Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313534343130.roa
File:                     3136302e32322e36362e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          x+Zmass52e0XiEEcxmz35DHW32ZXdCP/lp7OD4a3w4Y=
Subject key identifier:   98:B9:AF:89:3A:68:BA:15:63:FB:C4:C0:D4:CF:6B:E1:A9:84:9A:18
Certificate issuer:       /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
Certificate serial:       2F583A76400DE89EE2B2B109AEC8C0F6BBB623D8
Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313534343130.roa
Signing time:             Sun 03 May 2026 02:54:49 +0000
ROA not before:           Sun 03 May 2026 02:49:49 +0000
ROA not after:            Sun 02 May 2027 02:54:49 +0000
asID:                     154410
IP address blocks:        160.22.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl
                          rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:3a:76:40:0d:e8:9e:e2:b2:b1:09:ae:c8:c0:f6:bb:b6:23:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
        Validity
            Not Before: May  3 02:49:49 2026 GMT
            Not After : May  2 02:54:49 2027 GMT
        Subject: CN=98B9AF893A68BA1563FBC4C0D4CF6BE1A9849A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4c:18:3b:b1:a8:84:3e:c2:60:98:07:d7:7a:
                    50:6c:fd:35:11:a0:cd:c4:dc:79:5f:23:00:08:b1:
                    a0:e1:86:c6:25:4e:20:64:73:f0:13:b4:6d:10:6f:
                    cf:2b:d7:47:fe:27:80:be:6e:86:d1:50:80:b5:29:
                    29:7f:ea:8f:98:9c:93:c7:f7:47:5e:5c:af:fd:73:
                    1e:17:ce:db:98:6d:23:fd:55:14:43:0f:36:19:ba:
                    db:db:11:ac:78:64:74:8a:b0:fe:e5:62:8f:04:a7:
                    ed:5c:bf:d6:c7:cf:d9:94:ec:0d:48:95:8a:86:9d:
                    5f:88:5d:14:39:74:be:7b:2f:c2:f4:7a:e6:3d:b1:
                    d1:8a:9e:32:32:83:4a:2d:3c:48:28:31:07:fb:5c:
                    f5:3c:d2:73:71:ff:79:11:38:08:75:23:21:6d:6f:
                    d1:48:04:e0:53:72:dd:4c:27:a5:b1:2b:80:02:03:
                    f1:b4:d0:2e:95:b5:42:9d:f9:48:13:d0:cf:ca:78:
                    df:18:d3:f6:fd:87:4a:19:01:31:5f:f1:53:d5:56:
                    74:b3:87:27:e9:b3:a6:99:93:5f:66:d2:46:17:a8:
                    48:c0:c3:eb:c8:67:2b:b9:03:3c:29:4b:74:23:9d:
                    3a:3b:b3:92:4c:8c:ff:79:32:1e:e1:49:2a:af:bc:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:AF:89:3A:68:BA:15:63:FB:C4:C0:D4:CF:6B:E1:A9:84:9A:18
            X509v3 Authority Key Identifier:
                keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:00:05:52:47:16:03:88:03:97:3f:fc:3d:6f:fd:31:f7:58:
         b2:33:92:b3:52:ea:d0:2e:2d:da:2e:07:3b:c8:91:37:fa:bd:
         27:41:12:1e:14:6b:4e:b9:23:d2:29:09:5f:b9:3a:64:e8:59:
         50:cb:dc:67:cb:d2:e6:d7:5d:e2:ca:4d:49:e3:7a:53:22:9f:
         7b:50:b6:df:3c:e1:2a:34:43:41:90:28:38:47:57:d4:e3:11:
         9e:53:09:eb:3b:b9:19:99:4c:f7:b6:35:76:cf:09:42:e8:a1:
         13:c3:b2:0f:51:43:05:07:2e:15:a4:57:d9:69:01:eb:75:2d:
         73:83:59:ea:76:2c:5f:d8:d0:81:34:4f:6d:21:31:b1:7d:68:
         8c:32:33:52:72:8b:62:f6:f1:b2:1d:5a:ae:67:e7:de:4a:8e:
         52:af:e9:2c:f0:c7:02:f7:74:5f:ab:d3:f4:cf:4c:03:16:bc:
         72:b8:d0:a7:f0:08:f1:3f:d2:04:23:77:be:27:9d:c2:53:41:
         93:ba:45:42:9f:79:85:ba:8d:fc:c5:49:13:11:73:ab:c2:50:
         bb:12:3e:a6:7d:e4:5f:5c:3f:73:27:06:60:95:a9:5e:65:bb:
         2f:9c:a7:5f:22:1b:62:fb:54:6a:51:4a:18:2b:f3:c8:b7:3e:
         d6:d3:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:36 2026 by rpki-client