Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa
File:                     3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (raw, json)
Hash identifier:          mmr69bHLezkQuiDZandeSB0qYXcAYeWx1GHP/ifPRTA=
Subject key identifier:   ED:2C:7F:3F:EF:B7:10:04:6E:9C:FB:24:81:E6:D0:60:77:1A:96:D4
Certificate issuer:       /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
Certificate serial:       7242C33C9B6945EF4F4D71D46253ED6AB4729770
Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa
Signing time:             Sun 03 May 2026 02:50:45 +0000
ROA not before:           Sun 03 May 2026 02:45:45 +0000
ROA not after:            Sun 02 May 2027 02:50:45 +0000
asID:                     153122
IP address blocks:        160.187.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl
                          rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:42:c3:3c:9b:69:45:ef:4f:4d:71:d4:62:53:ed:6a:b4:72:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A
        Validity
            Not Before: May  3 02:45:45 2026 GMT
            Not After : May  2 02:50:45 2027 GMT
        Subject: CN=ED2C7F3FEFB710046E9CFB2481E6D060771A96D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:d0:aa:3f:72:7f:86:0c:df:40:da:47:6f:
                    7c:47:d8:0a:cb:cf:05:75:01:c9:1e:e9:1e:fe:a5:
                    69:d2:75:ac:56:79:94:cc:06:84:7d:8a:47:a0:0c:
                    91:46:20:18:e7:ff:a7:56:85:03:4b:4e:6a:d4:30:
                    d5:5f:4d:84:23:72:0a:3f:ac:a1:1d:bb:ca:a5:a7:
                    60:97:80:da:0d:9e:5d:bf:85:5c:48:7a:a2:dd:f3:
                    f7:6c:22:e1:8c:a7:a0:04:b9:d4:70:cd:d6:aa:09:
                    df:2c:4e:d7:29:d6:70:61:f1:df:7d:4b:53:36:c6:
                    e9:4d:43:80:6a:1b:83:b1:18:bc:ee:e5:a7:c2:f8:
                    ed:81:99:be:24:dd:c1:74:da:09:88:a6:3b:09:28:
                    59:4c:86:69:3a:7b:2c:fd:b3:85:ce:c8:21:33:fd:
                    f5:c0:25:ed:6b:8f:b4:7b:50:df:46:30:23:f1:d9:
                    00:63:7d:1c:8e:21:03:47:c0:0e:3b:17:41:12:de:
                    7f:77:ce:01:f0:9f:7f:cc:a4:2a:62:ad:fe:97:36:
                    78:fe:88:74:3f:62:61:55:69:bf:7b:ba:c6:3f:3e:
                    c4:90:21:51:9c:f5:2c:d9:a7:d4:e2:c6:33:65:fc:
                    ef:84:e0:2a:a9:33:d9:0b:80:6d:b8:8f:a2:8c:95:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:7F:3F:EF:B7:10:04:6E:9C:FB:24:81:E6:D0:60:77:1A:96:D4
            X509v3 Authority Key Identifier:
                keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:5c:97:44:07:bc:77:05:f6:70:15:04:5a:82:6a:5a:ab:
         1a:c2:f9:67:61:c1:0f:e4:b2:ed:c2:24:e2:15:32:87:b1:93:
         c0:9d:f6:ba:ee:83:2c:27:54:a5:22:c3:e5:9d:7f:7d:6f:6c:
         5b:34:07:8d:8f:93:2b:1c:a6:1c:a4:5f:bb:cf:85:25:bd:e6:
         29:4a:aa:40:45:0f:3e:09:ae:01:29:1b:46:c8:bc:d1:b2:eb:
         a2:74:ca:36:7c:0f:61:e4:61:33:52:45:ff:e3:cc:17:4c:fa:
         e4:71:68:b1:78:f0:81:f7:58:8e:82:cc:1d:c3:ec:9b:71:ae:
         6f:30:fd:8e:33:f0:52:82:d5:ef:31:c8:14:07:0a:d4:f4:99:
         5c:a7:d7:33:a3:6e:63:fa:d7:f2:23:1d:3a:7c:d4:09:1b:75:
         b8:a0:38:7a:03:82:7e:c1:5b:86:db:21:2b:e2:96:23:1f:4b:
         81:86:38:73:8e:9e:99:eb:28:0f:28:82:12:2d:a9:e2:23:be:
         54:dc:57:ac:11:9f:28:c1:3e:62:ba:52:37:28:37:34:37:61:
         4e:e2:c4:5c:c4:73:d0:ba:ae:ef:ef:7a:58:95:98:46:d0:97:
         b0:3e:42:70:7b:6a:fd:66:8a:8f:70:f4:fe:0b:48:b1:dd:42:
         20:4c:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client