Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa
File:                     3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier:          FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=
Subject key identifier:   47:52:5F:7C:32:C1:52:22:C5:D9:34:59:06:11:8F:4B:F3:79:C3:D2
Certificate issuer:       /CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Certificate serial:       134BD0A140180B11B6A4325E56F9DF8BA97B3A8D
Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa
Signing time:             Sun 03 May 2026 02:52:27 +0000
ROA not before:           Sun 03 May 2026 02:47:27 +0000
ROA not after:            Sun 02 May 2027 02:52:27 +0000
asID:                     152780
IP address blocks:        160.20.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
                          rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:d0:a1:40:18:0b:11:b6:a4:32:5e:56:f9:df:8b:a9:7b:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44
        Validity
            Not Before: May  3 02:47:27 2026 GMT
            Not After : May  2 02:52:27 2027 GMT
        Subject: CN=47525F7C32C15222C5D9345906118F4BF379C3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:5f:fb:6f:6d:9a:2a:5c:bb:4b:5b:71:6b:
                    3d:05:3c:02:b6:51:99:54:d2:8b:8d:f8:94:6a:a8:
                    c4:96:ca:8e:23:1d:f5:42:c0:61:8f:b1:2a:56:ab:
                    88:80:82:a3:8c:b8:e2:16:a2:c5:52:bb:5a:ae:3e:
                    0b:ee:6d:13:74:dc:3e:a2:57:26:a2:01:5d:3c:45:
                    03:dd:8a:29:19:78:36:47:7b:96:b4:28:bf:9d:f3:
                    61:72:ad:4f:34:51:53:ec:dc:36:6a:5f:68:b2:13:
                    5c:93:81:e7:3f:b7:46:ff:cd:82:c9:42:ff:59:ec:
                    c7:2d:ff:08:c6:19:61:d2:5e:ec:93:6b:53:99:72:
                    34:5c:97:6d:fa:0f:fb:ac:55:37:47:7e:a7:88:d4:
                    b1:83:dd:2f:94:d4:14:19:4e:77:fd:01:c6:fc:a0:
                    a0:10:66:81:e1:74:fd:9b:56:db:b0:cf:1e:ad:0e:
                    8e:00:5a:7e:5f:86:66:65:e7:d6:d4:29:70:fc:e8:
                    fe:e1:9b:fd:e7:88:76:93:ef:c1:06:ee:1d:96:b2:
                    d0:a8:c2:ff:6b:9f:79:f2:73:bd:c9:99:9b:90:80:
                    d9:98:3a:b1:4e:2e:8f:2a:a1:4b:c8:cc:bd:b1:b2:
                    97:70:d6:d1:e4:05:ca:b2:14:36:e8:9d:a2:11:df:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:5F:7C:32:C1:52:22:C5:D9:34:59:06:11:8F:4B:F3:79:C3:D2
            X509v3 Authority Key Identifier:
                keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:66:41:31:a9:f0:44:05:87:1f:4f:c7:fb:a4:09:c9:6b:
         ce:db:c3:9a:bc:7b:ac:41:da:1f:27:9c:68:97:0b:82:fe:65:
         ef:99:35:ab:07:ad:53:34:69:49:81:fb:9e:01:90:93:a9:91:
         8a:87:ee:f9:d6:c0:bf:8b:58:de:06:6f:5f:5e:4d:3d:26:c0:
         5c:22:28:17:15:9f:33:ff:7c:20:fc:bd:a9:7d:a3:ec:51:17:
         8e:d0:b2:90:65:cb:b9:12:c0:56:0a:be:5c:50:cc:68:bc:7c:
         88:46:dd:f6:77:bd:01:10:c0:94:bc:f3:c7:06:f9:47:f0:a4:
         40:3a:e1:e9:7f:d9:0e:78:e4:7c:b9:58:b3:16:f6:50:ff:78:
         e4:31:1b:d4:c0:e5:8e:1e:ab:9f:d8:98:95:5f:c6:82:87:41:
         18:84:26:63:4d:45:e1:86:e3:34:da:7c:71:d1:d4:00:b4:46:
         78:b2:09:37:2f:98:71:5c:b7:30:a3:ad:3b:b2:ff:de:52:92:
         c5:bf:8d:95:0e:54:15:a4:31:af:bb:ad:15:8c:b0:ed:bb:87:
         c7:92:03:c0:ef:4f:30:b7:5d:9d:63:2f:5d:82:12:b5:8f:74:
         59:06:b9:a0:57:8f:e7:36:29:24:50:e7:56:f1:c1:08:2d:93:
         d3:4d:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:27 2026 by rpki-client