Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa
File:                     3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (raw, json)
Hash identifier:          TOy78GGmZmDA6OtrgiUd51MTS8SFXQdRl3WQeCtShh4=
Subject key identifier:   48:AA:C0:60:AC:CB:B3:3E:AD:7A:16:CE:56:EC:A3:06:42:78:BB:F4
Certificate issuer:       /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Certificate serial:       33BFA3C1F93C925F681365BBFE6932D03B2E88B4
Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa
Signing time:             Sun 03 May 2026 02:31:08 +0000
ROA not before:           Sun 03 May 2026 02:26:08 +0000
ROA not after:            Sun 02 May 2027 02:31:08 +0000
asID:                     149746
IP address blocks:        160.25.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
                          rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bf:a3:c1:f9:3c:92:5f:68:13:65:bb:fe:69:32:d0:3b:2e:88:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
        Validity
            Not Before: May  3 02:26:08 2026 GMT
            Not After : May  2 02:31:08 2027 GMT
        Subject: CN=48AAC060ACCBB33EAD7A16CE56ECA3064278BBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:62:dd:1f:cf:46:ca:f5:c6:79:39:fd:00:
                    9b:be:5f:09:5d:dd:87:87:c3:4f:aa:b9:e9:b4:87:
                    7d:ed:bd:42:b2:49:80:b6:60:ab:5b:ea:f3:21:10:
                    98:84:ba:66:51:3a:db:75:12:55:52:cb:74:af:c2:
                    eb:c9:0c:17:12:79:b1:62:1d:89:21:3d:be:40:5c:
                    02:97:d6:c5:f1:bd:1c:be:ee:29:42:2b:bc:5e:a3:
                    3a:18:b0:d5:e5:59:50:0e:8e:8f:5d:d6:bd:b8:a9:
                    12:69:e6:41:f6:05:ed:c5:dd:5f:f7:6f:03:33:65:
                    1f:36:1c:b7:fb:f7:eb:e0:34:81:d2:92:4a:bb:a4:
                    16:b1:3a:85:c4:a7:9a:b7:32:0f:3f:28:22:e4:1a:
                    fe:e8:34:34:76:27:ae:16:8e:69:5f:02:9a:99:9b:
                    6e:88:98:28:7b:f7:53:aa:26:f9:b7:99:f8:5c:83:
                    ef:e7:ec:9b:00:d7:25:1f:4f:b1:e3:27:cf:ef:7d:
                    02:54:d1:0a:2c:94:17:2a:c1:ae:9d:7a:a6:28:0e:
                    6a:82:5c:bc:1c:e0:48:14:ba:7a:93:6c:34:2d:a2:
                    a9:d0:d8:db:1c:de:3e:1a:fe:6a:2a:a8:eb:fd:07:
                    0f:cb:3f:bc:41:3b:f7:ff:52:5f:5e:19:18:f9:f2:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:C0:60:AC:CB:B3:3E:AD:7A:16:CE:56:EC:A3:06:42:78:BB:F4
            X509v3 Authority Key Identifier:
                keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3233203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:33:e8:c5:cf:4e:f1:f4:40:2a:b8:2e:3c:df:4b:93:40:
         1f:36:1c:ea:64:a0:e0:fa:98:e3:4e:90:f1:55:99:08:51:29:
         09:ad:ad:9e:b3:6b:09:aa:2f:95:3b:24:2d:e8:ff:5a:9d:5a:
         fa:12:1e:9f:f5:65:80:e8:3e:90:a1:81:50:65:80:ee:8e:a7:
         77:0f:cc:7e:37:e6:80:9b:eb:91:a0:00:5b:d4:5e:1d:ba:81:
         ef:1b:7f:a9:72:10:a3:9f:09:10:a7:72:81:31:df:52:f6:24:
         ca:d5:f1:22:80:68:28:0f:45:23:28:82:fa:eb:44:3d:c8:c1:
         f3:94:15:64:42:9f:e2:fa:49:f6:6b:f4:02:56:83:dd:26:b2:
         07:41:42:3c:36:f3:0d:41:e9:94:19:6f:4d:22:20:60:bc:ba:
         18:1e:c7:70:b0:65:93:81:8a:ac:9f:71:2a:1e:a0:78:08:65:
         4e:0d:d8:14:97:b8:a3:fb:db:94:da:72:68:76:10:62:e9:40:
         9a:6c:14:2f:cd:5e:c0:4d:25:33:33:7a:ea:05:b4:7d:71:a2:
         7a:3b:60:53:ea:d3:3f:ce:84:22:cf:ef:e1:59:c0:0e:5c:27:
         f0:55:ee:58:7d:ae:92:1f:d1:d9:6b:9c:fc:f2:3a:5a:dd:13:
         9c:a4:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:46 2026 by rpki-client