Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa
File:                     3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (raw, json)
Hash identifier:          UJBNMpcsHaasyvcJ4Sq3J89ZHMIFKcGiQvcCBcd8DHY=
Subject key identifier:   E6:F9:8C:76:48:B3:B9:BB:8B:9D:D6:09:B1:10:29:D0:D4:10:33:D6
Certificate issuer:       /CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6
Certificate serial:       19ED559184CD9A2D294A5282E390B14B61C0DBC5
Authority key identifier: D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa
Signing time:             Sun 03 May 2026 03:16:40 +0000
ROA not before:           Sun 03 May 2026 03:11:40 +0000
ROA not after:            Sun 02 May 2027 03:16:40 +0000
asID:                     152811
IP address blocks:        160.22.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl
                          rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ed:55:91:84:cd:9a:2d:29:4a:52:82:e3:90:b1:4b:61:c0:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9C4B6BE84C90BC406AB671E5F75A8C8656294F6
        Validity
            Not Before: May  3 03:11:40 2026 GMT
            Not After : May  2 03:16:40 2027 GMT
        Subject: CN=E6F98C7648B3B9BB8B9DD609B11029D0D41033D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:6e:73:f4:26:34:b6:c5:df:72:e3:9c:2b:
                    2d:3a:4a:70:bb:cb:4f:03:1a:e8:1e:e7:64:43:e8:
                    c2:bd:f5:26:b2:25:2b:60:4b:e0:5e:fd:70:cf:68:
                    1c:2c:e5:9c:b4:be:9b:8b:97:25:09:71:0b:4b:a4:
                    e4:62:3e:fa:d0:5c:a6:23:f4:e5:98:5d:62:2d:1f:
                    f5:86:aa:46:22:d6:62:05:29:46:86:a0:18:85:a5:
                    e6:0c:23:ec:22:43:47:e7:32:c1:51:7f:86:7d:e3:
                    eb:be:57:f0:1c:d8:78:47:d7:02:92:a0:b3:89:f3:
                    d5:09:79:d8:e9:0f:85:fc:92:44:93:82:64:71:6e:
                    6a:4c:42:e7:92:02:b2:a2:84:2c:47:2f:05:9c:58:
                    b0:f5:e4:10:bc:bb:c3:d4:63:ec:20:1a:8f:3e:aa:
                    88:a1:63:93:9b:27:26:ad:b9:69:03:49:08:03:a3:
                    bb:60:e7:49:d7:d1:19:9e:8d:9c:13:c4:f3:61:c5:
                    42:c6:eb:7c:c8:f8:a1:9d:ab:1a:1d:af:75:78:c7:
                    9b:e8:a4:26:65:dc:be:91:b3:c3:1a:d2:bd:1c:a6:
                    ba:ab:c1:66:0d:d1:3b:38:a3:a1:5c:92:d6:29:c6:
                    52:aa:b9:bb:d5:b5:d5:92:ad:d5:8d:dc:91:6b:1b:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:8C:76:48:B3:B9:BB:8B:9D:D6:09:B1:10:29:D0:D4:10:33:D6
            X509v3 Authority Key Identifier:
                keyid:D9:C4:B6:BE:84:C9:0B:C4:06:AB:67:1E:5F:75:A8:C8:65:62:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D9C4B6BE84C90BC406AB671E5F75A8C8656294F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:2e:6b:6d:67:91:7e:93:c0:88:83:b3:2a:1b:ba:d5:b9:
         03:b0:80:28:00:6a:c7:9d:f0:67:cf:5e:fe:ff:06:ea:c0:38:
         ae:c1:4d:5a:1f:7b:72:aa:97:59:23:61:11:c7:9c:bf:f0:e7:
         a0:02:46:8f:c1:e6:03:c3:9c:08:cc:b3:e4:c6:0c:1e:81:0f:
         f6:b8:a2:e4:ae:85:b3:49:b9:26:a3:b2:d3:6c:89:13:2d:d1:
         86:a2:2f:8e:cd:be:56:35:da:7f:99:d4:a9:64:c3:31:2b:b5:
         d3:f5:4f:34:de:05:07:be:9e:7a:6a:7f:bc:d4:f2:66:86:36:
         9d:de:85:4e:69:45:0a:44:4d:af:f6:5f:1f:12:08:85:ba:58:
         af:29:b6:cb:6f:b0:49:f0:43:34:6d:c8:6d:fe:b0:00:99:55:
         6d:13:03:96:13:43:10:9a:bf:76:21:14:ba:d1:f1:11:00:5f:
         1a:73:9d:df:0b:22:3a:00:70:0e:b3:06:c5:d9:fa:45:d1:91:
         5c:a9:c8:90:da:42:3b:6b:df:eb:a9:35:95:43:86:f8:93:7f:
         3f:8a:c9:48:b8:75:52:ec:bf:fc:a8:bb:79:fa:2d:91:c5:5e:
         27:8e:2a:bf:fe:9c:56:43:c9:58:98:3f:27:73:11:15:d7:58:
         9d:72:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:20 2026 by rpki-client