Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa
File:                     3136302e32322e362e302f32342d3234203d3e20313532373936.roa (raw, json)
Hash identifier:          +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=
Subject key identifier:   FB:3E:E1:10:4C:BD:F4:2C:76:8D:2E:D6:99:6B:23:7C:45:6E:DA:79
Certificate issuer:       /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Certificate serial:       647561B69A195F8E49FE244B3EFDA65848D7B9E6
Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa
Signing time:             Sun 03 May 2026 02:59:14 +0000
ROA not before:           Sun 03 May 2026 02:54:14 +0000
ROA not after:            Sun 02 May 2027 02:59:14 +0000
asID:                     152796
IP address blocks:        160.22.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
                          rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:61:b6:9a:19:5f:8e:49:fe:24:4b:3e:fd:a6:58:48:d7:b9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
        Validity
            Not Before: May  3 02:54:14 2026 GMT
            Not After : May  2 02:59:14 2027 GMT
        Subject: CN=FB3EE1104CBDF42C768D2ED6996B237C456EDA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:d3:ad:40:05:b2:d6:e2:10:f7:24:da:1d:
                    2a:21:93:e9:35:5e:bc:d5:ef:56:c9:b3:91:b5:28:
                    6e:70:96:56:50:bb:52:5c:3c:b6:1f:da:f1:a7:74:
                    e4:4c:37:2a:cf:83:f2:ec:b3:4b:e3:66:4e:5c:24:
                    b8:d5:d9:7e:78:3e:69:32:48:aa:9b:89:74:0b:c2:
                    eb:f1:a9:8b:8d:c7:87:cc:d3:5f:91:93:40:b5:46:
                    ad:9c:cc:53:17:7a:a8:24:e0:0c:49:80:88:4a:0a:
                    09:8b:66:51:b8:15:d7:c4:30:91:ca:4a:2d:3e:51:
                    75:9b:75:6d:d6:6d:f0:6b:7b:1f:97:d3:df:16:73:
                    1b:fa:e5:2d:a2:cc:12:fa:00:72:39:b1:b9:ee:1f:
                    c2:d4:3d:f4:07:18:3a:93:21:16:0b:4b:ae:a7:e7:
                    af:b1:81:9b:0b:f0:d2:3a:62:1a:91:28:75:f0:17:
                    06:1d:c0:1d:40:53:fd:94:9c:1d:b2:0a:f6:71:89:
                    c4:f2:06:de:9e:98:0a:6c:c7:42:ce:b0:1c:a2:bb:
                    b5:2c:fc:7e:61:17:0d:eb:b6:ff:37:f4:a4:65:b0:
                    57:f6:85:bc:a6:e8:3f:32:ab:85:87:8b:2d:3f:08:
                    dc:d9:bf:5c:96:c5:fa:b0:1f:b0:88:25:d8:ce:74:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3E:E1:10:4C:BD:F4:2C:76:8D:2E:D6:99:6B:23:7C:45:6E:DA:79
            X509v3 Authority Key Identifier:
                keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32342d3234203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:56:e4:2d:59:37:48:84:24:70:f3:8b:53:76:88:49:c3:ce:
         82:eb:89:f5:45:5b:87:c6:be:b3:e7:e3:e6:5f:d9:46:fb:7a:
         ed:e9:16:62:db:4f:81:8e:1c:c5:c9:5a:26:e8:e9:09:40:42:
         d0:5a:f0:8d:13:1b:60:b8:18:fa:6d:3a:8f:88:db:11:e0:5c:
         6f:42:78:d4:9f:36:fc:5d:50:47:6e:1d:5d:6b:92:76:cf:e1:
         0c:15:fb:31:bd:e1:86:94:8e:d9:99:e2:43:1a:63:df:ca:83:
         38:46:d3:21:6b:be:5d:a4:82:b2:03:8d:1e:65:2a:45:97:56:
         f2:47:4a:bd:7d:ee:21:3d:29:fe:a5:b6:f4:7e:77:b9:ae:67:
         a3:23:2e:06:43:da:0e:99:53:27:9d:8a:ab:d4:e6:0d:e4:f7:
         af:bc:19:f5:22:18:c2:10:2a:77:c8:1a:0b:9e:d4:51:2a:e6:
         73:d2:c5:97:81:4c:9f:36:c5:3c:1c:82:67:07:1b:94:2c:4c:
         ab:d1:bc:f2:67:76:9d:1a:8d:b4:b3:30:e9:4b:7b:9a:a9:60:
         53:4c:3d:37:f6:96:f1:3a:ed:c7:e3:21:d8:52:e1:77:f4:98:
         c5:f2:ba:e4:51:b9:60:19:16:f1:e5:64:0a:ab:60:f1:15:f6:
         c7:d9:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:32 2026 by rpki-client