Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa
File:                     3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (raw, json)
Hash identifier:          zB+Gp09Xv+ze/cWNBFwHk3DIfApc6pdj5NfB2Dg0qyE=
Subject key identifier:   D3:A5:36:84:86:3E:BC:63:4E:F8:0B:BB:E7:42:C1:F9:EC:DA:91:76
Certificate issuer:       /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial:       079F7B7EC6C585651BB8F65104278F37A2813656
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa
Signing time:             Sun 03 May 2026 02:59:27 +0000
ROA not before:           Sun 03 May 2026 02:54:27 +0000
ROA not after:            Sun 02 May 2027 02:59:27 +0000
asID:                     153060
IP address blocks:        160.25.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
                          rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:7b:7e:c6:c5:85:65:1b:b8:f6:51:04:27:8f:37:a2:81:36:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
        Validity
            Not Before: May  3 02:54:27 2026 GMT
            Not After : May  2 02:59:27 2027 GMT
        Subject: CN=D3A53684863EBC634EF80BBBE742C1F9ECDA9176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:11:eb:6f:93:d6:c3:4b:b3:ec:bd:4a:46:
                    73:9d:6d:0c:5f:ed:8d:ff:a8:d4:13:f4:9d:c5:6c:
                    fe:32:72:8a:65:b7:6f:43:8a:f8:8e:8b:8d:48:97:
                    b4:e2:6a:58:ba:40:c2:d4:a2:d7:b2:d0:27:41:2e:
                    73:b3:63:51:ce:20:37:82:0e:fb:ee:a1:f2:a8:88:
                    c8:71:bd:d3:05:56:84:9a:a1:79:23:0b:ee:bc:a0:
                    bf:c4:a4:27:f4:13:94:53:f5:71:92:ac:f3:84:cf:
                    94:f2:d0:27:79:86:1d:cc:a3:e6:4a:c6:4d:45:b2:
                    0f:38:ed:f3:37:67:8e:2c:1a:eb:ea:92:4a:44:a9:
                    5d:67:54:c7:4b:aa:c7:e3:77:53:83:05:0e:d4:eb:
                    dc:25:1e:e9:8c:02:af:87:16:fc:96:a0:94:01:85:
                    0f:a2:d3:aa:e5:a2:13:0f:b6:3c:93:02:00:d8:c5:
                    0d:9a:34:0f:46:4e:4e:9d:99:60:fd:93:fc:89:74:
                    e8:98:3e:9f:0a:ec:93:18:c6:2a:da:07:f6:dd:67:
                    61:ee:c0:53:ef:22:df:51:4a:16:5e:0d:a5:1b:6a:
                    96:09:52:cc:48:f6:e7:49:5e:b6:14:36:03:c3:3f:
                    fe:8b:c1:4c:7d:82:90:b8:c5:ef:e8:da:09:3b:07:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:36:84:86:3E:BC:63:4E:F8:0B:BB:E7:42:C1:F9:EC:DA:91:76
            X509v3 Authority Key Identifier:
                keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:60:81:77:35:ae:2e:52:f4:6a:45:e7:8f:79:44:27:2b:
         4a:4a:50:f8:93:bc:e3:a8:aa:1a:69:58:d0:24:13:e9:86:b1:
         63:f6:6c:1b:c6:03:ef:6b:00:d8:37:6d:3e:9d:15:9f:6a:5c:
         9c:5e:b2:9d:ca:b5:f5:c3:82:d5:48:dc:58:98:2c:59:7b:b4:
         d5:24:4e:e7:bd:87:63:e7:46:7c:ba:e9:c8:f9:13:d4:fc:c5:
         f0:bc:d4:2a:67:af:1b:a8:e5:a4:26:52:a1:c5:fe:47:8f:3b:
         e5:f3:4e:91:c5:86:70:4a:fc:29:a8:04:43:aa:6c:ec:4e:b6:
         0c:94:e4:99:d5:a3:a0:ea:01:41:1f:f5:b0:d5:4f:ed:e6:d1:
         c3:b1:66:78:33:ac:f0:74:92:65:e9:40:4a:a2:c9:5f:8a:6e:
         97:36:78:30:89:8c:b9:ed:05:47:55:a8:a8:5f:4e:4c:47:07:
         52:d1:98:0c:1e:95:96:3e:b9:51:a1:a2:86:17:6e:ac:29:7c:
         18:f9:b1:9a:9f:40:33:26:d0:7a:35:4f:10:af:2f:8c:c5:3b:
         19:62:c9:fa:c5:63:7e:04:b3:8d:a2:70:7b:b6:ed:3f:57:2f:
         67:c5:2c:ab:32:bb:71:40:2d:14:a1:0d:40:9a:40:b9:68:64:
         be:83:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:01 2026 by rpki-client