Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa
File:                     3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa (raw, json)
Hash identifier:          GvfJPx0m84FZdwqXoN6lWJ86xXd2jONGdjvxcJWy97o=
Subject key identifier:   39:A1:33:7A:5C:E8:C9:D4:90:D9:BA:A4:A2:05:BC:82:81:1F:C4:B2
Certificate issuer:       /CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
Certificate serial:       2D68746DCF6FAB1955226E056F2917EE613AC8EB
Authority key identifier: 0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa
Signing time:             Sun 03 May 2026 02:32:06 +0000
ROA not before:           Sun 03 May 2026 02:27:06 +0000
ROA not after:            Sun 02 May 2027 02:32:06 +0000
asID:                     152773
IP address blocks:        160.19.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl
                          rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:68:74:6d:cf:6f:ab:19:55:22:6e:05:6f:29:17:ee:61:3a:c8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0EBBBA7E22C85B3473A013CFDD321254D568AC
        Validity
            Not Before: May  3 02:27:06 2026 GMT
            Not After : May  2 02:32:06 2027 GMT
        Subject: CN=39A1337A5CE8C9D490D9BAA4A205BC82811FC4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:23:64:cd:5d:c7:6a:07:f8:55:cb:84:67:
                    81:b5:9e:09:6c:30:73:b0:4b:7a:32:d0:cd:1a:8d:
                    46:56:cd:13:42:1b:81:99:ea:60:d7:ca:0f:ef:92:
                    83:3f:f0:04:c5:4f:c0:ca:b1:32:ff:31:8c:46:73:
                    a3:b2:a2:23:8d:74:85:e8:67:ba:d3:2c:43:48:fb:
                    3f:20:a6:36:46:ee:57:df:83:0b:c7:d4:5a:23:dc:
                    94:8a:ca:62:17:ce:89:f5:aa:82:74:d8:10:bf:2e:
                    ef:c8:e2:06:ad:88:4d:e1:d8:18:e6:54:4d:b4:ac:
                    77:b1:ab:99:33:b0:74:dc:f8:fb:de:d9:99:7a:fb:
                    e1:2d:fc:e8:82:54:0c:96:76:ed:09:4c:9c:10:f2:
                    84:54:02:41:3e:0b:27:c0:72:d3:e8:28:12:9a:1d:
                    66:4e:65:82:8f:80:24:e2:d1:65:6d:c9:c7:55:d4:
                    db:64:64:94:82:91:dc:f7:b2:61:3a:b4:f7:c2:a6:
                    5b:f8:1b:7a:11:b6:ac:71:c2:03:ef:a8:33:f2:27:
                    ac:04:ed:48:4b:5e:6c:9f:e1:e3:bb:99:ff:a2:04:
                    9f:f9:02:87:e7:12:10:bd:fb:61:a8:1a:7c:94:45:
                    8e:29:19:99:41:48:23:81:19:da:08:70:33:f3:cb:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:33:7A:5C:E8:C9:D4:90:D9:BA:A4:A2:05:BC:82:81:1F:C4:B2
            X509v3 Authority Key Identifier:
                keyid:0E:0E:BB:BA:7E:22:C8:5B:34:73:A0:13:CF:DD:32:12:54:D5:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0E0EBBBA7E22C85B3473A013CFDD321254D568AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d9b3519-3df3-4406-828f-3ebb91d92944/0/3136302e31392e3131302e302f32332d3234203d3e20313532373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:33:22:35:92:23:e1:50:b9:65:d7:6a:1e:40:60:6e:4a:
