Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
File:                     3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          lIhlMRIZLEBVMJXri3XJA/w3v0WW0NIWvRLNQvPmN24=
Subject key identifier:   F3:6B:34:10:36:24:6C:4F:E1:32:50:28:D3:8C:45:93:BD:C4:47:EC
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       51A44D33CEFF7F7E298BDE6F77AD72818C8EE1DD
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa
Signing time:             Sun 03 May 2026 03:01:16 +0000
ROA not before:           Sun 03 May 2026 02:56:16 +0000
ROA not after:            Sun 02 May 2027 03:01:16 +0000
asID:                     55699
IP address blocks:        160.19.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a4:4d:33:ce:ff:7f:7e:29:8b:de:6f:77:ad:72:81:8c:8e:e1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: May  3 02:56:16 2026 GMT
            Not After : May  2 03:01:16 2027 GMT
        Subject: CN=F36B341036246C4FE1325028D38C4593BDC447EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:79:b0:05:d7:6c:eb:c8:74:5f:b0:8e:43:
                    27:7f:5d:ca:98:9f:c2:0f:90:58:5f:2b:60:ba:80:
                    5b:e9:05:7f:4b:46:d3:bd:72:c3:c2:ed:42:45:0d:
                    ef:ad:16:d4:32:26:a0:86:09:f9:92:98:99:85:3c:
                    d2:88:fd:91:5a:e8:68:f4:45:de:ef:72:02:4f:96:
                    ed:2a:67:62:d0:cc:01:74:03:eb:72:25:2e:ef:35:
                    a5:b8:dd:f6:0f:0e:e8:0c:a7:bb:9b:46:51:fc:29:
                    5d:a3:2c:76:e4:29:2b:33:39:ad:10:60:8d:61:52:
                    b3:57:56:de:a7:ac:c0:8a:76:f9:ef:af:2e:1c:11:
                    e1:f5:d2:6b:00:b3:0d:0e:b1:42:8f:84:d5:b4:c7:
                    85:c1:27:d8:f9:b9:00:6e:56:19:22:06:6f:69:61:
                    d3:b1:78:ad:6e:bf:26:06:c6:70:c9:c0:76:54:f9:
                    45:fd:39:6d:f7:b3:15:5d:06:dd:06:ca:f6:b0:81:
                    ae:48:36:83:27:f8:65:d3:c9:9d:bb:10:6d:3b:dd:
                    0b:b1:f4:b5:24:35:f5:f6:a5:93:1f:6a:56:19:bd:
                    83:80:3c:fe:13:ed:9f:b9:53:04:a4:64:80:ce:ef:
                    87:d0:9d:ec:bf:18:93:1b:30:52:0a:aa:21:88:ed:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:34:10:36:24:6C:4F:E1:32:50:28:D3:8C:45:93:BD:C4:47:EC
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3136302e31392e3232342e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:97:15:cd:c0:47:f9:88:2a:57:6c:62:d0:46:8d:41:9f:
         a0:e7:8e:3b:a3:c4:41:05:bd:27:0b:b8:03:35:d1:b8:ea:b8:
         34:09:58:2d:95:6a:11:c8:55:65:ed:1f:a8:77:53:15:4e:cb:
         e5:fd:76:2c:9f:e6:92:a9:49:de:81:83:51:eb:c7:b9:1a:3d:
         6c:e1:1d:30:93:54:05:8f:07:24:78:74:23:ac:70:1d:dc:28:
         33:bd:56:17:8e:9c:e2:35:e7:99:ad:50:2d:90:75:e2:87:5f:
         bf:78:af:5f:41:1b:9a:2d:8a:e9:e8:a1:fd:bc:47:ad:73:ad:
         82:57:d6:21:92:60:c7:5e:29:16:e4:f3:20:b8:26:50:da:fd:
         21:8e:c1:f0:0b:f0:77:e4:85:6f:48:54:2e:96:d1:07:ca:54:
         81:4d:12:e0:76:e6:05:52:eb:75:94:e7:aa:e0:cd:fa:f0:81:
         f2:7f:35:7a:7a:89:03:cd:77:8c:84:e1:ed:39:16:76:9b:a1:
         6e:72:e9:1e:a5:a2:0b:15:d7:ea:f6:1c:b5:cb:0f:66:1f:a5:
         9e:dc:14:40:c5:f4:cb:a5:25:6b:e0:2a:ae:cb:12:d3:79:fb:
         f0:54:b4:62:0c:c0:d6:d5:7d:38:5c:c6:66:d6:86:3e:e6:3d:
         82:5e:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:48 2026 by rpki-client