Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa
File:                     3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          6b6QyTeKHzbwr02KTRyuHru/9K2YvXjeEcMAT+18bak=
Subject key identifier:   EC:11:E8:81:BF:C6:9E:D2:36:7C:C8:FA:07:AA:C0:D5:C6:68:D5:91
Certificate issuer:       /CN=ED8801C97D629F0D5149E3C88E72600C016E4712
Certificate serial:       5816CCE1BC24FCC503033C6DA080C231AB2DC6E7
Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:54:27 +0000
ROA not before:           Sun 03 May 2026 02:49:27 +0000
ROA not after:            Sun 02 May 2027 02:54:27 +0000
asID:                     137316
IP address blocks:        160.22.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl
                          rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:16:cc:e1:bc:24:fc:c5:03:03:3c:6d:a0:80:c2:31:ab:2d:c6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712
        Validity
            Not Before: May  3 02:49:27 2026 GMT
            Not After : May  2 02:54:27 2027 GMT
        Subject: CN=EC11E881BFC69ED2367CC8FA07AAC0D5C668D591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:6a:e1:06:2d:61:76:79:76:0a:06:c0:ee:
                    8c:be:2b:f5:30:26:32:e0:f1:7a:d0:84:08:39:43:
                    96:3f:4b:37:9b:b1:d9:40:cb:a8:af:d8:ef:97:85:
                    65:8c:5a:1d:60:09:d7:17:75:cc:0b:87:e3:4f:d9:
                    66:3b:61:42:d2:bc:dc:01:69:2c:b2:dd:42:c4:ea:
                    8e:bc:f3:41:8c:67:cf:98:ba:62:31:08:71:81:a8:
                    7b:ea:32:f7:88:d0:45:44:c4:eb:a1:b0:d4:ff:f6:
                    64:d3:5b:df:6c:c9:e4:b5:a9:42:b2:bf:2a:09:e6:
                    3c:f2:83:bd:de:08:20:51:ee:58:94:e0:68:b7:33:
                    1e:3d:58:e9:42:97:01:2a:67:e5:1f:0c:f5:31:e8:
                    4b:a7:ab:5e:5a:53:83:a4:61:ed:48:aa:34:aa:a9:
                    d8:35:ea:6e:5c:45:12:af:fa:23:c3:cb:2d:fd:5f:
                    34:5e:9d:08:9b:c8:51:c4:9e:42:c9:c5:5a:a1:91:
                    8c:5a:69:58:f0:fc:e9:8a:e0:7e:21:fd:00:da:7e:
                    b2:01:61:3a:34:84:dd:05:01:ef:ba:93:0a:33:f4:
                    ac:b0:40:aa:22:ed:b9:d2:f6:e5:4b:a0:d3:10:74:
                    fd:f2:36:d8:41:17:dc:ef:64:f4:96:33:1b:7d:58:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:E8:81:BF:C6:9E:D2:36:7C:C8:FA:07:AA:C0:D5:C6:68:D5:91
            X509v3 Authority Key Identifier:
                keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:de:47:f9:0b:b2:73:6e:8f:ff:47:52:28:8b:39:08:4a:
         33:2f:b6:6c:af:4e:ab:d2:ce:0b:f2:d1:31:4d:7c:a0:c2:a7:
         34:fc:78:e7:69:0b:bc:4c:49:2e:d5:8b:ba:20:27:c9:e8:15:
         f2:65:1f:2c:5e:5c:a1:b7:3f:a1:7d:ae:34:4a:10:11:ae:f3:
         ce:39:d1:ce:70:bc:67:2a:e2:e3:48:a9:b5:07:a0:60:f9:d2:
         e1:85:3f:07:34:89:4d:b3:43:c2:d3:b4:fd:f1:c6:c5:e4:a9:
         af:f4:ef:df:02:26:41:93:78:51:11:98:f9:d2:8f:5d:01:03:
         ea:5d:d8:d6:0f:40:17:b3:26:89:6e:c8:4d:63:b9:4d:2d:09:
         1a:43:91:bd:b5:ff:cf:c4:d8:43:e3:c9:36:0b:92:8b:f6:88:
         13:f9:e7:00:1f:7b:af:59:d3:cd:45:82:ab:ee:d3:9d:88:9d:
         c0:79:69:19:db:17:86:1f:53:23:0a:38:e9:03:9a:00:85:6a:
         9f:b2:ae:59:2a:f9:3a:e1:a8:2b:20:78:83:90:11:3d:74:6b:
         47:e8:da:ba:00:40:8d:94:36:db:82:3d:1a:5d:ab:3d:83:35:
         73:58:e2:70:5b:2d:53:96:6a:fc:7a:1b:ae:ac:e8:11:4f:f5:
         a7:53:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:24 2026 by rpki-client