Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa
File:                     3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa (raw, json)
Hash identifier:          48zc7cyqj4nzJ0K4Z0ZMw7oJG+y1oMMt+yDekMmCFaI=
Subject key identifier:   5B:9A:DB:56:F0:68:32:41:DD:76:46:7D:09:AF:ED:E8:37:CD:D3:2D
Certificate issuer:       /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
Certificate serial:       7BBE5B0B4AD92593DB32B9260B038CB83E468612
Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa
Signing time:             Sun 03 May 2026 02:58:51 +0000
ROA not before:           Sun 03 May 2026 02:53:51 +0000
ROA not after:            Sun 02 May 2027 02:58:51 +0000
asID:                     153082
IP address blocks:        160.22.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl
                          rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:be:5b:0b:4a:d9:25:93:db:32:b9:26:0b:03:8c:b8:3e:46:86:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
        Validity
            Not Before: May  3 02:53:51 2026 GMT
            Not After : May  2 02:58:51 2027 GMT
        Subject: CN=5B9ADB56F0683241DD76467D09AFEDE837CDD32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:51:24:c5:ad:a6:a6:3b:30:74:13:6a:08:
                    e8:5a:72:ef:9b:18:bc:8d:e8:d5:0e:9e:e0:f3:0b:
                    51:22:9f:c6:84:1d:48:7b:f4:6f:91:69:f5:46:5a:
                    fc:77:7e:5c:19:35:6c:30:a9:11:89:d8:8c:c8:e5:
                    5f:c3:7a:39:41:d7:a7:80:f6:02:a3:d0:65:3f:02:
                    7a:33:08:e4:b7:1b:38:97:54:0f:98:22:72:0b:4d:
                    66:78:8a:de:38:83:0e:f7:12:d9:e9:65:9d:54:3f:
                    f1:2a:94:f4:fa:d4:8a:b8:04:fd:10:f8:ce:6b:ad:
                    49:14:1f:55:db:ae:3f:18:36:95:93:4e:8b:c8:01:
                    07:13:c5:49:64:53:24:bc:99:7f:c6:73:0c:4a:a8:
                    3e:c7:6a:22:82:13:8c:28:33:e8:9f:f9:da:56:00:
                    af:5a:b5:6f:3b:75:e1:f5:f2:35:93:15:c7:3a:88:
                    c7:0e:40:14:a8:5c:7c:50:82:26:61:40:0d:ee:97:
                    c3:35:c4:2b:b7:ac:8c:51:ab:51:23:15:36:aa:cf:
                    1d:e4:be:1e:b0:c5:d0:00:9b:5f:5a:da:41:10:f5:
                    0f:8e:05:40:2e:48:b3:60:4f:d7:4a:7d:98:a3:b0:
                    cf:88:ab:be:49:75:3e:ac:e1:86:99:ea:0e:5a:91:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:DB:56:F0:68:32:41:DD:76:46:7D:09:AF:ED:E8:37:CD:D3:2D
            X509v3 Authority Key Identifier:
                keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32342d3234203d3e20313533303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:86:51:dd:ad:08:2b:a1:9e:84:ba:83:50:3f:d1:07:33:
         c3:ad:ca:37:7d:c7:a9:52:60:e6:cf:d7:f4:47:9b:e6:da:4b:
         cf:6e:ea:1c:05:db:95:4e:b6:a3:e8:6b:11:dc:cc:2a:32:10:
         6f:0d:5b:bb:ca:29:3d:65:9d:8b:19:8d:97:52:38:29:4f:12:
         20:9d:43:2c:4c:e6:0f:f5:2a:b5:a7:68:c2:86:01:40:ae:32:
         fb:4a:d8:d8:2e:fa:4f:19:47:56:1c:11:6e:18:d1:47:e8:e1:
         5b:29:ef:9d:32:d3:05:60:20:ad:a2:b0:f7:49:75:a5:df:92:
         b5:be:83:a8:a0:27:cd:5b:f5:7a:ed:b1:02:ba:33:9b:99:2b:
         9e:9f:52:72:2c:e4:22:27:67:54:3c:10:76:70:a6:65:7b:45:
         b9:74:58:b8:c3:33:d1:4c:8c:7d:22:89:91:8f:3a:88:e3:c6:
         d4:36:f1:22:20:fc:95:70:3b:50:58:41:19:ea:62:aa:b5:41:
         2f:76:6c:16:f6:0f:04:5b:24:86:22:29:d4:16:e3:db:af:74:
         e3:63:50:c7:05:c5:72:a9:23:1d:14:e9:38:77:0d:55:f4:68:
         ed:df:c3:7d:a3:81:67:ba:59:33:75:5b:a5:2a:48:fb:54:21:
         e4:90:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:13 2026 by rpki-client