Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa
File:                     3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (raw, json)
Hash identifier:          T4Yv5YPyHwRlEh5QPhztW1e+kHket96jO1bLiyUwTAw=
Subject key identifier:   A1:A9:91:90:94:98:3E:0C:11:58:9E:E3:A7:21:DD:EB:5B:26:D5:BC
Certificate issuer:       /CN=546870A485381309B4CFED36047EB68D8C1B2C0E
Certificate serial:       71181BCEA578984D80EBBA348F4AB0C90E2E84EF
Authority key identifier: 54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa
Signing time:             Sun 03 May 2026 03:13:39 +0000
ROA not before:           Sun 03 May 2026 03:08:39 +0000
ROA not after:            Sun 02 May 2027 03:13:39 +0000
asID:                     153064
IP address blocks:        160.25.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:1b:ce:a5:78:98:4d:80:eb:ba:34:8f:4a:b0:c9:0e:2e:84:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546870A485381309B4CFED36047EB68D8C1B2C0E
        Validity
            Not Before: May  3 03:08:39 2026 GMT
            Not After : May  2 03:13:39 2027 GMT
        Subject: CN=A1A9919094983E0C11589EE3A721DDEB5B26D5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:24:db:95:c0:82:01:f6:06:91:b3:17:6e:
                    eb:0b:b6:83:c5:83:66:4b:e6:b8:52:df:3a:63:41:
                    d6:78:3c:07:f7:a2:36:61:3f:09:46:8a:41:5c:bf:
                    60:ea:2d:7a:75:fc:a3:ab:49:b3:14:29:b4:e4:3f:
                    f9:9f:b1:c5:ad:93:ed:09:de:50:23:64:eb:0e:f0:
                    36:59:eb:f9:20:cc:29:36:e9:0f:bf:4f:19:ff:63:
                    d1:92:88:a0:93:66:b8:9f:24:ca:f0:68:62:36:fa:
                    ec:75:a9:05:6e:b0:73:e1:eb:2f:16:f2:c5:d2:99:
                    50:73:60:b9:01:49:05:49:ff:1b:bb:29:1b:b6:15:
                    a3:0f:ca:3e:38:f8:77:26:43:41:12:b7:fc:2d:8a:
                    ae:cf:bb:9e:d5:bc:bd:a6:0f:1b:96:32:37:d5:4e:
                    c4:f6:bf:90:ea:3d:cd:9d:a7:82:88:c9:5e:b4:cf:
                    d6:5c:cf:81:7a:11:6f:b8:cb:43:6d:3c:ad:4e:87:
                    cd:d9:fb:45:49:aa:61:e4:92:c5:d7:7d:88:13:26:
                    fb:e9:48:30:4b:b7:40:3f:dd:40:f7:a9:8d:4d:b9:
                    34:72:14:de:c9:cf:7e:3f:d5:3e:73:61:8d:31:50:
                    c1:10:56:ff:e8:ce:f9:a9:5b:04:f8:d1:e6:e7:f7:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A9:91:90:94:98:3E:0C:11:58:9E:E3:A7:21:DD:EB:5B:26:D5:BC
            X509v3 Authority Key Identifier:
                keyid:54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:92:c0:be:70:5b:4d:72:0f:bb:c4:34:83:c8:ac:89:35:2b:
         5e:0b:54:14:6c:c2:b1:23:d5:3a:a9:1c:fd:c9:a1:f3:65:15:
         59:cd:6f:f3:43:a0:79:b7:5d:2e:70:19:c3:e8:96:e3:2d:7d:
         28:ae:87:f0:24:52:b3:f6:27:9e:5c:cf:9b:2f:60:e1:a4:69:
         d9:8a:df:f3:a2:ab:4e:41:99:6f:29:40:3a:39:7a:cc:c0:58:
         f1:b0:d1:8e:42:1c:90:83:fe:06:c0:4b:76:42:c2:e8:95:2c:
         09:a4:e2:61:9f:20:cf:a5:9e:e8:9c:93:69:d4:07:12:3b:40:
         9e:00:f4:61:c0:c7:90:89:4c:de:62:ec:0d:c4:fd:be:06:d7:
         42:29:3c:be:81:72:db:6d:37:30:c1:b3:f8:f2:80:49:72:f5:
         ea:c0:80:f4:9c:4e:29:9b:f5:dc:d4:cd:16:e4:2f:b4:5d:f2:
         a9:84:d7:6d:74:a3:7f:fd:54:40:62:a8:69:27:72:02:d9:59:
         72:5d:da:b2:ff:8f:6c:e5:9a:e7:f7:db:80:b7:9b:4f:3b:e6:
         a5:ca:04:ad:a1:d1:0b:d4:43:c0:c8:33:59:5a:16:5f:7d:01:
         52:a7:cb:2e:fd:86:0d:b9:06:cb:8a:c8:ca:5c:41:39:e4:6a:
         f0:41:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:19 2026 by rpki-client