Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa
File:                     3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=
Subject key identifier:   77:4E:AC:91:F0:40:22:4D:56:FA:2C:D0:DD:95:A8:66:F9:2B:76:D5
Certificate issuer:       /CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Certificate serial:       3C13E1172EC03802A08CD584348DF1B3DB8D3688
Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa
Signing time:             Sun 03 May 2026 02:33:52 +0000
ROA not before:           Sun 03 May 2026 02:28:52 +0000
ROA not after:            Sun 02 May 2027 02:33:52 +0000
asID:                     138115
IP address blocks:        160.19.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
                          rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:e1:17:2e:c0:38:02:a0:8c:d5:84:34:8d:f1:b3:db:8d:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A
        Validity
            Not Before: May  3 02:28:52 2026 GMT
            Not After : May  2 02:33:52 2027 GMT
        Subject: CN=774EAC91F040224D56FA2CD0DD95A866F92B76D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:84:8f:b3:0d:13:d3:1f:7b:f5:39:b6:ff:
                    23:a0:e3:9b:ea:15:52:b2:88:fa:42:e8:53:78:cb:
                    34:cc:4c:58:19:bd:25:7f:06:61:a6:fe:85:4f:4e:
                    23:27:88:ec:a9:2c:b4:0f:e9:fb:76:d5:2c:67:50:
                    92:40:c3:d5:4c:5d:6e:ab:70:1a:dc:55:b5:5d:0d:
                    87:d8:fe:3f:84:57:17:5c:00:62:8a:20:03:86:d9:
                    73:90:f4:26:36:9f:20:d7:ce:9e:36:d1:34:43:43:
                    e2:72:d8:69:77:15:15:a1:0b:1b:ea:d4:af:15:6f:
                    97:96:09:ef:48:a4:04:14:55:3b:0f:19:7d:6e:0f:
                    4c:d4:56:9e:aa:d3:d3:17:aa:41:b5:6a:18:6f:57:
                    46:ee:f4:ca:87:aa:1f:cd:9a:10:35:7f:ff:8e:c6:
                    8e:92:8d:03:9a:f6:05:c6:72:7a:28:a6:4b:ec:1b:
                    9d:e9:aa:2a:0e:b4:c2:b6:97:4a:9b:d0:cd:28:04:
                    98:77:e9:16:1f:54:5c:dc:db:bc:76:a3:1b:d5:dd:
                    ae:01:07:84:cf:76:44:77:99:62:a4:17:da:2e:ad:
                    8f:2a:a9:b1:26:2d:bd:5c:58:f2:d0:09:b5:8b:cc:
                    cd:80:10:fc:27:e8:79:f3:44:66:85:da:d8:00:c4:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:AC:91:F0:40:22:4D:56:FA:2C:D0:DD:95:A8:66:F9:2B:76:D5
            X509v3 Authority Key Identifier:
                keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:10:e7:89:96:e3:fd:6a:88:ae:4e:11:76:22:3d:8f:8e:
         a0:26:77:ae:59:1f:4e:93:ef:f7:3b:fb:35:b1:d7:8c:6c:ac:
         d5:5b:44:b1:eb:9a:7c:44:2c:f2:3a:7f:55:4f:85:a7:72:ab:
         fb:d1:02:11:89:6b:bc:ca:69:89:71:52:8e:a3:90:9e:d8:0c:
         f6:10:ee:47:58:85:37:fb:cd:77:53:18:20:94:8f:b1:c4:35:
         3e:89:8d:9c:c6:d9:3e:50:7e:7b:6e:fb:78:58:66:08:29:98:
         9b:fa:52:09:cb:36:ef:ef:c8:88:75:b3:b9:67:b2:08:3f:92:
         61:1c:15:a9:2a:9b:c7:c4:bd:83:25:39:a1:4b:b4:17:d4:19:
         00:d5:63:37:a0:99:55:ba:82:d0:60:cb:f8:ae:6d:f0:32:12:
         d9:30:e9:f1:22:af:2a:54:a4:0d:f0:c2:ad:b7:e6:e7:8a:17:
         54:a5:27:10:0c:25:52:11:14:ec:0e:53:e9:66:12:63:dc:94:
         a4:48:ce:f1:2c:ae:a0:35:bf:cb:bd:90:88:ef:1a:41:75:0b:
         e5:89:6e:a4:1f:f8:51:77:2f:a8:ff:8d:cc:fa:52:b1:cd:ba:
         dc:41:88:7d:b0:53:02:51:60:b8:cd:31:30:bb:1b:ef:e2:5a:
         85:7f:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:10 2026 by rpki-client