Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa
File:                     3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=
Subject key identifier:   20:F4:00:A0:16:A5:99:E0:FD:78:BB:B1:11:AD:6B:4F:DA:6E:AC:C4
Certificate issuer:       /CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Certificate serial:       7DC3E35276F25D0DF386B81A5E3744F582F03538
Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa
Signing time:             Sun 03 May 2026 02:33:51 +0000
ROA not before:           Sun 03 May 2026 02:28:51 +0000
ROA not after:            Sun 02 May 2027 02:33:51 +0000
asID:                     138115
IP address blocks:        160.19.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
                          rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c3:e3:52:76:f2:5d:0d:f3:86:b8:1a:5e:37:44:f5:82:f0:35:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A
        Validity
            Not Before: May  3 02:28:51 2026 GMT
            Not After : May  2 02:33:51 2027 GMT
        Subject: CN=20F400A016A599E0FD78BBB111AD6B4FDA6EACC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:b8:e5:57:0f:6a:c8:e5:0d:00:2a:e4:af:
                    88:3e:2c:67:0a:f8:a1:2f:41:65:5b:2f:6d:af:7f:
                    38:e0:48:a3:7a:7a:f3:ca:c8:70:d0:a4:50:0d:6f:
                    ed:8c:74:24:14:33:ea:c7:af:4f:68:a9:a9:ae:df:
                    56:e1:ae:e9:6a:7d:a2:e1:6a:f3:a3:e2:6f:36:3f:
                    9f:d3:7b:18:26:72:a8:38:28:d2:fa:c3:88:ee:44:
                    61:da:6f:3d:2a:4b:5d:ca:ba:b1:6f:54:c8:5e:60:
                    7d:3b:b8:c7:fa:15:40:42:e1:e8:6a:19:6a:98:9d:
                    82:8c:1a:71:57:21:31:1e:f2:3f:56:e5:15:97:31:
                    2a:89:0f:d9:39:d1:98:fe:98:8e:16:0c:de:23:16:
                    06:ba:44:e8:37:f4:40:57:58:db:48:ba:46:b1:43:
                    15:92:99:4a:91:3d:bc:22:0c:57:1b:75:c4:31:38:
                    27:4d:a3:ad:f5:c4:0e:64:11:96:63:0a:84:52:08:
                    87:e8:9e:cd:84:2a:51:5d:c2:bd:42:32:4e:1e:c7:
                    74:34:cf:97:71:33:a3:99:f3:d6:20:c0:ee:7f:b9:
                    7b:fa:55:24:c1:b9:37:20:ab:e0:fb:ad:c7:3f:5f:
                    4a:8b:fb:ce:83:8c:c7:b5:a6:f2:e0:13:47:85:e5:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:00:A0:16:A5:99:E0:FD:78:BB:B1:11:AD:6B:4F:DA:6E:AC:C4
            X509v3 Authority Key Identifier:
                keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:a2:1c:de:95:37:21:64:89:66:9e:1d:24:09:11:ef:49:
         b4:78:f3:95:89:7b:1c:2e:9c:48:25:fb:2e:7e:cf:29:bb:ee:
         87:ca:67:94:e8:7b:63:3b:0b:a7:53:51:99:5c:4e:cf:ff:0c:
         26:85:64:54:72:43:46:4a:c8:88:d6:4f:75:6b:0c:94:01:5d:
         b5:ed:eb:46:9d:ad:82:c7:7c:ca:3a:09:9a:f2:3f:be:e7:80:
         4e:8e:01:0e:1b:42:93:76:53:84:de:d1:27:09:57:9d:58:06:
         6a:93:7f:41:8d:30:38:cd:03:3e:d5:fd:47:e7:61:0e:9b:4d:
         d0:05:4f:b2:fc:de:5c:15:ad:8f:49:77:a5:e2:84:98:92:18:
         2d:af:3a:c8:74:cb:9a:c6:70:a1:0a:13:a3:4c:12:c5:72:88:
         41:8c:78:d5:fb:de:ce:e2:4f:27:dc:6b:9d:91:10:64:dc:a0:
         fc:7b:d4:d2:83:cf:e7:cd:36:a7:4b:fd:c0:33:ad:cf:77:b4:
         24:72:ca:3a:59:65:60:47:8a:6d:46:a6:26:38:e6:74:13:bd:
         a5:1a:9e:99:4d:a7:1e:ed:b0:1a:be:fa:66:ea:6d:fa:43:3a:
         b6:94:53:6d:2e:bd:0c:4a:b3:1c:6e:21:76:7e:be:39:f8:e8:
         d8:1e:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:24 2026 by rpki-client