Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa
File:                     3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (raw, json)
Hash identifier:          4NfzK0A2pBnbwozFeghPXugrqztD6J5o9MvgKC6EsBQ=
Subject key identifier:   52:92:7A:C8:17:C4:73:DA:50:6A:BC:0E:AC:92:46:A5:01:C3:86:AA
Certificate issuer:       /CN=546870A485381309B4CFED36047EB68D8C1B2C0E
Certificate serial:       318AC7F50FFC7B0EF472CA638D38F05FCF0809CC
Authority key identifier: 54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa
Signing time:             Sun 03 May 2026 03:13:39 +0000
ROA not before:           Sun 03 May 2026 03:08:39 +0000
ROA not after:            Sun 02 May 2027 03:13:39 +0000
asID:                     153064
IP address blocks:        160.25.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:c7:f5:0f:fc:7b:0e:f4:72:ca:63:8d:38:f0:5f:cf:08:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546870A485381309B4CFED36047EB68D8C1B2C0E
        Validity
            Not Before: May  3 03:08:39 2026 GMT
            Not After : May  2 03:13:39 2027 GMT
        Subject: CN=52927AC817C473DA506ABC0EAC9246A501C386AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:92:eb:b9:dc:96:0c:6f:bb:3e:38:3c:5b:
                    76:4b:6b:cd:00:d9:b0:8a:47:93:b0:7a:a7:7a:29:
                    80:82:c0:f1:87:55:50:73:b0:7f:e6:3b:58:46:8b:
                    1c:2b:eb:07:49:9e:41:40:e8:23:28:97:0e:f2:19:
                    40:53:00:d3:61:8e:80:c7:79:bd:08:0f:81:ab:d8:
                    4f:d6:5c:41:fe:bd:23:93:29:c9:ba:0a:1c:6a:0a:
                    9d:dc:d2:90:85:93:ba:94:f5:4b:5d:f0:4f:b3:d6:
                    45:cb:a1:86:1a:f4:fc:ed:6b:36:51:99:5d:da:40:
                    86:64:ba:01:22:3f:77:f9:b8:61:21:f2:4b:9d:54:
                    5d:88:14:15:03:80:b7:ee:5a:2d:95:c2:7e:8b:1a:
                    b0:fa:cc:eb:26:67:b8:5d:64:a1:4c:c7:4f:70:ab:
                    44:df:e8:d5:ab:e0:2c:e0:03:2e:c4:eb:92:83:50:
                    05:74:a1:68:5c:c5:ec:99:08:17:dc:98:3a:66:06:
                    a2:c2:18:5d:fe:75:54:8d:90:de:f8:ac:0f:ce:a7:
                    d1:b9:56:cc:1b:ef:a0:cb:1b:58:e7:37:20:59:79:
                    7d:05:20:93:95:68:08:96:7f:b3:81:aa:83:e6:0f:
                    3d:56:79:06:1b:38:0d:f6:ff:a6:9c:ba:be:c6:b1:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:7A:C8:17:C4:73:DA:50:6A:BC:0E:AC:92:46:A5:01:C3:86:AA
            X509v3 Authority Key Identifier:
                keyid:54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:ef:c1:16:8a:b7:36:cf:ac:8f:79:49:d3:51:ed:dd:3a:
         3c:fe:66:ca:a8:0c:81:16:90:8a:51:c6:7a:75:12:ee:1b:20:
         52:3d:aa:f2:20:b5:d8:01:b2:2b:06:69:9f:8b:66:3f:31:d7:
         14:87:f2:b5:1c:db:8c:6c:fa:16:e2:3a:5b:e3:33:51:b3:62:
         8f:49:03:85:7d:84:97:a0:a2:72:2e:a7:1b:e1:e3:d1:24:7d:
         8b:aa:29:c0:44:4c:4e:75:85:26:4e:dd:2a:da:ad:d7:80:ce:
         f5:17:fc:bb:e9:6f:7e:62:db:39:75:65:34:f4:f8:a7:9c:e9:
         7d:47:07:0d:17:ba:c5:98:24:d6:20:61:6e:4e:31:5e:fc:a1:
         4c:10:b1:ef:61:1e:71:29:a3:cd:7a:6b:59:a1:81:6c:f3:c3:
         d0:48:bc:3f:ef:0a:36:fc:38:ca:1c:15:00:21:d8:4e:d6:01:
         b4:39:da:e4:e0:98:fe:3f:05:d1:52:14:d9:ac:5b:09:f4:3d:
         2a:a4:e8:01:f1:d0:88:cc:44:b5:84:3c:96:ac:bb:e2:98:60:
         e9:9e:2d:cc:d9:65:87:37:4a:22:a6:aa:59:c4:b7:89:f5:67:
         66:ab:d3:54:3e:f4:77:a0:ac:be:35:23:ce:ee:8d:f2:97:5e:
         8f:ec:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:12 2026 by rpki-client