Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
File:                     3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (raw, json)
Hash identifier:          6gZoekKimbXzQFwezQ08dgpfsSYtH0N4xMrqLiWGu2w=
Subject key identifier:   C7:41:44:85:05:0E:1F:AB:DC:14:44:E3:A0:53:AC:A3:EE:23:CD:4C
Certificate issuer:       /CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
Certificate serial:       0D4A658FACB947AAB3EFAA1269EB7919DF338B6A
Authority key identifier: B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
Signing time:             Sun 03 May 2026 02:38:01 +0000
ROA not before:           Sun 03 May 2026 02:33:01 +0000
ROA not after:            Sun 02 May 2027 02:38:01 +0000
asID:                     153096
IP address blocks:        160.25.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl
                          rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4a:65:8f:ac:b9:47:aa:b3:ef:aa:12:69:eb:79:19:df:33:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
        Validity
            Not Before: May  3 02:33:01 2026 GMT
            Not After : May  2 02:38:01 2027 GMT
        Subject: CN=C7414485050E1FABDC1444E3A053ACA3EE23CD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:e6:53:f6:c8:99:00:1a:83:50:d1:51:05:
                    88:f5:57:1a:73:9c:b2:22:8a:ca:a3:ef:9e:8a:2a:
                    83:50:95:16:08:f7:57:fd:a5:92:f8:93:b2:54:52:
                    f5:05:dd:97:63:aa:72:76:6d:16:e1:b5:6b:e6:a5:
                    e2:63:e9:f5:ca:e1:03:c1:10:05:31:ac:c1:29:52:
                    01:72:db:38:a5:b8:13:13:78:db:eb:44:90:20:db:
                    5b:d8:27:ab:10:cd:bb:2b:4f:9c:7d:3b:8d:19:85:
                    06:c9:ac:5e:98:27:a7:c2:96:0a:7b:6c:08:66:ce:
                    29:54:e8:ec:51:f1:82:2c:6d:ea:54:7b:1b:3f:16:
                    15:5f:9d:ff:b3:1f:c6:37:8a:e9:58:2c:00:a6:9f:
                    d6:bf:bf:27:87:98:f7:23:33:9d:79:bc:f5:ed:f4:
                    fd:b3:50:43:86:e3:7e:f1:18:7c:79:39:35:cb:cd:
                    2c:1f:9e:47:cb:31:62:06:40:be:4e:61:b7:8f:f6:
                    71:24:3f:9d:59:71:8b:c2:54:3d:92:a1:72:15:8e:
                    74:c3:c5:0b:8a:9d:6e:8f:f6:e3:81:f8:c4:d5:47:
                    3b:89:b3:34:95:8d:d3:0c:dc:be:34:e2:64:2f:fc:
                    67:2a:9e:d1:97:d5:bc:5d:7d:f4:ad:b9:9d:e1:b5:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:44:85:05:0E:1F:AB:DC:14:44:E3:A0:53:AC:A3:EE:23:CD:4C
            X509v3 Authority Key Identifier:
                keyid:B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fb:58:f7:4b:94:8b:b6:8c:57:40:d6:de:f3:79:9f:58:f7:
         fc:59:c6:85:10:96:eb:bd:04:e8:ad:89:4b:d9:74:5d:71:00:
         87:e2:23:ab:4d:f5:d7:af:45:84:71:2d:d3:31:42:36:79:cd:
         dc:11:34:74:0d:30:c1:17:63:2b:9e:f1:7e:61:d1:d8:0e:3b:
         0c:3f:fb:7f:0d:e6:f2:ff:59:cc:1b:c5:81:80:93:f3:71:07:
         9e:77:25:13:3e:50:14:df:7a:49:9e:3b:65:fb:77:65:be:50:
         d4:28:97:75:2c:a9:58:61:f6:8c:3c:5d:0e:d6:0b:6a:fe:59:
         57:86:01:36:d2:10:31:cd:c8:3c:8c:fb:8e:0f:a7:43:b6:fe:
         d2:de:71:62:2f:7b:8c:06:04:83:56:0d:b3:eb:9e:5d:39:4a:
         3b:7c:71:36:c4:71:f6:e0:97:3a:52:15:62:f8:78:b1:d7:84:
         0b:c8:f5:d9:52:fc:fa:2a:56:8e:b4:11:d6:a6:ca:78:98:fa:
         1b:17:ba:b2:b1:91:ca:ad:60:b0:5f:65:06:08:67:6f:4f:1d:
         27:3f:43:03:44:b2:47:b5:21:be:b1:97:28:64:da:37:19:ed:
         53:d4:b5:62:48:60:f6:c4:1d:09:b1:f0:58:45:fa:8a:1d:0e:
         de:27:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:52 2026 by rpki-client