Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa
File:                     3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          QME/pBUvHikqT9rtnZPTg9o0f1I9fV6K/fmu0Ood5pA=
Subject key identifier:   66:6D:D1:48:60:B1:76:EA:6B:A1:EF:4C:93:32:43:23:C2:C1:58:E8
Certificate issuer:       /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Certificate serial:       39722BE10614B322EC7911F5DFF1E3C4871B0ABD
Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa
Signing time:             Sun 03 May 2026 02:31:07 +0000
ROA not before:           Sun 03 May 2026 02:26:07 +0000
ROA not after:            Sun 02 May 2027 02:31:07 +0000
asID:                     149746
IP address blocks:        160.25.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
                          rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:72:2b:e1:06:14:b3:22:ec:79:11:f5:df:f1:e3:c4:87:1b:0a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
        Validity
            Not Before: May  3 02:26:07 2026 GMT
            Not After : May  2 02:31:07 2027 GMT
        Subject: CN=666DD14860B176EA6BA1EF4C93324323C2C158E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:80:6c:a3:79:ad:9e:8d:48:43:ba:ea:93:
                    61:dc:ff:b6:f7:b0:3c:4e:37:39:e6:5f:58:e7:df:
                    2e:3d:42:79:77:98:7b:aa:08:d8:b5:2c:28:67:fe:
                    12:2d:eb:3a:04:2b:f7:ee:72:30:f2:55:c3:4a:ea:
                    a7:c6:92:fc:79:cc:03:a7:15:87:41:8a:5d:7f:43:
                    a4:7f:86:c7:dc:df:e1:fe:ac:d2:a3:f7:b3:d6:19:
                    20:64:2c:03:8d:e3:f6:dd:6a:c9:72:c5:32:ed:2e:
                    0a:41:23:0d:13:bd:45:5c:84:df:19:f0:b4:7f:ab:
                    b2:2e:85:09:09:10:b5:b9:02:61:d3:04:cd:c2:fe:
                    27:a9:a6:25:57:73:3c:b6:99:e8:cb:f6:3f:f2:6a:
                    6a:37:06:c4:f0:13:2b:e2:69:36:68:cc:4d:45:57:
                    9d:6f:39:89:b6:6d:73:9e:47:d8:d8:c2:00:1f:25:
                    9a:77:89:3f:0d:1d:9c:ae:f4:e8:cd:9c:cf:d7:6b:
                    68:5a:c7:7e:c8:92:fa:1e:62:8c:bf:5a:cb:9e:69:
                    71:45:01:8e:1a:1f:88:d0:f2:94:25:4f:56:17:aa:
                    83:55:85:f9:a3:ef:9a:ab:4d:77:14:45:d8:5f:b8:
                    eb:52:53:5a:11:4b:29:17:77:3a:f9:41:84:1c:51:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:D1:48:60:B1:76:EA:6B:A1:EF:4C:93:32:43:23:C2:C1:58:E8
            X509v3 Authority Key Identifier:
                keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:8a:70:7d:30:7d:bc:4b:65:b0:10:39:84:1d:0d:4c:52:
         7a:7c:6d:e6:b8:76:79:2e:07:7b:02:8d:0e:0e:72:be:93:71:
         e4:92:dc:fb:37:e5:68:35:5e:3b:a6:81:80:4a:cf:48:1f:95:
         8a:df:85:eb:fb:fa:29:c3:ca:82:88:ea:7a:a2:d4:db:c7:0c:
         a5:2d:f2:3e:80:b2:55:90:a8:f6:78:4e:fb:d5:bb:75:db:8e:
         4d:66:c1:d1:ed:8b:9c:4f:6c:63:3a:36:54:a6:90:a9:3e:f3:
         5f:29:d4:24:9c:1b:ed:ae:25:9e:cc:f6:42:2e:25:13:80:1a:
         44:91:a7:3a:eb:f6:6a:0f:6c:a9:54:0b:8d:fc:52:eb:86:3b:
         69:6a:ea:d0:06:67:28:8f:8a:3b:d9:1c:12:1f:9b:a6:67:4c:
         4a:9f:72:50:a1:52:b4:6d:a9:d3:32:5d:f2:5b:d4:5f:6e:bf:
         90:05:dc:bd:de:91:7c:a8:45:c8:9a:8e:ec:ff:58:1a:88:a2:
         95:08:89:e6:c7:17:5a:5a:17:5a:e2:d8:cb:fd:9b:00:89:90:
         ce:32:7b:8f:ef:0c:7e:24:f5:47:2a:95:dc:73:b6:63:70:cb:
         c5:00:9e:a8:29:5a:15:da:2f:38:c8:83:ac:b3:87:4a:4a:b1:
         54:0f:14:05
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOXIr4QYUsyLseRH13/HjxIcbCr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz
NzcyOEQ1NDAeFw0yNjA1MDMwMjI2MDdaFw0yNzA1MDIwMjMxMDdaMDMxMTAvBgNV
BAMTKDY2NkREMTQ4NjBCMTc2RUE2QkExRUY0QzkzMzI0MzIzQzJDMTU4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKoBso3mtno1IQ7rqk2Hc/7b3
sDxONznmX1jn3y49Qnl3mHuqCNi1LChn/hIt6zoEK/fucjDyVcNK6qfGkvx5zAOn
FYdBil1/Q6R/hsfc3+H+rNKj97PWGSBkLAON4/bdaslyxTLtLgpBIw0TvUVchN8Z
8LR/q7IuhQkJELW5AmHTBM3C/ieppiVXczy2mejL9j/yamo3BsTwEyviaTZozE1F
V51vOYm2bXOeR9jYwgAfJZp3iT8NHZyu9OjNnM/Xa2hax37IkvoeYoy/WsueaXFF
AY4aH4jQ8pQlT1YXqoNVhfmj75qrTXcURdhfuOtSU1oRSykXdzr5QYQcUbGfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZm3RSGCxduproe9MkzJDI8LBWOgwHwYDVR0j
BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5
OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4
RDU0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ5ZWNhNTBiLTU3MjItNDkxOC04
MzE0LTg1OWQzYzFmNTVhMi8wLzMxMzYzMDJlMzIzNTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZMzANBgkqhkiG
9w0BAQsFAAOCAQEAUOWKcH0wfbxLZbAQOYQdDUxSenxt5rh2eS4HewKNDg5yvpNx
5JLc+zflaDVeO6aBgErPSB+Vit+F6/v6KcPKgojqeqLU28cMpS3yPoCyVZCo9nhO
+9W7dduOTWbB0e2LnE9sYzo2VKaQqT7zXynUJJwb7a4lnsz2Qi4lE4AaRJGnOuv2
ag9sqVQLjfxS64Y7aWrq0AZnKI+KO9kcEh+bpmdMSp9yUKFStG2p0zJd8lvUX26/
kAXcvd6RfKhFyJqO7P9YGoiilQiJ5scXWloXWuLYy/2bAImQzjJ7j+8MfiT1RyqV
3HO2Y3DLxQCeqClaFdovOMiDrLOHSkqxVA8UBQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:50:41 2026 by rpki-client