Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
File:                     3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (raw, json)
Hash identifier:          Mcg9nbFeFqcbrXtsnWz+m6gsNfmlAcJQ2rPda7V7VVk=
Subject key identifier:   A1:B7:F4:74:48:A1:50:78:8E:D2:D4:A6:B0:14:98:79:A9:E0:29:85
Certificate issuer:       /CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB
Certificate serial:       17EFDF1CC86E1E9811D45D547A2AED418AEA69F7
Authority key identifier: 08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
Signing time:             Sun 03 May 2026 03:16:37 +0000
ROA not before:           Sun 03 May 2026 03:11:37 +0000
ROA not after:            Sun 02 May 2027 03:16:37 +0000
asID:                     152815
IP address blocks:        160.22.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl
                          rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:df:1c:c8:6e:1e:98:11:d4:5d:54:7a:2a:ed:41:8a:ea:69:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DB1CB47690F1F6719A71A06B2EAFFC19B300FB
        Validity
            Not Before: May  3 03:11:37 2026 GMT
            Not After : May  2 03:16:37 2027 GMT
        Subject: CN=A1B7F47448A150788ED2D4A6B0149879A9E02985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c0:b5:7c:fd:68:e2:f1:27:9a:a6:f4:72:8b:
                    24:48:81:67:18:f5:ef:63:6e:c0:f4:fa:b4:e4:70:
                    4d:d1:19:60:7d:57:30:35:27:c7:a8:76:8f:8a:6c:
                    aa:0f:cf:84:7d:a9:05:80:24:7f:64:00:4c:2c:4e:
                    99:20:5b:c2:c5:d4:76:9d:5d:9a:f7:2c:ab:c5:1b:
                    dc:b7:cf:23:25:94:35:e2:15:a3:ed:dc:2a:f6:88:
                    18:e7:c8:5a:32:ec:a2:9d:f8:88:4b:c4:04:bb:b5:
                    da:78:19:a0:23:b3:45:0f:ed:63:70:06:04:33:50:
                    33:f2:d7:45:fa:9d:22:66:64:40:69:80:31:f3:b0:
                    f3:cc:74:74:1e:43:94:5a:41:fc:f3:9b:82:cd:4f:
                    fc:d8:e0:83:63:5e:6d:72:b8:11:f5:54:82:dc:6d:
                    d8:a1:e8:1a:8b:34:94:0a:67:1e:18:12:d0:96:91:
                    e2:fc:f0:6d:b4:f7:b6:61:90:ce:af:f9:68:b2:47:
                    38:98:f1:1a:8b:7e:b2:63:8e:6e:cb:42:f1:50:ef:
                    93:4b:94:be:69:1c:d6:ae:9d:3d:b3:1c:55:43:6d:
                    b5:9e:a7:aa:26:7f:0f:15:1e:fc:c0:ce:34:6f:c1:
                    c5:30:4e:cd:7e:65:66:6f:96:28:63:0a:fd:ba:a7:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:F4:74:48:A1:50:78:8E:D2:D4:A6:B0:14:98:79:A9:E0:29:85
            X509v3 Authority Key Identifier:
                keyid:08:DB:1C:B4:76:90:F1:F6:71:9A:71:A0:6B:2E:AF:FC:19:B3:00:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08DB1CB47690F1F6719A71A06B2EAFFC19B300FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:78:61:0f:66:b7:fa:de:bd:c4:16:1e:3e:4f:95:e2:82:
