Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/3136302e32302e37362e302f32332d3234203d3e20313532383133.roa
File:                     3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (raw, json)
Hash identifier:          WmfkE886z9xGlwBdZyGHayr+TJn3pXQ1PU74UP08FBw=
Subject key identifier:   FF:79:FF:1F:0C:FA:FD:AA:27:5D:B5:63:9C:D9:69:99:32:71:FC:11
Certificate issuer:       /CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F
Certificate serial:       516C929B76B049B8084A1AAF8FE08A118A313926
Authority key identifier: 1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/3136302e32302e37362e302f32332d3234203d3e20313532383133.roa
Signing time:             Sun 03 May 2026 02:47:03 +0000
ROA not before:           Sun 03 May 2026 02:42:03 +0000
ROA not after:            Sun 02 May 2027 02:47:03 +0000
asID:                     152813
IP address blocks:        160.20.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl
                          rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6c:92:9b:76:b0:49:b8:08:4a:1a:af:8f:e0:8a:11:8a:31:39:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A0BB0DDC50A4822595AE718DF646D60700AF61F
        Validity
            Not Before: May  3 02:42:03 2026 GMT
            Not After : May  2 02:47:03 2027 GMT
        Subject: CN=FF79FF1F0CFAFDAA275DB5639CD969993271FC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:ec:30:1f:b1:5a:ee:60:a2:cd:bc:d1:97:
                    fd:96:5f:97:d4:55:19:0a:49:f9:c2:77:87:a6:9c:
                    ba:80:c2:5d:aa:a7:5b:8a:db:34:f5:90:e8:9b:be:
                    90:06:84:7c:c6:17:34:34:57:82:81:b3:dc:ca:20:
                    4d:26:c8:32:0e:49:f8:de:42:a6:1a:f5:77:ac:5a:
                    03:5e:f6:ec:e5:2f:eb:fd:21:8f:2e:f2:f6:65:e2:
                    f0:a2:a3:1c:47:b4:cc:47:65:96:6b:3f:38:91:23:
                    b4:ad:14:18:ff:37:86:2f:4c:51:b3:e5:aa:8c:6c:
                    03:dd:cf:1c:36:d5:6a:95:2f:7a:1b:dd:c2:6d:00:
                    be:fd:c1:59:df:e5:a6:2a:45:be:8f:8f:51:b0:ac:
                    49:0c:fd:29:23:aa:b5:57:de:ef:be:a6:ba:ff:c8:
                    d5:0c:73:ad:b0:24:7d:dd:23:fa:50:be:c4:3c:80:
                    08:7d:4a:be:a9:92:e4:60:14:ef:c0:aa:f1:d4:28:
                    4d:75:fd:c0:13:f1:2f:01:68:17:89:e7:4f:04:8e:
                    40:d8:12:bf:fb:99:5b:b2:a6:ba:5a:81:3a:48:8f:
                    7c:50:42:1b:b7:c2:dc:40:81:6c:d1:3c:6c:7d:8b:
                    de:97:b7:51:b4:c7:19:54:3f:3e:46:27:29:4e:f5:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:FF:1F:0C:FA:FD:AA:27:5D:B5:63:9C:D9:69:99:32:71:FC:11
            X509v3 Authority Key Identifier:
                keyid:1A:0B:B0:DD:C5:0A:48:22:59:5A:E7:18:DF:64:6D:60:70:0A:F6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A0BB0DDC50A4822595AE718DF646D60700AF61F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/3136302e32302e37362e302f32332d3234203d3e20313532383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:15:c3:83:97:e8:72:b2:be:f0:0c:01:67:b6:bc:4e:99:f6:
         2d:ba:74:8e:93:d3:7d:e9:82:f8:ab:42:cd:32:5f:0f:a5:92:
         2a:8a:92:2a:3f:d9:f3:7c:5d:c6:a9:91:5f:23:4b:68:96:57:
         5f:f2:48:b4:90:f4:18:d5:e9:1e:0c:1d:68:c8:4b:ea:1f:91:
         83:7e:39:24:f1:17:23:4b:e9:1f:c2:e8:5e:53:00:1e:c9:fb:
         d8:33:7b:fe:08:fa:f9:e6:ed:03:c4:bf:90:a1:5f:ce:c2:4d:
         34:61:de:ae:9a:84:1d:fe:e6:b9:ea:2e:31:51:3b:fc:bf:f0:
         04:41:ec:56:e1:d2:14:da:17:74:0f:ee:fb:aa:cd:22:cc:f7:
         b1:7d:c6:89:e7:b3:93:55:e7:b1:64:83:36:05:a4:ce:1e:1d:
         75:64:5e:e2:ae:ca:31:29:60:3d:86:78:b5:45:c9:6b:a3:07:
         63:8e:c2:d9:6c:3f:1e:7c:32:fe:ae:a5:ac:2c:55:20:b2:e3:
         ee:fe:9e:ab:74:48:94:d3:84:46:71:a9:7a:1d:53:96:ab:0c:
         d1:07:4f:c6:2f:8c:4d:42:c5:e6:fe:e1:14:2c:b9:da:ed:aa:
         67:35:6f:cc:a5:5f:2d:48:0e:3a:03:7d:58:8c:f2:d8:8f:5c:
         7f:44:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:50 2026 by rpki-client