Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
File:                     3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (raw, json)
Hash identifier:          5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=
Subject key identifier:   DF:9B:C9:05:FC:AE:D9:89:80:AF:A5:67:13:34:80:95:97:71:19:A5
Certificate issuer:       /CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Certificate serial:       78DE6634164047BD9D7E3814A21241124F82D8D8
Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
Signing time:             Sun 03 May 2026 02:47:41 +0000
ROA not before:           Sun 03 May 2026 02:42:41 +0000
ROA not after:            Sun 02 May 2027 02:47:41 +0000
asID:                     152810
IP address blocks:        160.22.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
                          rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:de:66:34:16:40:47:bd:9d:7e:38:14:a2:12:41:12:4f:82:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB
        Validity
            Not Before: May  3 02:42:41 2026 GMT
            Not After : May  2 02:47:41 2027 GMT
        Subject: CN=DF9BC905FCAED98980AFA56713348095977119A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:8b:44:d5:1a:93:ec:48:1e:06:f8:7a:74:
                    eb:ab:61:66:ab:95:60:f2:68:aa:e1:a5:8c:88:4e:
                    07:bd:35:8c:55:57:f1:d9:ef:82:01:3f:42:0f:55:
                    61:b2:22:36:dc:30:8a:04:36:30:86:b4:f4:8e:f4:
                    43:bf:69:64:be:6a:47:e4:7b:56:f7:5b:b8:83:5d:
                    0e:e6:b2:de:92:49:a7:62:da:00:72:49:a9:b2:bc:
                    47:98:52:2a:5c:d3:51:a5:c4:99:f4:0a:b3:86:94:
                    6b:3f:0d:4d:87:59:08:91:04:72:2a:ac:fc:b3:a2:
                    14:ba:65:db:77:6b:9d:48:28:c2:cd:8b:b3:73:e0:
                    5b:9c:3a:12:5d:7e:d4:ac:ad:1c:4e:ca:80:6f:c0:
                    35:d3:4e:39:6b:72:99:54:b6:3b:6c:dc:73:42:39:
                    4f:3a:ae:95:b0:cb:a4:dc:a5:14:06:6d:2a:98:e8:
                    89:47:3f:ab:99:48:83:03:46:9a:04:d1:74:0b:59:
                    3b:ca:8b:78:05:a2:f0:58:e5:52:2c:fd:04:35:52:
                    e5:d2:2d:29:17:62:e5:89:f7:c8:1b:71:fd:17:47:
                    54:bc:0c:78:e5:dc:60:3c:bb:a9:81:07:66:3b:7e:
                    d2:42:88:77:6b:b2:84:64:e3:b0:f9:48:aa:d3:84:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:C9:05:FC:AE:D9:89:80:AF:A5:67:13:34:80:95:97:71:19:A5
            X509v3 Authority Key Identifier:
                keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:76:81:76:c3:1e:ca:a8:d9:db:15:27:06:d9:e2:f8:9f:c3:
         41:d3:1d:26:1b:b9:3b:3a:79:bb:21:b8:f8:d5:be:61:73:a8:
         b6:28:6d:6c:1a:49:cf:c5:4c:76:94:66:52:91:a4:aa:e1:61:
         da:ea:fc:65:38:2d:5b:8a:a1:25:ba:8e:e2:2e:03:52:3e:93:
         29:2c:bc:ea:84:d9:91:5a:54:e9:1d:39:2c:31:68:6f:ac:d5:
         54:cf:9b:4a:02:d6:8d:b1:f0:ba:6c:72:df:e2:a1:6e:b5:b2:
         8d:7b:3c:48:25:45:ea:b9:10:5f:b4:9f:55:74:4f:a8:dd:06:
         21:16:6d:8a:ad:82:73:a0:99:c7:7b:a1:50:a1:04:a1:01:a9:
         b7:5a:b3:06:c8:6d:d3:38:30:9a:bc:c4:6d:3f:49:91:87:89:
         00:8a:dd:a3:e8:51:0f:a9:b7:00:28:61:9e:0f:3c:fd:ca:c1:
         40:75:1c:a5:b5:55:52:38:61:bc:a2:d9:ab:47:9a:c2:9c:b3:
         1e:32:7d:62:13:1a:6f:94:8c:66:c9:9c:fd:c1:ac:2e:72:b3:
         91:23:93:80:84:3d:76:68:a7:85:b5:cb:1e:d6:dd:84:f9:d2:
         95:3b:4b:54:81:be:91:c5:04:0f:98:61:e4:c7:dc:32:e2:f1:
         0a:07:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client