Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
File:                     3136302e32322e372e302f32342d3234203d3e20313532373936.roa (raw, json)
Hash identifier:          k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=
Subject key identifier:   9A:4E:DD:9E:D7:2B:A3:4D:33:13:FA:B6:A3:8C:CF:3F:FE:6B:D2:17
Certificate issuer:       /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Certificate serial:       7286F8251A8C04FB55C603B6F744030367C0CA44
Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
Signing time:             Sun 03 May 2026 02:59:14 +0000
ROA not before:           Sun 03 May 2026 02:54:14 +0000
ROA not after:            Sun 02 May 2027 02:59:14 +0000
asID:                     152796
IP address blocks:        160.22.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
                          rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:86:f8:25:1a:8c:04:fb:55:c6:03:b6:f7:44:03:03:67:c0:ca:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
        Validity
            Not Before: May  3 02:54:14 2026 GMT
            Not After : May  2 02:59:14 2027 GMT
        Subject: CN=9A4EDD9ED72BA34D3313FAB6A38CCF3FFE6BD217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:88:1d:5f:07:57:20:95:52:53:96:58:9c:
                    50:0a:6b:2a:f8:80:39:a6:52:07:87:27:d1:6a:41:
                    ab:1e:6a:a7:e8:a9:36:1b:cc:10:06:57:35:fe:18:
                    59:d1:03:d4:56:e5:ad:b6:a8:78:83:02:1b:cc:cb:
                    b8:a6:c3:2e:e0:42:37:ae:fe:a7:34:f0:eb:2c:07:
                    a4:cf:34:a6:f2:06:66:fd:15:44:b4:75:d5:50:e1:
                    7f:bc:9f:00:91:db:73:93:b0:68:eb:96:43:a9:3e:
                    69:29:55:c9:40:f5:59:12:a3:c2:02:a7:7d:a2:3e:
                    0b:8b:25:f7:75:24:04:f0:bf:1f:a7:01:b1:e3:94:
                    da:94:9f:41:64:8e:d7:5b:44:ae:55:ff:f9:c6:9a:
                    92:87:2d:bd:f0:46:e3:46:e2:cb:69:a1:51:d7:0d:
                    f7:52:18:b5:6b:aa:14:1e:45:1c:02:73:33:05:7a:
                    bb:2b:cd:ba:c2:1c:e4:db:ec:63:c2:4c:70:ef:98:
                    f2:c9:b7:d5:ea:1e:e6:a2:be:02:3e:2c:89:a8:b0:
                    5c:fd:9d:bb:5c:3f:97:bd:13:31:3f:e7:d9:c0:45:
                    3d:82:bd:13:25:c0:79:9a:d5:c8:5e:c5:fc:2d:cf:
                    9b:af:51:16:5a:41:2e:dd:85:bd:88:aa:44:ea:87:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:DD:9E:D7:2B:A3:4D:33:13:FA:B6:A3:8C:CF:3F:FE:6B:D2:17
            X509v3 Authority Key Identifier:
                keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e6:95:3c:e5:82:10:9c:6f:87:51:20:1b:4a:45:51:d5:15:
         b3:f6:6d:66:02:a1:bb:56:d5:ea:eb:91:70:8d:c0:bb:f6:5d:
         fb:db:85:a8:56:56:ec:a4:83:d1:ca:01:a8:b6:86:c9:78:39:
         1f:e0:43:28:b3:b2:21:1c:95:0e:b0:13:80:6a:05:06:ac:fc:
         96:94:4c:cb:ae:08:f3:e0:e1:a3:2c:b6:a6:88:fd:73:8c:58:
         5b:4c:4d:25:48:22:4f:e1:5c:ea:dc:98:ba:86:9d:28:2f:5c:
         78:ef:a4:f6:30:51:c8:93:d8:0a:a7:8d:9c:c1:a2:c0:d3:6b:
         71:77:c8:71:af:59:1e:4b:30:83:4b:3a:75:e9:f1:d2:bb:ea:
         65:6f:c6:1c:62:80:1e:02:2d:4d:62:19:4d:b6:2d:a0:53:c8:
         09:ba:8d:a2:e0:4c:55:0b:b9:f1:dd:8c:28:88:d3:a7:20:29:
         57:12:9c:ec:16:05:b2:ea:e3:c8:c5:d3:70:00:29:2e:cc:2a:
         bd:a3:8f:a4:05:4f:63:30:00:a6:6b:92:09:59:88:d8:0c:e5:
         5f:e3:39:23:cf:4c:f0:5f:14:1b:47:30:9f:9b:d4:fc:70:03:
         da:0e:a3:cc:db:d5:dc:fa:f8:ff:3f:0b:62:c8:19:48:ab:cc:
         0d:21:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:11 2026 by rpki-client