Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa
File:                     3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (raw, json)
Hash identifier:          W6gU13vwkvKOw0VI8aGpc6wnH09tgyU6w+1j71bL/DU=
Subject key identifier:   DF:BE:0A:A8:1E:60:6A:15:14:AD:8D:B0:CF:3B:C7:8F:F6:D1:47:69
Certificate issuer:       /CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Certificate serial:       6DBBCC553C5F3AFB573B2CFE058D4E817120C9FC
Authority key identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa
Signing time:             Sun 03 May 2026 02:45:51 +0000
ROA not before:           Sun 03 May 2026 02:40:51 +0000
ROA not after:            Sun 02 May 2027 02:45:51 +0000
asID:                     152823
IP address blocks:        160.22.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
                          rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bb:cc:55:3c:5f:3a:fb:57:3b:2c:fe:05:8d:4e:81:71:20:c9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
        Validity
            Not Before: May  3 02:40:51 2026 GMT
            Not After : May  2 02:45:51 2027 GMT
        Subject: CN=DFBE0AA81E606A1514AD8DB0CF3BC78FF6D14769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:ec:54:e6:37:f3:e7:76:70:70:00:40:64:
                    d9:c1:db:62:36:47:b4:4a:a9:11:cc:07:58:b2:87:
                    7b:d6:81:e4:4a:8e:cf:7e:60:d3:ac:3c:44:98:21:
                    fd:ee:a6:6a:87:ec:eb:5b:0d:1a:52:1f:4a:6d:af:
                    98:5d:77:b2:8a:d4:32:f2:df:14:6b:71:9c:ce:76:
                    ad:77:3e:85:40:ac:79:83:0b:aa:3a:df:0c:1e:fd:
                    b8:23:fb:08:31:eb:52:30:67:ec:20:82:c6:85:c5:
                    bf:35:f2:77:cb:d2:1a:23:ed:e3:4d:e0:1e:e1:4d:
                    5d:ae:6e:1c:31:58:8b:b2:51:e8:c6:b4:b6:31:4c:
                    82:0c:17:7a:50:d1:95:14:af:c3:64:16:bb:93:9d:
                    42:f8:89:9e:73:7d:38:51:03:5b:be:d6:55:ca:99:
                    e3:8d:56:dd:fa:c7:15:5a:6d:fd:08:98:02:c5:bb:
                    96:ed:8a:25:b5:a0:5e:a3:38:60:90:a2:6f:46:05:
                    70:ad:36:03:87:a9:fa:67:0b:54:0f:d1:a0:95:2f:
                    2c:44:2f:fe:e9:34:b7:be:a8:cc:13:23:1d:09:01:
                    18:e0:40:3b:a2:fe:1e:42:43:f2:f1:fb:b3:f8:77:
                    e1:88:f4:be:5c:7e:34:1f:03:c8:25:c9:05:f2:4e:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:0A:A8:1E:60:6A:15:14:AD:8D:B0:CF:3B:C7:8F:F6:D1:47:69
            X509v3 Authority Key Identifier:
                keyid:00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:c8:c9:d1:a6:7b:84:fc:c2:47:e7:be:6c:ac:f9:64:07:
         53:c2:b0:ad:0d:cf:6d:d0:88:91:9d:36:c5:7b:92:24:b2:46:
         1f:f3:03:0e:cd:8c:79:c5:e9:c9:5b:ff:7b:ef:b0:b7:78:53:
         eb:15:cb:1f:81:3e:7a:0c:9a:15:d9:d3:8d:83:5c:0c:4b:cc:
         a5:60:8b:86:20:bc:e3:e5:ce:12:91:07:fa:3f:5b:56:59:c2:
         c9:9c:c1:53:0d:28:49:68:4d:16:8d:c9:f5:97:a0:c3:ba:b8:
         ba:d1:70:b0:51:8e:5e:86:f8:50:ef:b7:70:9d:8f:8d:c5:b1:
         6c:b7:ec:50:78:34:ff:da:87:bd:db:db:2c:23:c3:66:f7:3e:
         90:51:49:97:80:b8:86:85:07:34:82:e5:13:2f:7f:3a:e7:21:
         f2:e5:79:cd:a2:e8:f5:a5:46:8f:de:40:a6:cf:53:c0:6a:9a:
         04:67:6f:3c:9b:7a:40:20:31:72:6d:39:46:75:fd:15:23:8c:
         2e:46:66:6a:4d:c1:30:18:31:6f:2b:52:cb:9c:bf:b6:64:0d:
         d3:4f:12:f0:57:93:1f:49:00:f1:4f:ac:3c:c5:90:d1:4f:1d:
         81:96:f5:b4:6c:31:27:b8:12:16:7a:6a:ab:83:ae:41:0b:3b:
         c2:57:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:00 2026 by rpki-client