Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa
File:                     3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (raw, json)
Hash identifier:          2uGt6NoP0ZyAzJoUujZvq+iw79GkfDtAJpmnwcRnGwY=
Subject key identifier:   1D:39:23:C9:FC:49:E2:97:15:82:A9:C7:50:39:44:A2:49:A9:94:72
Certificate issuer:       /CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
Certificate serial:       060DFC191E9834F46E4E22BC7C9454D91AC63FDC
Authority key identifier: 5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa
Signing time:             Sun 03 May 2026 03:14:59 +0000
ROA not before:           Sun 03 May 2026 03:09:59 +0000
ROA not after:            Sun 02 May 2027 03:14:59 +0000
asID:                     153059
IP address blocks:        160.25.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl
                          rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0d:fc:19:1e:98:34:f4:6e:4e:22:bc:7c:94:54:d9:1a:c6:3f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E5DD8C7604ACF613E6115D25EF3C253AA85F081
        Validity
            Not Before: May  3 03:09:59 2026 GMT
            Not After : May  2 03:14:59 2027 GMT
        Subject: CN=1D3923C9FC49E2971582A9C7503944A249A99472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:39:2d:ba:95:77:a2:8c:ec:0e:cc:ca:9f:
                    94:70:04:0e:44:34:19:b3:b4:c0:64:39:b9:8c:22:
                    b8:d8:b6:70:6d:d6:7a:72:e5:b4:14:f9:be:59:43:
                    af:c7:cd:df:01:1e:81:da:62:72:27:94:c9:ba:f1:
                    21:fa:a8:51:99:76:06:82:28:ff:6e:c7:7e:a6:2d:
                    12:cc:32:3a:65:df:79:6e:a9:91:1d:81:fa:6d:49:
                    1b:f4:58:2b:e8:6d:b8:d9:2e:5c:a1:f9:f9:47:d6:
                    d7:e7:08:33:09:f3:9e:30:9a:24:11:19:d1:1b:c3:
                    94:b2:ce:d1:dc:bb:f3:49:1e:e9:f0:15:fe:f4:c2:
                    73:94:c9:94:c8:c9:8d:ee:c0:fa:34:13:2e:e3:e1:
                    50:05:e2:8e:de:42:48:93:a8:e9:53:10:61:d9:99:
                    8f:2f:45:26:df:e2:47:02:a7:bf:12:9e:5d:33:32:
                    5d:91:f6:a2:ad:8e:bb:65:47:4b:b0:b8:d7:c7:c4:
                    f7:4e:10:1e:dc:f5:01:30:8d:c0:78:4a:c3:aa:18:
                    39:5c:5e:9a:c6:e9:39:4a:c8:7a:1d:0a:cd:de:0b:
                    0c:83:91:36:a5:d6:8a:87:92:eb:48:35:18:42:d5:
                    e4:50:0f:70:52:9c:8e:67:93:99:a6:92:f1:ad:9a:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:23:C9:FC:49:E2:97:15:82:A9:C7:50:39:44:A2:49:A9:94:72
            X509v3 Authority Key Identifier:
                keyid:5E:5D:D8:C7:60:4A:CF:61:3E:61:15:D2:5E:F3:C2:53:AA:85:F0:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5E5DD8C7604ACF613E6115D25EF3C253AA85F081.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:3a:d7:35:ef:7a:91:ae:35:55:14:f2:ec:70:11:3b:31:
         f1:74:fe:6a:ac:b4:88:74:f7:f4:84:b5:5f:1b:d4:c0:29:5b:
         3a:00:f0:18:7b:7b:72:04:7c:af:fe:68:f5:f4:eb:c9:8a:bf:
         da:57:73:70:d8:7e:62:35:92:8c:fc:96:10:ba:a8:9a:46:ca:
         79:62:42:4f:db:c5:aa:0f:1e:78:08:de:74:00:6d:90:1d:f9:
         e1:6a:ad:6d:8d:51:5a:6d:b5:b8:e7:9d:a4:7e:4b:a4:24:f9:
         96:c1:73:8b:18:b8:14:ad:73:0c:fd:d3:98:c7:49:b3:30:b7:
         fc:89:c8:57:8c:9f:ab:bf:ba:07:7a:2c:88:a3:4b:cf:e3:c6:
         b9:22:3f:f0:4b:24:63:59:65:5b:29:06:98:05:ac:57:90:c2:
         37:a2:07:58:1d:c1:06:b1:6f:7b:26:f5:96:f9:f1:7e:25:5f:
         16:ab:41:aa:d4:7e:53:95:fd:2e:37:03:a9:44:0d:55:ec:48:
         07:4c:e5:a7:ee:92:34:be:2c:eb:fd:e0:6e:10:60:5a:01:94:
         9b:d9:2c:13:55:91:73:40:dc:90:10:06:9b:72:6c:79:dc:70:
         4c:91:57:dc:31:1a:87:9c:57:11:ad:7f:44:03:e0:60:e5:c4:
         f8:9d:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:07 2026 by rpki-client