Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa
File:                     3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (raw, json)
Hash identifier:          Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=
Subject key identifier:   AF:CF:40:E7:F2:DE:BF:8D:6F:96:A2:5A:EF:81:FF:11:C2:05:7B:CD
Certificate issuer:       /CN=EBA1F4874C4867D2CAA214867052E9413088CD22
Certificate serial:       20177B776957798E256C10184E9556FE66184A24
Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa
Signing time:             Sun 03 May 2026 03:06:57 +0000
ROA not before:           Sun 03 May 2026 03:01:57 +0000
ROA not after:            Sun 02 May 2027 03:06:57 +0000
asID:                     152764
IP address blocks:        160.19.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl
                          rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:17:7b:77:69:57:79:8e:25:6c:10:18:4e:95:56:fe:66:18:4a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22
        Validity
            Not Before: May  3 03:01:57 2026 GMT
            Not After : May  2 03:06:57 2027 GMT
        Subject: CN=AFCF40E7F2DEBF8D6F96A25AEF81FF11C2057BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:e6:48:8a:85:30:65:6d:48:ec:7f:97:e0:
                    04:f0:4d:34:4e:17:38:de:1b:a7:77:eb:3f:e2:46:
                    e6:41:90:ea:eb:97:89:82:18:8f:28:9e:81:37:52:
                    0d:97:b1:dc:95:20:d2:32:41:a3:a0:3a:8b:26:14:
                    05:70:ef:1b:37:e5:d6:2a:8b:99:3c:7c:16:37:82:
                    e6:48:09:a6:87:42:99:c5:47:db:3b:f5:ad:ef:7d:
                    fd:5f:cd:49:5d:72:19:ba:d5:69:ab:7b:94:62:a7:
                    55:55:99:e1:32:9c:03:1c:8f:bc:29:08:32:e8:3d:
                    98:a1:c2:5e:eb:0b:31:0f:35:c3:09:90:5c:a6:48:
                    56:1a:b8:ab:a1:be:b2:68:38:f8:87:3b:72:ab:1d:
                    57:18:35:60:e3:a3:63:ef:b8:1e:3f:8b:d7:96:69:
                    55:ea:92:cc:73:cf:fb:99:f5:63:e3:d0:04:bb:08:
                    2e:80:84:4f:94:30:41:e9:bf:3c:17:ef:0d:68:69:
                    5e:53:c4:cc:33:bb:18:8c:fa:20:07:60:cd:79:c2:
                    83:42:d8:4c:3e:4b:83:68:61:e7:2e:cd:11:90:db:
                    a5:74:b2:d7:7a:26:5c:ec:b4:77:f7:a3:59:84:c0:
                    d8:c3:b9:b8:f5:94:70:c0:44:07:de:c3:0c:ec:38:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:40:E7:F2:DE:BF:8D:6F:96:A2:5A:EF:81:FF:11:C2:05:7B:CD
            X509v3 Authority Key Identifier:
                keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:56:3e:c0:80:ea:b7:f4:94:e4:51:d9:5e:29:26:22:fa:
         b6:4d:71:e7:be:82:cb:4f:7a:33:f3:32:1e:88:65:bc:cc:9e:
         4a:ce:16:1e:0b:09:03:7b:77:01:d7:df:4c:e7:00:3f:20:d3:
         c6:62:aa:73:be:55:3a:3c:c1:9d:de:b4:5f:63:25:5b:88:da:
         78:99:ae:48:5b:90:d7:d5:4b:3b:c8:57:2f:1a:38:84:e7:c4:
         5d:8c:7e:b1:ab:67:fc:02:d3:05:d7:0f:d4:7c:84:f4:86:11:
         8b:19:ca:d4:d4:d4:67:73:16:6d:75:55:32:2d:cc:13:23:18:
         c8:f2:c1:94:fd:3c:c1:d9:f7:4d:ce:42:67:04:9f:0a:c1:1e:
         ef:53:c7:bf:f6:8e:4f:e8:74:26:94:89:d3:47:28:5c:69:d4:
         67:c6:73:71:3a:98:cc:65:e9:39:a5:d2:4c:96:2c:21:1b:d1:
         f4:a0:a8:0b:01:ff:38:98:8c:c7:35:41:a9:41:92:23:e1:96:
         d5:8f:63:58:63:59:ae:63:de:08:75:6a:86:6d:4c:e6:fd:12:
         0f:b1:76:f5:fa:9b:22:20:ba:3f:9d:74:9b:1b:cf:4d:c4:9d:
         22:09:b2:33:ed:9a:95:1f:bf:4c:4e:bf:66:a0:62:3b:bb:16:
         7d:f3:3a:f6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIBd7d2lXeY4lbBAYTpVW/mYYSiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz
MDg4Q0QyMjAeFw0yNjA1MDMwMzAxNTdaFw0yNzA1MDIwMzA2NTdaMDMxMTAvBgNV
BAMTKEFGQ0Y0MEU3RjJERUJGOEQ2Rjk2QTI1QUVGODFGRjExQzIwNTdCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCceZIioUwZW1I7H+X4ATwTTRO
FzjeG6d36z/iRuZBkOrrl4mCGI8onoE3Ug2XsdyVINIyQaOgOosmFAVw7xs35dYq
i5k8fBY3guZICaaHQpnFR9s79a3vff1fzUldchm61Wmre5Rip1VVmeEynAMcj7wp
CDLoPZihwl7rCzEPNcMJkFymSFYauKuhvrJoOPiHO3KrHVcYNWDjo2PvuB4/i9eW
aVXqksxzz/uZ9WPj0AS7CC6AhE+UMEHpvzwX7w1oaV5TxMwzuxiM+iAHYM15woNC
2Ew+S4NoYecuzRGQ26V0std6JlzstHf3o1mEwNjDubj1lHDARAfewwzsOMpjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUr89A5/Lev41vlqJa74H/EcIFe80wHwYDVR0j
BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0
QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD
RDIyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZhLWFkMjItNDk3OS1i
ZTQzLTk1MWM3NmYyZjkyMC8wLzMxMzYzMDJlMzEzOTJlMzIzMDM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBPPMA0GCSqG
SIb3DQEBCwUAA4IBAQBeW1Y+wIDqt/SU5FHZXikmIvq2TXHnvoLLT3oz8zIeiGW8
zJ5KzhYeCwkDe3cB199M5wA/INPGYqpzvlU6PMGd3rRfYyVbiNp4ma5IW5DX1Us7
yFcvGjiE58RdjH6xq2f8AtMF1w/UfIT0hhGLGcrU1NRncxZtdVUyLcwTIxjI8sGU
/TzB2fdNzkJnBJ8KwR7vU8e/9o5P6HQmlInTRyhcadRnxnNxOpjMZek5pdJMliwh
G9H0oKgLAf84mIzHNUGpQZIj4ZbVj2NYY1muY94IdWqGbUzm/RIPsXb1+psiILo/
nXSbG89NxJ0iCbIz7ZqVH79MTr9moGI7uxZ98zr2
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:01 2026 by rpki-client