Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa
File:                     3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (raw, json)
Hash identifier:          GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=
Subject key identifier:   B5:77:B4:B8:D8:AC:71:C4:AC:80:7C:39:80:9A:52:BF:C1:D2:C6:22
Certificate issuer:       /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7
Certificate serial:       454D55A65AF6075B7619DA35A557A94B3AAAA0BF
Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa
Signing time:             Sun 03 May 2026 03:07:43 +0000
ROA not before:           Sun 03 May 2026 03:02:43 +0000
ROA not after:            Sun 02 May 2027 03:07:43 +0000
asID:                     149933
IP address blocks:        160.187.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl
                          rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4d:55:a6:5a:f6:07:5b:76:19:da:35:a5:57:a9:4b:3a:aa:a0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7
        Validity
            Not Before: May  3 03:02:43 2026 GMT
            Not After : May  2 03:07:43 2027 GMT
        Subject: CN=B577B4B8D8AC71C4AC807C39809A52BFC1D2C622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:24:cd:3a:e1:9a:e6:38:b8:43:d7:d2:d4:
                    79:b3:d5:82:98:a8:59:fc:34:b4:48:3e:7c:0d:4c:
                    40:2b:c0:fc:e0:64:bf:f2:3b:5c:86:c3:0f:83:49:
                    b6:05:de:38:25:58:00:36:05:eb:75:99:cd:84:bd:
                    3d:22:04:7c:89:a7:5b:83:90:a8:f1:bc:c5:d7:b0:
                    45:0a:46:14:4a:ee:15:30:59:68:fe:50:86:4b:66:
                    f5:19:19:d5:fe:ca:41:22:8f:c1:34:e1:8d:9d:45:
                    9a:12:7e:6f:28:6f:94:6a:26:79:a4:24:a7:ef:f0:
                    23:09:e2:b6:e5:7d:69:f3:9c:08:aa:65:96:84:43:
                    39:c3:04:71:7c:8f:35:50:17:13:12:6c:c9:54:d1:
                    79:44:09:9f:a6:79:5b:a4:6f:c9:91:76:9c:e7:25:
                    fb:85:53:48:a3:dd:36:24:4e:f7:03:b8:8e:3a:91:
                    b1:a0:96:fb:d6:ae:61:4e:1a:91:5e:d7:56:36:ea:
                    75:18:a7:28:4a:16:d7:ef:0f:30:73:d5:03:34:47:
                    8d:48:7d:87:de:23:75:42:d1:bc:6e:91:dd:db:65:
                    14:ea:a8:cf:78:3b:6d:07:b8:57:fa:94:27:84:5c:
                    93:d8:5a:77:3a:5a:ac:28:10:3d:f6:47:88:cf:ef:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:B4:B8:D8:AC:71:C4:AC:80:7C:39:80:9A:52:BF:C1:D2:C6:22
            X509v3 Authority Key Identifier:
                keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:18:c6:0a:3d:82:1c:4c:35:99:f5:03:82:ba:82:be:1f:1a:
         00:24:a6:bb:f1:85:27:c6:a0:8c:79:b1:18:8d:dc:f3:98:09:
         14:b6:ff:a6:6f:0b:73:76:01:29:db:ad:8e:b3:54:65:5c:3e:
         0f:d6:98:58:d2:10:2d:10:7c:1d:d8:2c:9f:5f:98:b3:e4:2a:
         f0:05:2e:e5:b0:57:47:a4:28:63:77:6d:36:46:58:d4:05:c4:
         99:3c:1e:0c:07:a4:73:df:7c:d4:36:6e:88:c8:45:0b:e4:5b:
         d5:3f:4b:48:75:55:d5:5c:70:e2:7f:7e:13:4c:f4:46:5d:34:
         8e:0f:18:49:30:45:30:cc:ac:0d:7a:98:c7:91:c8:cb:4c:70:
         10:19:2b:a8:c8:92:13:7c:9c:b0:eb:81:0d:f8:00:53:f0:88:
         17:cc:fb:b8:6b:f7:b3:e4:3d:2c:9c:1b:51:ad:91:cf:7c:51:
         7f:b5:c2:a9:e4:c6:53:34:63:a3:60:ca:48:38:13:1a:8d:ec:
         47:5e:26:b5:9f:85:02:38:6e:a1:d3:d1:3a:01:cb:07:e4:6d:
         4a:d3:9e:4c:5f:9a:97:bf:ca:9b:24:d7:5a:5b:6a:ab:c6:81:
         39:30:6e:ec:78:09:93:1e:11:9d:af:25:f7:f8:a4:f6:93:8b:
         82:d3:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:07:52 2026 by rpki-client