Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
File:                     3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (raw, json)
Hash identifier:          KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=
Subject key identifier:   9D:BE:F8:8B:E2:5C:92:6E:4B:53:E3:6F:9D:9A:47:6D:18:FF:F1:CA
Certificate issuer:       /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Certificate serial:       0C9F7A836992D85A57CCB042AC8265B584281671
Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
Signing time:             Sun 03 May 2026 02:43:46 +0000
ROA not before:           Sun 03 May 2026 02:38:46 +0000
ROA not after:            Sun 02 May 2027 02:43:46 +0000
asID:                     153157
IP address blocks:        160.191.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
                          rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9f:7a:83:69:92:d8:5a:57:cc:b0:42:ac:82:65:b5:84:28:16:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
        Validity
            Not Before: May  3 02:38:46 2026 GMT
            Not After : May  2 02:43:46 2027 GMT
        Subject: CN=9DBEF88BE25C926E4B53E36F9D9A476D18FFF1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:5d:dc:ff:7a:42:a4:11:70:78:66:e2:f5:
                    60:c4:5a:f0:5d:ec:80:36:a8:e1:93:83:25:25:23:
                    56:c2:a1:71:ad:b2:4d:54:d9:20:ae:fa:7b:42:fb:
                    2c:98:6a:ad:f0:50:18:0d:8e:58:c9:be:55:17:2d:
                    ea:93:d9:01:dd:3d:9e:af:55:e6:de:8f:8c:75:a3:
                    19:e1:e0:9a:11:1c:51:ad:11:c5:cf:9a:bf:45:c9:
                    e8:80:7a:90:bd:58:37:cd:1c:5b:65:5b:3f:62:9a:
                    d8:62:88:dd:31:35:d5:5f:bb:52:f6:78:2a:fa:dd:
                    b6:1f:a7:8c:52:08:e7:7f:26:15:c4:ba:e2:c1:5a:
                    92:16:67:e6:54:10:85:6a:27:42:96:ef:6c:64:c1:
                    ba:69:46:e0:6a:dd:2c:bd:1f:1c:3f:7d:7a:30:f2:
                    16:7f:54:9d:de:59:1d:f0:16:20:46:46:4b:1f:04:
                    3a:21:18:cb:91:89:fd:63:bb:91:0b:07:77:e1:f9:
                    13:60:b8:da:08:9c:4a:a0:eb:e5:87:a5:20:fe:2a:
                    88:2b:b0:fe:42:a1:12:a0:fe:31:f3:1c:cf:cd:12:
                    f9:2a:04:54:c9:a9:eb:7a:85:b5:73:89:a3:f8:b0:
                    2a:d8:96:82:32:d0:db:30:9f:1d:12:bb:cd:f7:57:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BE:F8:8B:E2:5C:92:6E:4B:53:E3:6F:9D:9A:47:6D:18:FF:F1:CA
            X509v3 Authority Key Identifier:
                keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:98:28:f7:2f:09:03:8e:e6:df:e5:7b:26:5b:a6:2f:92:
         7e:d7:e0:39:99:83:8c:9f:d7:dc:01:7d:0e:b5:a2:88:24:5c:
         54:c3:e4:93:08:43:55:ae:f4:80:69:38:ca:ca:63:57:33:55:
         af:66:59:14:b7:61:38:ef:70:d7:f3:ad:61:76:a7:e8:8f:77:
         e9:cc:25:20:d8:94:10:4f:f7:43:85:81:22:97:05:8e:71:2b:
         ef:e1:a2:18:44:53:2d:e2:54:14:c6:5f:ef:22:4f:95:05:18:
         50:63:43:40:d9:b4:6e:d9:66:30:05:82:ad:ef:9b:2c:cc:8b:
         43:0e:af:88:54:94:24:ab:ce:cc:8e:66:f3:25:2f:d0:a9:eb:
         03:5c:44:b5:69:df:cf:06:5a:f1:b6:5e:fe:c0:16:48:0c:24:
         51:0d:44:69:3d:7c:b5:b7:12:41:c4:5b:0e:69:9b:68:a1:cd:
         43:58:a7:fb:c5:11:09:b3:cb:45:a2:08:bb:95:80:38:6d:53:
         8a:8e:7c:59:19:2a:02:cd:c9:29:49:fb:52:97:a0:60:0c:d1:
         58:f6:c6:9f:47:7c:58:d4:61:3d:32:d0:03:9a:d1:12:49:71:
         d6:55:50:e9:78:22:41:9a:aa:e3:af:b5:4d:b3:06:79:e6:a1:
         7d:af:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:46 2026 by rpki-client