Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa
File:                     3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (raw, json)
Hash identifier:          hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=
Subject key identifier:   87:FE:38:CA:4B:D9:CB:07:F2:86:C4:59:D7:3B:44:9E:31:92:E2:11
Certificate issuer:       /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Certificate serial:       04FB8D052783F152B1F8F13B22EFB4299E98B770
Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa
Signing time:             Sun 03 May 2026 02:56:02 +0000
ROA not before:           Sun 03 May 2026 02:51:02 +0000
ROA not after:            Sun 02 May 2027 02:56:02 +0000
asID:                     153131
IP address blocks:        160.191.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
                          rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fb:8d:05:27:83:f1:52:b1:f8:f1:3b:22:ef:b4:29:9e:98:b7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
        Validity
            Not Before: May  3 02:51:02 2026 GMT
            Not After : May  2 02:56:02 2027 GMT
        Subject: CN=87FE38CA4BD9CB07F286C459D73B449E3192E211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:63:c1:92:7b:5c:3e:db:5d:17:1a:a4:12:
                    d1:02:3c:8d:84:fc:d1:a1:30:5e:90:0a:17:77:34:
                    27:36:b8:e3:49:ab:bb:ef:38:05:e7:f2:40:2b:e0:
                    8c:9b:88:98:c4:87:9e:33:b4:66:75:a2:07:42:02:
                    ac:58:8f:34:2c:a0:c0:99:24:1f:df:00:9a:a0:88:
                    0d:79:dd:b4:54:03:12:43:d4:db:dd:6a:12:4f:1c:
                    40:40:78:f6:8a:1b:a3:00:52:09:8d:e6:d0:3d:e5:
                    78:e5:26:39:6b:e8:68:75:d3:30:5a:c4:79:9c:39:
                    13:b6:bd:fc:bc:19:5c:b4:0c:61:6a:ef:89:4d:10:
                    1e:20:a1:17:af:aa:05:eb:83:03:a5:df:28:61:a8:
                    48:00:ba:e4:df:89:8b:d0:bb:5c:b5:1a:34:ed:24:
                    2d:0a:9e:ef:40:8f:36:fd:63:ad:0f:0b:c5:3f:e5:
                    c1:44:3a:f7:72:c2:b7:93:d1:3d:e2:a1:59:9f:a1:
                    63:5d:1a:cb:f5:0f:63:cd:e5:1a:41:19:21:7f:d2:
                    45:a6:80:05:a5:64:7e:1c:2d:73:85:7c:b0:df:63:
                    2e:40:2f:80:c2:b7:93:c1:a5:13:b9:d3:cf:36:d5:
                    70:71:b9:7f:60:ff:f0:7f:a3:f9:91:20:c1:bd:b6:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FE:38:CA:4B:D9:CB:07:F2:86:C4:59:D7:3B:44:9E:31:92:E2:11
            X509v3 Authority Key Identifier:
                keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:91:af:46:76:bc:f0:ee:7e:c9:a4:55:ca:ff:e4:c4:23:83:
         ae:07:7c:93:5e:ab:a9:8a:cd:90:69:6e:b5:5b:c2:39:8d:3a:
         15:5d:b7:d3:99:84:35:16:03:85:92:19:7d:a2:28:41:3a:61:
         c2:c5:2d:88:fb:29:9c:6a:fb:e4:93:c3:d6:43:4d:64:6e:b5:
         83:59:ac:9b:9a:91:b3:da:51:84:5e:ec:ec:e0:70:88:7d:44:
         f6:3f:10:51:4f:33:92:a8:7d:6e:9f:2f:3e:8e:b0:98:87:c9:
         fe:21:a0:6a:f7:fe:75:43:8b:cf:ed:70:da:0d:6e:f0:d7:d8:
         cd:20:ee:91:76:ba:98:87:55:ad:b4:e3:18:90:65:85:79:4c:
         af:61:9d:32:1e:23:bf:96:09:12:5d:e4:e4:02:e9:b9:3c:8b:
         c1:78:cc:f5:35:93:1f:22:42:81:e7:5e:d9:f7:b0:88:90:14:
         40:3e:5e:c7:19:c7:38:f7:36:f0:4c:0e:11:88:05:2d:c0:82:
         09:45:4d:3c:ce:bf:02:b6:00:f6:ed:55:87:41:d5:23:c3:fa:
         cc:1b:95:ad:1a:25:f4:63:75:bd:64:4a:02:dc:eb:ae:b5:07:
         a1:a4:ed:c0:1f:0a:7c:0e:c8:b1:04:23:db:51:71:7f:d4:94:
         20:a0:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:00 2026 by rpki-client