Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa
File:                     3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (raw, json)
Hash identifier:          hwkmKFqZZs0/Na72m9HaYmz05ZyTB7V+dfx8PoWeKHY=
Subject key identifier:   0E:23:A4:27:5C:95:47:6F:A8:B1:42:48:99:EF:73:30:F9:EE:24:38
Certificate issuer:       /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE
Certificate serial:       5472FF5306EA1E8E72D90B8549CA2FBC33C6AB31
Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa
Signing time:             Sun 03 May 2026 03:14:57 +0000
ROA not before:           Sun 03 May 2026 03:09:57 +0000
ROA not after:            Sun 02 May 2027 03:14:57 +0000
asID:                     153110
IP address blocks:        160.22.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl
                          rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:72:ff:53:06:ea:1e:8e:72:d9:0b:85:49:ca:2f:bc:33:c6:ab:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE
        Validity
            Not Before: May  3 03:09:57 2026 GMT
            Not After : May  2 03:14:57 2027 GMT
        Subject: CN=0E23A4275C95476FA8B1424899EF7330F9EE2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:31:55:a6:d7:32:a7:0a:6e:ce:3e:be:45:
                    35:44:35:92:c1:f8:a6:12:c0:0c:0a:c8:6d:3c:df:
                    e2:f4:8a:23:9c:16:2b:20:9f:d0:b5:57:4a:98:07:
                    31:cc:51:6b:37:e8:54:ee:17:7a:86:35:83:8f:d1:
                    8b:50:fb:01:ac:a3:88:16:d5:c7:2f:1e:9e:e2:2e:
                    d8:50:a2:3b:15:dc:ce:54:6f:39:7b:2d:26:cc:49:
                    c9:70:04:33:d7:49:3a:9d:da:d6:15:78:d4:ff:e6:
                    f5:e3:d1:a0:d4:a7:52:38:c4:36:7b:19:77:42:f2:
                    62:b2:8c:4e:a3:d1:fd:ff:c6:c2:4f:9f:02:6f:5d:
                    d6:ee:b8:25:34:05:7c:19:6a:79:f4:c0:cf:4f:e7:
                    ca:f4:8f:a5:c0:c3:c1:c4:15:25:d1:fb:cd:e9:27:
                    38:1c:28:21:dc:25:cd:ff:3b:a4:44:79:76:f1:17:
                    5c:70:21:bb:ba:c4:f3:37:4f:16:84:e9:82:9f:62:
                    66:2d:e5:a4:e2:27:13:b5:b1:18:1c:e8:5a:b3:41:
                    2d:fc:98:ba:d9:ff:52:3d:1f:a6:5c:8b:7b:2d:1b:
                    26:97:c2:18:c5:a6:0c:bb:24:6e:43:e9:26:95:93:
                    ed:64:e6:6c:4e:96:19:c1:f8:34:94:b8:0f:f6:f8:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:23:A4:27:5C:95:47:6F:A8:B1:42:48:99:EF:73:30:F9:EE:24:38
            X509v3 Authority Key Identifier:
                keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:59:01:ed:ca:a1:b2:06:67:4e:92:23:4d:82:7a:5e:be:0e:
         93:2c:56:0a:47:6b:26:ab:de:9f:1e:95:56:e7:52:6d:cc:3f:
         32:24:a2:da:50:3a:92:df:d7:cc:c0:98:5b:fe:2f:63:02:83:
         d6:25:ea:80:af:d3:fc:d1:5c:20:94:43:9a:db:f5:16:d2:aa:
         89:0d:71:88:30:dc:ba:84:6e:c1:91:fd:23:fb:aa:01:05:60:
         2a:3c:7d:53:77:bf:c6:a3:dc:ae:67:66:3c:a7:e8:f7:18:f9:
         ce:db:49:3d:10:ac:ed:e7:63:45:b3:e9:dd:2e:57:05:2e:98:
         e2:33:8c:df:c0:c4:8c:98:6c:28:89:76:3d:97:aa:f4:f0:86:
         9b:74:49:55:3f:7e:8d:4e:39:ea:96:42:13:34:b5:88:67:75:
         ac:fa:73:1c:a6:af:78:3e:ff:50:35:94:a2:01:94:40:79:02:
         d7:39:34:56:1e:3d:56:9e:99:df:30:a2:0d:24:c6:09:b4:36:
         d4:e2:81:de:e7:63:75:fd:58:d0:ff:3a:a3:85:10:66:af:86:
         0f:34:de:78:db:1a:c3:27:e8:0c:32:5a:9d:4f:65:6f:46:4f:
         e7:09:36:96:fb:66:2a:4a:5a:c8:72:06:50:97:24:ad:bc:e3:
         95:8a:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:51 2026 by rpki-client