Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa
File:                     3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (raw, json)
Hash identifier:          Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=
Subject key identifier:   58:91:4A:68:9C:4B:20:E7:26:7A:CB:49:CD:45:6A:20:BD:B5:84:D4
Certificate issuer:       /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Certificate serial:       39A0861532C9FBC0AFD3DC4B8BAE61F1036403F3
Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa
Signing time:             Sun 03 May 2026 02:30:50 +0000
ROA not before:           Sun 03 May 2026 02:25:50 +0000
ROA not after:            Sun 02 May 2027 02:30:50 +0000
asID:                     153132
IP address blocks:        160.187.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
                          rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a0:86:15:32:c9:fb:c0:af:d3:dc:4b:8b:ae:61:f1:03:64:03:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
        Validity
            Not Before: May  3 02:25:50 2026 GMT
            Not After : May  2 02:30:50 2027 GMT
        Subject: CN=58914A689C4B20E7267ACB49CD456A20BDB584D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:cf:a9:be:49:29:09:90:8d:aa:8b:aa:25:
                    b6:45:72:cd:aa:ee:56:a5:1b:35:6c:b6:aa:2a:c4:
                    f0:cd:4c:52:a4:96:48:e9:0e:ba:94:9b:e0:23:83:
                    5c:e6:82:4c:6f:5b:7e:d3:d6:fc:56:31:e6:04:a1:
                    9c:f7:13:60:69:3d:72:46:6c:8d:d0:65:f5:3f:8b:
                    1c:04:05:c3:d9:26:d4:17:30:08:04:3d:45:76:6d:
                    c0:0d:73:2c:b1:7a:64:44:12:dc:a7:17:d6:b6:36:
                    1f:47:89:14:ff:0a:70:f9:7d:06:48:92:af:29:e8:
                    d5:23:a5:4f:39:be:9d:a6:8e:7c:f2:0d:db:af:93:
                    dc:76:8b:f3:1b:12:f9:46:c0:d8:b5:b4:59:87:7a:
                    3d:29:c8:f0:5e:08:f2:06:89:d9:ed:87:b7:9e:d5:
                    78:c3:b3:84:05:77:12:c1:cd:87:b3:a9:90:9e:63:
                    50:6d:1c:68:43:ec:8a:1c:b8:0c:b3:e4:1a:cc:4f:
                    f4:7e:ff:9e:64:86:5d:ab:e1:8b:6b:f6:91:22:20:
                    d5:d1:30:ea:35:c3:74:bc:32:e2:0b:d6:70:9f:08:
                    6d:26:60:51:ca:f3:91:da:f2:45:e0:76:0e:e0:2f:
                    7d:43:89:7c:bb:9b:52:bd:96:52:ae:df:26:ba:fc:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:91:4A:68:9C:4B:20:E7:26:7A:CB:49:CD:45:6A:20:BD:B5:84:D4
            X509v3 Authority Key Identifier:
                keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:90:36:16:a0:a3:d3:e0:f1:c6:a6:12:bb:b2:2c:c4:1e:
         94:f8:9b:95:1f:6e:77:26:b0:8a:10:3c:d0:26:77:dd:b4:ba:
         f5:8a:53:98:1d:90:6d:6e:87:0c:03:61:36:a5:02:44:df:a3:
         73:95:ca:f7:f7:45:c6:56:15:1e:38:52:55:c3:84:e6:3f:c3:
         16:36:3a:83:93:bb:a2:c6:60:96:d7:05:6f:45:b7:12:5e:4b:
         91:9c:a9:e4:06:a1:39:fd:12:c6:51:13:85:02:c2:de:b7:a8:
         03:76:86:15:9e:b3:f8:22:c0:3f:dd:38:d2:b3:1b:c0:6f:48:
         42:e2:ea:f9:8a:c2:e7:d2:a4:9b:a9:85:3a:20:bc:4b:c3:c2:
         86:79:a3:61:43:8d:e0:c4:06:c1:e6:2a:80:32:09:91:d6:19:
         2e:90:40:b1:0c:19:0c:43:af:52:74:ac:77:94:0f:85:70:d2:
         74:8a:5f:0b:90:35:3c:a1:b2:b5:9c:0d:46:bb:40:d4:bf:b6:
         8b:18:cb:93:24:e9:a4:5b:ba:22:31:5e:6e:b9:34:2b:3b:d2:
         29:28:f6:b7:39:a4:ce:51:c8:7c:88:c8:18:fe:50:ad:65:dd:
         74:6f:9e:51:62:90:f5:8b:b8:8b:69:1b:4a:d1:cc:81:6a:6e:
         17:e6:7e:d4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUOaCGFTLJ+8Cv09xLi65h8QNkA/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlFOEQyQzQ1RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5
OTJEOEIyRjAeFw0yNjA1MDMwMjI1NTBaFw0yNzA1MDIwMjMwNTBaMDMxMTAvBgNV
BAMTKDU4OTE0QTY4OUM0QjIwRTcyNjdBQ0I0OUNENDU2QTIwQkRCNTg0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeM+pvkkpCZCNqouqJbZFcs2q
7lalGzVstqoqxPDNTFKklkjpDrqUm+Ajg1zmgkxvW37T1vxWMeYEoZz3E2BpPXJG
bI3QZfU/ixwEBcPZJtQXMAgEPUV2bcANcyyxemREEtynF9a2Nh9HiRT/CnD5fQZI
kq8p6NUjpU85vp2mjnzyDduvk9x2i/MbEvlGwNi1tFmHej0pyPBeCPIGidnth7ee
1XjDs4QFdxLBzYezqZCeY1BtHGhD7IocuAyz5BrMT/R+/55khl2r4Ytr9pEiINXR
MOo1w3S8MuIL1nCfCG0mYFHK85Ha8kXgdg7gL31DiXy7m1K9llKu3ya6/KYbAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWJFKaJxLIOcmestJzUVqIL21hNQwHwYDVR0j
BBgwFoAUqejSxF2CDB/EC88DubEGmZktiy8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDgxZDU0Y2ItNTdhOS00YTE2LWE3MGUtYzVmNjAyNGUxMzlkLzAvQTlFOEQyQzQ1
RDgyMEMxRkM0MEJDRjAzQjlCMTA2OTk5OTJEOEIyRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BOUU4RDJDNDVEODIwQzFGQzQwQkNGMDNCOUIxMDY5OTk5MkQ4
QjJGLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNiLTU3YTktNGExNi1h
NzBlLWM1ZjYwMjRlMTM5ZC8wLzMxMzYzMDJlMzEzODM3MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu9owDQYJ
KoZIhvcNAQELBQADggEBAEy+kDYWoKPT4PHGphK7sizEHpT4m5UfbncmsIoQPNAm
d920uvWKU5gdkG1uhwwDYTalAkTfo3OVyvf3RcZWFR44UlXDhOY/wxY2OoOTu6LG
YJbXBW9FtxJeS5GcqeQGoTn9EsZRE4UCwt63qAN2hhWes/giwD/dONKzG8BvSELi
6vmKwufSpJuphTogvEvDwoZ5o2FDjeDEBsHmKoAyCZHWGS6QQLEMGQxDr1J0rHeU
D4Vw0nSKXwuQNTyhsrWcDUa7QNS/tosYy5Mk6aRbuiIxXm65NCs70iko9rc5pM5R
yHyIyBj+UK1l3XRvnlFikPWLuItpG0rRzIFqbhfmftQ=
-----END CERTIFICATE-----
Generated at Wed May 13 14:17:38 2026 by rpki-client