         de:79:e9:51:1d:c5:cf:f0:d7:b8:fd:5a:0a:20:c1:32:2a:82:
         fb:e9:7c:4f:ed:11:69:4c:b8:1d:c9:5b:1b:be:b7:1f:bb:64:
         97:7f:b8:57:92:9f:de:49:c0:6e:b7:f7:d0:7d:94:ca:03:6e:
         69:17:62:ab:58:a2:52:a2:31:be:ce:40:96:f2:b2:e4:93:0a:
         94:52:2a:58:78:6d:45:07:c5:42:4c:dd:e1:98:6e:e0:e5:b3:
         33:24:8d:65:c9:98:2f:ec:d6:2d:7a:2c:56:1a:7b:9e:76:50:
         b9:36:64:bb:85:98:e0:5c:e2:7c:44:c3:3d:8d:a1:9c:42:4e:
         8b:df:98:2c:a4:eb:c7:86:1d:5c:13:d9:de:06:c7:4f:cd:13:
         fe:44:8a:7f:ff:3d:c6:0f:eb:59:b2:ef:8b:48:a3:33:b3:79:
         c1:d2:b4:e5:4b:33:3a:ab:2f:94:ec:cb:d7:7c:34:02:a4:88:
         c3:71:82:0f:56:fb:18:88:aa:19:5d:28:2e:60:cc:cd:d1:be:
         b8:15:43:b7:15:72:a9:88:cb:e7:96:e6:d7:02:55:2b:ea:1e:
         d3:5b:10:2c:80:6c:26:3c:d5:57:13:c7:b3:a1:4a:61:4f:40:
         5e:77:35:85
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUF+/fHMhuHpgR1F1UeirtQYrqafcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEQjFDQjQ3NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMx
OUIzMDBGQjAeFw0yNjA1MDMwMzExMzdaFw0yNzA1MDIwMzE2MzdaMDMxMTAvBgNV
BAMTKEExQjdGNDc0NDhBMTUwNzg4RUQyRDRBNkIwMTQ5ODc5QTlFMDI5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGwLV8/Wji8SeapvRyiyRIgWcY
9e9jbsD0+rTkcE3RGWB9VzA1J8eodo+KbKoPz4R9qQWAJH9kAEwsTpkgW8LF1Had
XZr3LKvFG9y3zyMllDXiFaPt3Cr2iBjnyFoy7KKd+IhLxAS7tdp4GaAjs0UP7WNw
BgQzUDPy10X6nSJmZEBpgDHzsPPMdHQeQ5RaQfzzm4LNT/zY4INjXm1yuBH1VILc
bdih6BqLNJQKZx4YEtCWkeL88G2097ZhkM6v+WiyRziY8RqLfrJjjm7LQvFQ75NL
lL5pHNaunT2zHFVDbbWep6omfw8VHvzAzjRvwcUwTs1+ZWZvlihjCv26p9Y7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUobf0dEihUHiO0tSmsBSYeangKYUwHwYDVR0j
BBgwFoAUCNsctHaQ8fZxmnGgay6v/BmzAPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjE3Zjc5YjAtYjllMy00YzNkLWExMTMtYjZjNmExOGFmNGQxLzAvMDhEQjFDQjQ3
NjkwRjFGNjcxOUE3MUEwNkIyRUFGRkMxOUIzMDBGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wOERCMUNCNDc2OTBGMUY2NzE5QTcxQTA2QjJFQUZGQzE5QjMw
MEZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YxN2Y3OWIwLWI5ZTMtNGMzZC1h
MTEzLWI2YzZhMThhZjRkMS8wLzMxMzYzMDJlMzIzMjJlMzkzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWWjANBgkqhkiG
9w0BAQsFAAOCAQEAjC54YQ9mt/revcQWHj5PleKC3nnpUR3Fz/DXuP1aCiDBMiqC
++l8T+0RaUy4HclbG763H7tkl3+4V5Kf3knAbrf30H2UygNuaRdiq1iiUqIxvs5A
lvKy5JMKlFIqWHhtRQfFQkzd4Zhu4OWzMySNZcmYL+zWLXosVhp7nnZQuTZku4WY
4FzifETDPY2hnEJOi9+YLKTrx4YdXBPZ3gbHT80T/kSKf/89xg/rWbLvi0ijM7N5
wdK05UszOqsvlOzL13w0AqSIw3GCD1b7GIiqGV0oLmDMzdG+uBVDtxVyqYjL55bm
1wJVK+oe01sQLIBsJjzVVxPHs6FKYU9AXnc1hQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:19 2026 by rpki-client