Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa
File:                     3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (raw, json)
Hash identifier:          03BuWy0OfURI+FKE0txZsH5LInMm2YyYlx6DInNWH9E=
Subject key identifier:   A6:15:B5:8F:EB:D1:28:95:85:06:5A:69:9F:B9:F5:17:43:01:6C:38
Certificate issuer:       /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Certificate serial:       342E7A03D21A734C89C65BB1EA4F4B5FADCE4754
Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa
Signing time:             Sun 03 May 2026 02:43:44 +0000
ROA not before:           Sun 03 May 2026 02:38:44 +0000
ROA not after:            Sun 02 May 2027 02:43:44 +0000
asID:                     153157
IP address blocks:        160.191.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
                          rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:7a:03:d2:1a:73:4c:89:c6:5b:b1:ea:4f:4b:5f:ad:ce:47:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
        Validity
            Not Before: May  3 02:38:44 2026 GMT
            Not After : May  2 02:43:44 2027 GMT
        Subject: CN=A615B58FEBD1289585065A699FB9F51743016C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:3c:c1:b4:60:50:00:73:ef:80:0b:0b:67:
                    bc:f6:46:42:9d:24:77:0d:40:a7:63:ff:62:a0:ee:
                    d3:f0:9d:c5:96:17:ff:7d:f6:5c:f3:d1:3a:47:a7:
                    0f:9f:ba:0c:bd:9d:fc:6f:c1:a2:87:01:2d:f6:8f:
                    88:16:a3:9c:40:74:4f:d5:1e:99:de:a0:32:8d:49:
                    44:51:ab:88:89:12:40:62:f5:03:fd:9d:30:88:1b:
                    fb:6a:80:2b:04:85:5d:84:62:99:7a:f4:c2:31:76:
                    d7:7f:98:57:3f:85:c9:f2:b8:28:de:49:05:ab:d4:
                    25:2c:9a:53:fa:a4:43:6e:c0:b4:a6:f1:49:f5:7a:
                    15:e3:6d:b1:86:47:93:e5:a8:db:b4:da:bb:84:44:
                    a3:86:a1:9f:21:1d:d5:18:7f:0f:e8:34:dd:73:dc:
                    ff:46:8a:10:fd:2c:53:4e:b9:6c:d4:d8:3b:36:14:
                    de:fc:96:99:49:3b:6e:e7:8c:d0:af:c2:af:4b:60:
                    7b:06:3f:6a:a0:1c:a7:7f:99:30:52:3c:3e:4c:81:
                    3e:f3:cf:ce:d5:6a:0b:bb:40:c6:75:dd:98:61:cc:
                    f9:99:fc:7c:09:61:0e:5a:66:06:7d:db:ac:59:e0:
                    9d:83:6c:58:e4:d2:9b:57:7b:6a:fc:63:7d:29:d9:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:15:B5:8F:EB:D1:28:95:85:06:5A:69:9F:B9:F5:17:43:01:6C:38
            X509v3 Authority Key Identifier:
                keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:41:f2:7a:8c:0b:1e:26:63:99:65:9f:83:ac:2c:b8:c8:
         09:84:2c:97:28:bd:0c:65:20:d4:89:b6:9e:9d:b5:f5:a7:8b:
         44:45:d6:92:ea:c9:59:df:b8:cb:bf:22:52:99:09:e9:97:32:
         cc:0c:11:29:09:92:3e:10:d4:ec:d7:33:14:eb:29:b7:3d:b1:
         b1:30:95:b5:4f:9e:29:75:68:e2:77:99:3b:70:4f:cc:44:d4:
         bb:01:82:1d:99:ac:50:a4:97:b7:29:6f:ae:b6:01:7c:d5:f7:
         74:ee:62:d0:ee:99:ed:f5:69:7d:10:23:b8:e2:b7:bc:dc:56:
         17:b2:b7:34:7b:75:10:f5:cf:97:b3:50:ab:cf:d8:80:b3:42:
         56:15:bc:4b:2d:21:77:47:f5:dc:e4:c1:c1:9f:d3:46:ac:bc:
         ef:2f:6f:42:38:5a:da:43:9c:b6:2c:d4:b7:89:81:b5:56:77:
         b7:8b:1c:a4:94:6b:af:19:a5:05:c8:d2:72:ad:a9:b8:7e:bc:
         08:cd:94:dc:84:5e:be:31:a3:6f:51:55:79:f8:ab:22:a4:7f:
         30:ff:27:59:7b:48:97:8b:7b:78:e3:06:75:60:98:ee:ee:90:
         af:6c:e1:06:f4:51:6c:ed:0b:80:7a:69:d1:5f:4b:7f:c9:9b:
         a6:4a:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:36 2026 by rpki-client