         e7:d8:e6:4f:c1:39:ec:0b:85:b9:af:15:9f:c3:75:f6:85:ca:
         94:8d:6b:ef:f0:d1:95:e9:6b:eb:15:c1:f0:3e:be:b5:8e:f7:
         dd:cd:d1:18:45:9b:07:7b:6f:84:65:72:70:32:e4:9d:a2:1b:
         0c:f2:72:92:06:14:84:f5:fa:a2:a3:7d:8f:77:db:29:20:66:
         3d:dc:e3:ce:8c:09:a4:47:d9:f7:e3:5a:38:c6:67:f7:d2:30:
         f8:f7:24:5a:4b:ef:6e:fb:ca:f0:fd:65:04:a5:cf:29:72:99:
         9a:00:d3:ed:d6:ec:7e:63:27:f7:a3:44:3c:cf:2d:cd:38:3a:
         5d:6c:13:c7:4a:26:63:61:1f:cd:46:15:61:78:17:6e:13:82:
         db:1f:ac:b8:70:45:99:49:7e:09:0c:9a:af:41:eb:4d:24:ec:
         b2:bc:d5:bf:e0:62:14:79:95:a2:be:c4:14:db:2c:81:68:8d:
         94:e2:66:e9:6c:fc:8e:c9:99:0a:ff:b7:5e:5d:88:95:03:31:
         87:63:54:88:c4:46:5a:46:38:1f:e8:7e:3f:40:5f:73:92:dd:
         1e:e0:aa:6b:38:28:f2:a7:6e:ea:ea:fc:44:7e:b4:e6:98:48:
         51:e7:11:ca
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULWh0bc9vqxlVIm4FbykX7mE6yOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUwRUJCQkE3RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1
NEQ1NjhBQzAeFw0yNjA1MDMwMjI3MDZaFw0yNzA1MDIwMjMyMDZaMDMxMTAvBgNV
BAMTKDM5QTEzMzdBNUNFOEM5RDQ5MEQ5QkFBNEEyMDVCQzgyODExRkM0QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPiNkzV3Hagf4VcuEZ4G1ngls
MHOwS3oy0M0ajUZWzRNCG4GZ6mDXyg/vkoM/8ATFT8DKsTL/MYxGc6OyoiONdIXo
Z7rTLENI+z8gpjZG7lffgwvH1Foj3JSKymIXzon1qoJ02BC/Lu/I4gatiE3h2Bjm
VE20rHexq5kzsHTc+Pve2Zl6++Et/OiCVAyWdu0JTJwQ8oRUAkE+CyfActPoKBKa
HWZOZYKPgCTi0WVtycdV1NtkZJSCkdz3smE6tPfCplv4G3oRtqxxwgPvqDPyJ6wE
7UhLXmyf4eO7mf+iBJ/5AofnEhC9+2GoGnyURY4pGZlBSCOBGdoIcDPzy//hAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOaEzelzoydSQ2bqkogW8goEfxLIwHwYDVR0j
BBgwFoAUDg67un4iyFs0c6ATz90yElTVaKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGQ5YjM1MTktM2RmMy00NDA2LTgyOGYtM2ViYjkxZDkyOTQ0LzAvMEUwRUJCQkE3
RTIyQzg1QjM0NzNBMDEzQ0ZERDMyMTI1NEQ1NjhBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wRTBFQkJCQTdFMjJDODVCMzQ3M0EwMTNDRkREMzIxMjU0RDU2
OEFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRkOWIzNTE5LTNkZjMtNDQwNi04
MjhmLTNlYmI5MWQ5Mjk0NC8wLzMxMzYzMDJlMzEzOTJlMzEzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNuMA0GCSqG
SIb3DQEBCwUAA4IBAQBawTMiNZIj4VC5ZddqHkBgbkrn2OZPwTnsC4W5rxWfw3X2
hcqUjWvv8NGV6WvrFcHwPr61jvfdzdEYRZsHe2+EZXJwMuSdohsM8nKSBhSE9fqi
o32Pd9spIGY93OPOjAmkR9n341o4xmf30jD49yRaS+9u+8rw/WUEpc8pcpmaANPt
1ux+Yyf3o0Q8zy3NODpdbBPHSiZjYR/NRhVheBduE4LbH6y4cEWZSX4JDJqvQetN
JOyyvNW/4GIUeZWivsQU2yyBaI2U4mbpbPyOyZkK/7deXYiVAzGHY1SIxEZaRjgf
6H4/QF9zkt0e4KprOCjyp27q6vxEfrTmmEhR5xHK
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:43 2026 by rpki-client