Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa
File:                     3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa (raw, json)
Hash identifier:          mldeFV7Jf6QOev5E++VL/jRK/PuO8nW0ShYwDv/SkQ8=
Subject key identifier:   CA:B7:B9:0E:15:B1:31:BF:EF:31:39:FC:20:67:FF:33:3B:66:73:EF
Certificate issuer:       /CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03
Certificate serial:       414CDFF40AC7322E76433440388275650996E8EE
Authority key identifier: D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa
Signing time:             Sun 03 May 2026 02:44:45 +0000
ROA not before:           Sun 03 May 2026 02:39:45 +0000
ROA not after:            Sun 02 May 2027 02:44:45 +0000
asID:                     152830
IP address blocks:        160.22.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl
                          rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:df:f4:0a:c7:32:2e:76:43:34:40:38:82:75:65:09:96:e8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88E006D219730C52DDDCBD6EB05C09A2F815C03
        Validity
            Not Before: May  3 02:39:45 2026 GMT
            Not After : May  2 02:44:45 2027 GMT
        Subject: CN=CAB7B90E15B131BFEF3139FC2067FF333B6673EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:10:4e:29:eb:b5:34:44:6b:eb:ab:ca:9d:
                    d6:76:f0:ab:ef:2d:45:c8:51:c4:0b:6a:cb:01:c7:
                    31:59:4f:2b:10:ce:6b:6c:ba:d4:9d:bc:50:3e:56:
                    cc:0a:bd:07:94:8f:6f:81:29:a8:12:11:30:b7:e5:
                    b4:1f:54:f5:5c:b7:44:a2:93:a0:48:b7:5a:df:0e:
                    6d:c4:d0:6a:f4:83:c5:3c:74:c0:69:2d:15:5b:f6:
                    51:63:ca:bd:9a:eb:e1:31:09:e9:0b:c6:ee:04:e3:
                    1b:b1:25:a7:ba:df:87:66:c9:72:ac:0a:fe:ce:15:
                    16:de:79:f3:55:40:4b:29:c9:58:b0:43:25:42:f6:
                    5d:91:ca:f9:a5:22:5f:0b:33:08:fe:b0:0a:fb:ea:
                    e1:a0:6c:ea:d4:af:03:41:ee:d5:af:41:6d:eb:aa:
                    e8:62:81:d1:02:a0:ad:66:6b:b9:ed:9f:54:23:75:
                    17:cf:12:e1:59:5a:8c:10:94:ee:a1:eb:57:b7:ab:
                    51:32:e9:a9:2a:46:4a:c2:27:da:8a:8c:e0:84:10:
                    86:92:99:a0:8b:2d:d2:1d:d0:7b:d7:3a:1a:3b:e8:
                    10:00:e4:6b:8d:69:f6:01:cb:5f:ee:e9:16:5f:86:
                    5f:25:14:a5:d9:ba:5e:7a:f1:aa:a0:ae:87:e7:18:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B7:B9:0E:15:B1:31:BF:EF:31:39:FC:20:67:FF:33:3B:66:73:EF
            X509v3 Authority Key Identifier:
                keyid:D8:8E:00:6D:21:97:30:C5:2D:DD:CB:D6:EB:05:C0:9A:2F:81:5C:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D88E006D219730C52DDDCBD6EB05C09A2F815C03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/3136302e32322e3139322e302f32332d3233203d3e20313532383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:d0:a4:1c:74:e8:e7:8b:e9:cd:3d:ab:41:a2:e6:d5:53:1d:
         49:a7:7e:3f:e9:94:53:03:a5:03:9d:c8:e0:19:3d:8a:03:d9:
         cf:1f:d4:a9:bf:50:3a:f8:64:9c:a5:75:fd:ce:b1:12:63:82:
         fa:20:a0:8e:b6:ee:4c:1b:8b:cb:a3:21:43:eb:13:95:c7:89:
         ba:c4:9b:ac:bd:81:e5:15:44:99:ea:a2:63:bc:fa:f4:9a:03:
         0d:ac:48:48:c2:48:ea:68:fe:c9:0d:5e:d9:dd:1e:df:98:ce:
         0d:c9:f2:24:6c:61:3f:91:6e:a9:c4:ab:c9:dc:2d:cb:27:40:
         08:cb:87:47:a0:e3:cd:85:5a:f2:b0:96:52:9f:f5:fe:41:94:
         60:61:30:08:9c:c7:3e:9a:d2:e3:fa:c2:8b:99:a3:a7:47:f8:
         84:af:54:35:7e:23:d6:6c:69:47:f1:e4:8c:43:d1:5b:7a:51:
         65:01:e3:dc:c9:4a:9d:a8:9f:73:ff:38:12:c2:7c:2c:4e:da:
         a3:2d:e8:1a:6e:44:f6:a1:91:24:66:01:0a:1a:93:50:93:37:
         af:09:cb:e1:10:f2:53:6a:21:8d:6b:d0:b1:62:f8:c6:98:b8:
         3a:f9:1b:42:bb:1a:eb:d9:0c:e9:e7:b6:6a:80:6e:01:ea:13:
         73:6a:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:47 2026 by rpki-client