Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
File:                     3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (raw, json)
Hash identifier:          Lv2NZjilkuqOJ+c1eBw2SoZh11bL7T0a8emlMlbGyBU=
Subject key identifier:   B9:D5:CE:10:DF:E3:D4:41:E6:6A:3E:38:CA:ED:A9:26:1C:C0:7C:A6
Certificate issuer:       /CN=546870A485381309B4CFED36047EB68D8C1B2C0E
Certificate serial:       3346868FC76CC3D013BC0D60B1BDC90EF90380DC
Authority key identifier: 54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
Signing time:             Sun 03 May 2026 03:13:40 +0000
ROA not before:           Sun 03 May 2026 03:08:40 +0000
ROA not after:            Sun 02 May 2027 03:13:40 +0000
asID:                     153064
IP address blocks:        160.25.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:86:8f:c7:6c:c3:d0:13:bc:0d:60:b1:bd:c9:0e:f9:03:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546870A485381309B4CFED36047EB68D8C1B2C0E
        Validity
            Not Before: May  3 03:08:40 2026 GMT
            Not After : May  2 03:13:40 2027 GMT
        Subject: CN=B9D5CE10DFE3D441E66A3E38CAEDA9261CC07CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:09:d8:49:07:10:61:25:04:92:11:19:2b:
                    f8:9d:cb:3e:09:34:f2:10:1f:81:43:a3:a4:55:c1:
                    12:69:54:c0:61:d7:b0:0b:c8:a0:49:a5:53:38:63:
                    02:ed:bd:7d:27:83:16:c7:b0:aa:0d:2e:14:f3:d8:
                    73:07:04:52:70:ae:06:dd:37:0c:cb:c5:a1:a1:30:
                    9a:5b:99:9e:5b:09:97:9e:35:ed:41:ee:f2:7a:2e:
                    ef:6e:8a:db:0e:00:94:4d:d9:96:27:bf:75:64:49:
                    dd:a9:3d:21:5d:83:95:bc:bf:60:3d:74:92:c0:1c:
                    61:0d:ce:7b:d6:65:32:c8:e2:22:da:57:b0:37:83:
                    fc:c2:cb:8e:1f:d2:44:67:c0:54:e2:47:8a:f8:52:
                    ee:e6:e4:fc:77:04:35:41:78:c2:12:34:6d:25:2b:
                    80:f9:f2:39:b3:b9:f6:4c:84:67:8b:8c:2b:1e:c3:
                    2f:d4:e0:42:8c:d6:b5:c9:d8:71:ca:f8:81:fa:45:
                    13:03:97:d8:f1:aa:dd:3b:a7:99:9b:95:18:84:b9:
                    4e:15:b2:90:95:78:54:b2:14:9c:80:14:75:5d:fa:
                    fd:41:c0:a1:5d:80:ae:72:de:50:59:15:af:96:01:
                    23:1b:a6:f1:54:23:73:9e:21:22:6d:90:f2:c4:c5:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:CE:10:DF:E3:D4:41:E6:6A:3E:38:CA:ED:A9:26:1C:C0:7C:A6
            X509v3 Authority Key Identifier:
                keyid:54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:7b:9d:e8:a0:cc:d9:75:c0:6c:c1:95:a2:04:ca:01:4e:
         a5:a5:84:18:d5:c5:bd:79:73:77:cb:1e:a3:42:81:6d:7d:6b:
         bb:e0:ba:3d:62:79:60:77:b6:2b:c7:36:38:2a:2c:f0:03:ea:
         24:35:c7:64:97:51:b7:c8:68:f1:67:5b:a7:5b:05:ed:ad:87:
         4c:c4:26:0a:ec:6b:2e:cc:f7:bb:f4:e1:0f:3d:bf:4d:49:55:
         ad:6d:22:33:0c:84:ec:39:0b:6d:6d:89:2f:16:dd:d3:61:cf:
         7e:91:c1:ca:a1:12:0e:a0:4a:2e:d5:a5:35:fd:eb:f7:c9:60:
         47:53:db:f9:92:81:58:40:04:9c:0f:c0:06:b1:a9:87:76:37:
         b1:17:56:a5:fa:53:75:04:9b:e1:61:f3:93:16:9e:59:43:5a:
         d2:74:74:5b:8a:76:4e:bf:c8:bb:48:77:c1:f7:2e:8e:a8:66:
         ec:f5:5a:a4:4c:68:5d:72:b5:f5:60:ab:1a:e6:06:4b:fc:ea:
         73:b6:aa:c5:7d:68:6e:e8:39:4a:73:d5:c9:29:1a:04:f0:cb:
         4c:29:d3:78:75:51:e4:46:63:aa:c8:62:32:69:c8:af:85:35:
         e4:bc:8c:7c:b7:45:be:9b:82:81:01:d2:44:3e:4d:bd:f3:19:
         73:85:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:43 2026 by rpki-client