Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa
File:                     3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (raw, json)
Hash identifier:          4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=
Subject key identifier:   49:D7:46:F4:FC:37:C0:86:39:DE:51:6E:01:B0:7C:63:E1:48:04:B2
Certificate issuer:       /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
Certificate serial:       40825FF82AF1F80E71382B14A442755743116E1E
Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa
Signing time:             Sun 03 May 2026 02:54:49 +0000
ROA not before:           Sun 03 May 2026 02:49:49 +0000
ROA not after:            Sun 02 May 2027 02:54:49 +0000
asID:                     152814
IP address blocks:        160.22.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl
                          rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:82:5f:f8:2a:f1:f8:0e:71:38:2b:14:a4:42:75:57:43:11:6e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
        Validity
            Not Before: May  3 02:49:49 2026 GMT
            Not After : May  2 02:54:49 2027 GMT
        Subject: CN=49D746F4FC37C08639DE516E01B07C63E14804B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:5a:56:86:71:85:98:8f:bf:02:4d:8d:16:
                    b3:f1:2a:2a:85:ae:0f:15:9e:49:62:c0:9a:9e:6d:
                    1b:10:e9:d7:18:55:fb:6a:75:e6:1c:4a:26:f6:ca:
                    a4:ce:e1:9b:77:c4:a3:91:0d:a6:ff:aa:9b:9d:2b:
                    68:c0:10:1c:67:97:aa:23:09:9c:d5:29:0a:66:1e:
                    5c:e4:be:9f:ff:fb:7b:d8:39:d8:d1:f2:8c:46:3d:
                    78:ff:c7:07:f2:2d:59:5d:c3:fd:64:fe:06:af:90:
                    16:57:09:bd:3a:71:40:c2:71:5e:91:4e:13:fc:11:
                    9d:70:f3:0c:bb:18:c6:8a:12:17:1e:52:fb:04:56:
                    29:46:53:00:2d:6f:df:bc:6e:24:df:67:b5:f7:76:
                    ad:7a:c9:11:f0:9a:2c:17:e2:76:f4:08:7b:a2:e6:
                    49:3d:6d:3b:10:d1:7e:bc:ef:41:13:17:f7:4d:b6:
                    36:1a:5a:b8:6e:85:23:8a:60:1b:31:74:e9:ca:6e:
                    52:b8:e9:99:75:d4:6c:d3:05:b8:e5:1a:74:b3:99:
                    da:99:b8:6c:ef:a0:cd:de:d7:dd:16:5d:01:f4:00:
                    7f:a1:c3:f8:05:dd:96:20:fb:e3:a5:72:b2:49:e8:
                    6d:98:46:cb:66:c6:18:18:8b:25:17:eb:75:a1:bb:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D7:46:F4:FC:37:C0:86:39:DE:51:6E:01:B0:7C:63:E1:48:04:B2
            X509v3 Authority Key Identifier:
                keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:57:cb:11:55:bf:da:96:5d:3d:7b:7c:b3:e7:cf:21:24:
         c6:d6:51:a1:b5:60:47:80:b7:1a:3a:08:e3:11:07:7e:45:17:
         2e:2f:61:28:c5:f2:4d:e8:b2:63:40:d7:84:d4:24:96:89:e2:
         8e:82:82:23:98:bc:ec:25:2b:5d:2b:6a:33:db:a2:51:12:4b:
         81:67:85:1e:f6:ca:34:b9:bc:46:cc:d2:ea:60:d2:98:f3:ab:
         0d:dc:2b:70:f9:6e:7d:fb:ab:40:46:ad:10:f1:cf:fb:a1:1c:
         c8:47:6d:6c:01:40:16:11:10:31:65:43:0a:ea:f8:97:6a:8e:
         eb:34:c9:18:f7:f3:fc:ff:5b:1d:bb:0d:52:62:0f:8c:b4:82:
         3c:2c:c0:85:6c:1d:af:f1:9e:2c:41:5f:41:25:41:00:09:5f:
         c2:fd:cc:03:0c:a3:71:18:ab:cd:1e:1a:f7:2c:d1:12:1a:d3:
         a5:e0:ca:58:82:9c:8c:ef:90:5d:e5:fc:51:92:c1:55:57:f6:
         d9:e9:55:84:6e:92:9a:80:41:4f:d9:de:79:32:79:d6:90:f7:
         6d:26:a9:b6:72:8d:c0:df:7f:dc:48:a2:1a:1c:10:bd:2d:ab:
         54:3b:8a:5e:b1:3e:9d:96:9a:dc:ff:2d:c4:fc:34:c0:db:7a:
         89:a6:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:03 2026 by rpki-client