Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa
File:                     3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (raw, json)
Hash identifier:          NyaKnWNdcDfhRDv5OOV0uHnlXww5Tu4WFH6FM+NsLLc=
Subject key identifier:   BC:9E:4B:41:5F:49:15:2A:82:A7:AE:C0:7C:08:AC:B9:70:AB:FF:6D
Certificate issuer:       /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F
Certificate serial:       42A1EC6043AC31E43112C205C3F7AAD355C6A066
Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa
Signing time:             Sun 03 May 2026 02:55:07 +0000
ROA not before:           Sun 03 May 2026 02:50:07 +0000
ROA not after:            Sun 02 May 2027 02:55:07 +0000
asID:                     152836
IP address blocks:        160.22.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl
                          rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:ec:60:43:ac:31:e4:31:12:c2:05:c3:f7:aa:d3:55:c6:a0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F
        Validity
            Not Before: May  3 02:50:07 2026 GMT
            Not After : May  2 02:55:07 2027 GMT
        Subject: CN=BC9E4B415F49152A82A7AEC07C08ACB970ABFF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:fb:1f:aa:ad:a4:fa:4e:51:30:a9:12:e3:
                    2c:08:54:dd:04:58:b9:18:ca:52:f9:08:82:d8:b3:
                    fe:4b:29:b6:11:e7:8a:72:d8:af:75:13:13:22:01:
                    39:69:fc:cb:6a:67:d8:f5:48:dc:0b:70:10:99:f8:
                    f7:f6:2c:62:7c:12:48:e2:93:83:08:93:5a:5b:a9:
                    d0:df:d0:3c:cb:21:3c:2b:d6:2e:55:52:54:dc:73:
                    64:03:2e:df:2c:7e:5f:bc:a2:fd:20:a4:06:92:3b:
                    ae:5e:dd:3e:66:c2:e7:30:78:da:2f:7f:e6:64:00:
                    54:4d:fb:7f:2e:d0:22:6f:8c:d0:d2:ad:48:35:50:
                    d5:b8:14:d4:fe:c0:f3:a9:5c:7c:70:64:44:d7:b3:
                    1c:7d:cf:49:39:14:94:5e:b4:b7:19:d0:76:78:ff:
                    c0:0b:85:ba:4d:c1:1c:4f:25:70:09:91:e4:92:d0:
                    30:67:05:9d:7c:17:0f:f0:a8:9e:1e:34:13:24:fc:
                    19:e4:61:fc:95:ac:0c:15:3f:01:98:40:38:0b:83:
                    e2:9d:1a:e9:56:94:76:af:13:63:77:28:61:ad:c6:
                    d5:ad:c8:14:8f:a5:21:4e:a7:35:4f:61:58:c0:37:
                    41:42:10:a3:a2:27:ee:ff:00:02:bf:4e:12:b6:9c:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9E:4B:41:5F:49:15:2A:82:A7:AE:C0:7C:08:AC:B9:70:AB:FF:6D
            X509v3 Authority Key Identifier:
                keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:43:fb:22:83:75:76:b3:ef:03:f4:19:16:89:59:7f:fd:
         d3:14:97:de:4e:5e:39:50:e7:e6:20:bd:79:b7:44:22:c0:39:
         17:c1:e1:68:a0:86:b9:2f:8f:d9:ea:fc:02:05:a5:26:94:a3:
         66:4f:7f:c7:68:51:65:ce:7d:a4:6c:4e:0e:02:46:81:bc:d0:
         7b:2d:5a:e4:b8:16:96:fc:a1:13:a2:88:b3:e5:3c:1a:0a:6f:
         1a:f4:88:50:43:c3:a9:ce:e6:16:8c:06:b1:05:99:ec:62:41:
         78:04:82:28:d5:91:61:e7:75:f4:47:eb:36:dc:33:92:04:ea:
         b9:73:81:bc:7b:c5:9c:1d:d6:6f:7f:e9:f9:1a:84:67:4a:9f:
         d9:a9:eb:90:2a:ff:93:fb:54:78:ec:57:7d:6a:8b:fc:57:d4:
         b9:98:b4:ac:62:27:10:75:92:6f:97:d4:24:65:37:e5:ef:2a:
         2e:72:d5:52:31:2f:97:44:6d:46:9e:5d:15:62:68:2b:0b:18:
         0c:11:8e:a9:b7:03:58:b4:15:e2:1a:e0:81:16:b0:ef:38:fd:
         96:d4:cf:1c:38:9f:21:28:92:2b:13:b3:36:45:15:c7:08:c8:
         a0:97:fe:3b:b5:bc:be:ab:85:7a:66:2c:3f:93:9d:16:ba:41:
         d9:4b:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:02 2026 by rpki-client