Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa
File:                     3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (raw, json)
Hash identifier:          23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=
Subject key identifier:   29:2C:F8:73:78:C6:D2:F0:25:89:BF:80:43:D5:8E:9D:E0:E8:FF:6A
Certificate issuer:       /CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Certificate serial:       157C422E9F6AF2BBF6828A5E08891FA0E7B8AF35
Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa
Signing time:             Sun 03 May 2026 02:52:28 +0000
ROA not before:           Sun 03 May 2026 02:47:28 +0000
ROA not after:            Sun 02 May 2027 02:52:28 +0000
asID:                     152780
IP address blocks:        160.20.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
                          rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7c:42:2e:9f:6a:f2:bb:f6:82:8a:5e:08:89:1f:a0:e7:b8:af:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44
        Validity
            Not Before: May  3 02:47:28 2026 GMT
            Not After : May  2 02:52:28 2027 GMT
        Subject: CN=292CF87378C6D2F02589BF8043D58E9DE0E8FF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:a9:0d:c2:dc:44:dc:95:47:e5:6b:99:03:
                    24:15:16:af:e9:8f:91:07:8f:b4:66:36:40:62:b9:
                    d7:c7:db:d4:f9:a4:5c:af:fb:07:39:bd:74:24:3d:
                    a8:d0:f3:a2:60:e6:e6:64:5e:e4:ef:00:8e:18:a7:
                    c5:43:d7:6d:0e:6f:91:74:bf:4f:09:2f:d4:bd:68:
                    34:56:54:b5:15:ba:a7:67:89:60:a1:fa:35:d3:75:
                    cc:1a:84:8f:38:7e:54:c3:aa:47:cb:da:0e:90:dd:
                    b6:56:6f:c7:af:a7:1c:05:1b:84:dc:cb:44:c5:70:
                    2d:f6:de:81:0a:29:f9:7f:7f:03:e8:0a:ae:2f:6a:
                    df:bf:95:27:3c:8d:31:41:79:8f:3e:ed:c7:d9:16:
                    ba:e6:7e:32:85:bd:54:42:c1:ef:03:59:7d:1b:38:
                    8d:ad:b7:9e:85:44:37:2c:9f:08:aa:e8:77:36:7f:
                    d1:0a:97:72:49:17:02:cf:d8:29:d5:98:13:b6:cd:
                    ab:2a:4a:f2:ab:09:12:fa:c8:5b:6e:f2:e2:21:c1:
                    a1:f0:e3:1f:df:22:c0:f5:7f:cc:c9:34:eb:d9:b5:
                    00:a4:12:74:a0:23:bf:eb:dd:ff:15:4f:cf:f8:c1:
                    1d:7b:f0:50:f2:c1:54:42:6c:19:53:6d:46:0c:99:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2C:F8:73:78:C6:D2:F0:25:89:BF:80:43:D5:8E:9D:E0:E8:FF:6A
            X509v3 Authority Key Identifier:
                keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:61:61:1c:a9:3e:6e:00:ec:0a:a6:84:7c:98:c4:5e:97:67:
         1d:fb:14:64:4a:5e:17:d3:10:4a:2f:fd:47:db:f7:5e:df:66:
         96:2d:85:c8:1f:55:0b:b4:4d:11:d1:64:dc:26:55:14:55:17:
         9a:71:4a:40:86:49:1a:53:61:b4:78:ab:4d:2d:c1:bb:da:7d:
         ba:f6:0c:a7:51:be:26:ce:97:35:05:3d:49:ef:d4:9d:73:c7:
         17:67:dc:ea:8f:d2:dc:bd:4c:dc:eb:82:5d:2b:f4:44:ce:1a:
         ca:82:a0:b0:7a:f3:ab:65:69:93:af:ff:c0:d4:2d:0e:9b:0b:
         64:c7:d2:8e:e6:ee:08:9d:36:c3:ed:6a:f2:b5:b1:d6:13:2d:
         57:c7:69:83:71:80:94:86:ff:61:ec:b3:7e:a5:9b:5a:4c:0b:
         b0:a7:03:43:4b:c0:fc:66:6a:f2:eb:d3:5a:6b:75:21:2f:2d:
         5c:7b:6c:9a:cf:9b:ad:f0:b4:72:01:f4:8d:c1:c9:14:fa:9a:
         c9:94:24:80:b3:db:14:35:b9:b7:32:18:84:b1:88:62:01:dc:
         f4:7d:dc:52:cf:01:4c:61:2d:ad:e9:fd:be:41:49:73:84:b5:
         d3:ca:c3:c9:da:9e:20:d7:bc:c2:1c:8f:93:63:64:51:d6:b4:
         5b:7e:ba:d0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFXxCLp9q8rv2gopeCIkfoOe4rzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlG
MkIxNkU0NDAeFw0yNjA1MDMwMjQ3MjhaFw0yNzA1MDIwMjUyMjhaMDMxMTAvBgNV
BAMTKDI5MkNGODczNzhDNkQyRjAyNTg5QkY4MDQzRDU4RTlERTBFOEZGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDKkNwtxE3JVH5WuZAyQVFq/p
j5EHj7RmNkBiudfH29T5pFyv+wc5vXQkPajQ86Jg5uZkXuTvAI4Yp8VD120Ob5F0
v08JL9S9aDRWVLUVuqdniWCh+jXTdcwahI84flTDqkfL2g6Q3bZWb8evpxwFG4Tc
y0TFcC323oEKKfl/fwPoCq4vat+/lSc8jTFBeY8+7cfZFrrmfjKFvVRCwe8DWX0b
OI2tt56FRDcsnwiq6Hc2f9EKl3JJFwLP2CnVmBO2zasqSvKrCRL6yFtu8uIhwaHw
4x/fIsD1f8zJNOvZtQCkEnSgI7/r3f8VT8/4wR178FDywVRCbBlTbUYMmQavAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKSz4c3jG0vAlib+AQ9WOneDo/2owHwYDVR0j
BBgwFoAUUR8aobSS9nlO8WX2KwdZGfKxbkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTM1NzkyMWQtZWUxOC00MzVjLThiNmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFC
NDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlGMkIxNkU0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81MTFGMUFBMUI0OTJGNjc5NEVGMTY1RjYyQjA3NTkxOUYyQjE2
RTQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFkLWVlMTgtNDM1Yy04
YjZlLWViYTIyNDFiODNhYi8wLzMxMzYzMDJlMzIzMDJlMzEzMjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBR8MA0GCSqG
SIb3DQEBCwUAA4IBAQAzYWEcqT5uAOwKpoR8mMRel2cd+xRkSl4X0xBKL/1H2/de
32aWLYXIH1ULtE0R0WTcJlUUVReacUpAhkkaU2G0eKtNLcG72n269gynUb4mzpc1
BT1J79Sdc8cXZ9zqj9LcvUzc64JdK/REzhrKgqCwevOrZWmTr//A1C0Omwtkx9KO
5u4InTbD7WrytbHWEy1Xx2mDcYCUhv9h7LN+pZtaTAuwpwNDS8D8Zmry69Naa3Uh
Ly1ce2yaz5ut8LRyAfSNwckU+prJlCSAs9sUNbm3MhiEsYhiAdz0fdxSzwFMYS2t
6f2+QUlzhLXTysPJ2p4g17zCHI+TY2RR1rRbfrrQ
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:59 2026 by rpki-client