93:1b:a6:13:2f:80:5c:21:63:e7:b4:e0:da:e4:1a:47:
         f9:3f:31:1f:02:b6:31:de:2b:19:db:eb:8a:6d:6e:10:c0:d7:
         96:95:a5:93:ee:12:b5:2b:d7:3d:38:5f:ec:c0:e9:03:2f:bd:
         57:79:37:dd:c9:2d:76:75:75:5d:f8:4f:20:6e:fc:49:73:36:
         2a:5e:b9:96:d5:0c:29:da:12:af:7e:a8:6d:d3:9b:3c:28:65:
         b0:98:d5:be:78:0f:77:0d:68:64:5c:15:57:ca:73:f7:18:cb:
         b1:fc:42:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:38 2026 by rpki-client