Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa
File:                     3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (raw, json)
Hash identifier:          LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=
Subject key identifier:   B9:D3:A0:98:4F:5D:92:32:88:F9:A7:BE:16:9F:6F:3D:C9:52:D9:E5
Certificate issuer:       /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E
Certificate serial:       014D9A7C76012B24BEE7F4C1F98B59A14A384AD4
Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa
Signing time:             Sun 03 May 2026 03:17:53 +0000
ROA not before:           Sun 03 May 2026 03:12:53 +0000
ROA not after:            Sun 02 May 2027 03:17:53 +0000
asID:                     152798
IP address blocks:        160.22.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl
                          rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4d:9a:7c:76:01:2b:24:be:e7:f4:c1:f9:8b:59:a1:4a:38:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E
        Validity
            Not Before: May  3 03:12:53 2026 GMT
            Not After : May  2 03:17:53 2027 GMT
        Subject: CN=B9D3A0984F5D923288F9A7BE169F6F3DC952D9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:6e:a7:4c:e9:8f:70:fd:07:fb:91:53:03:
                    c4:ab:79:a1:00:00:6b:f5:d8:92:5c:38:c4:5f:c2:
                    57:39:3d:fc:1f:48:9b:3e:50:42:a0:1d:b3:bd:d5:
                    51:62:4d:41:d3:29:4b:5f:4f:d6:a3:60:a2:5c:49:
                    cf:77:5f:ee:a2:73:16:83:81:38:64:0a:de:42:05:
                    d8:c2:72:58:fa:d6:ad:62:9b:c6:da:9d:31:54:09:
                    20:5a:54:e0:de:95:86:5a:93:cd:0c:31:f3:d2:18:
                    cd:b7:c3:6a:44:a9:38:af:fc:57:f6:1b:19:4d:44:
                    36:5b:53:6f:92:43:59:cd:77:1d:22:4c:96:02:9a:
                    3e:90:e2:14:24:0c:7b:38:18:d6:6f:b3:2f:c9:40:
                    91:60:52:4f:14:ca:a3:7e:aa:b1:d2:0e:1a:bc:83:
                    41:11:10:e1:70:ec:40:a8:af:d1:8e:c4:bd:ff:22:
                    3b:e3:07:9b:b6:67:7b:5d:8e:5a:10:96:db:93:54:
                    bb:36:30:02:1d:ca:5a:96:e6:1b:19:91:3b:e3:16:
                    af:77:ec:40:bd:64:4a:6d:5b:1a:58:03:40:28:17:
                    e7:e5:fc:f2:6d:0d:6e:7a:92:69:e9:79:69:3f:23:
                    12:d0:c3:c6:f4:33:cf:1c:60:3a:47:d7:d5:89:3c:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D3:A0:98:4F:5D:92:32:88:F9:A7:BE:16:9F:6F:3D:C9:52:D9:E5
            X509v3 Authority Key Identifier:
                keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:20:75:24:a0:08:9f:55:9a:02:a0:5a:42:b3:4d:a6:19:be:
         45:c2:f3:7f:83:56:e4:99:48:d2:f0:db:93:7c:2c:e5:8e:77:
         53:60:34:41:a0:43:28:66:76:b4:8b:e2:ec:e0:05:45:d4:c3:
         ff:de:27:cb:30:9f:e3:af:0e:71:81:7b:60:69:83:7e:e7:9a:
         cb:d9:f8:00:ec:45:da:44:22:c6:1a:d0:fe:15:19:c2:69:f0:
         7f:8a:3e:c3:ca:03:ca:be:82:b2:45:0f:bc:41:14:69:9a:82:
         7f:7b:32:70:13:d8:7e:9a:83:d8:3b:19:a0:bf:14:1b:39:83:
         14:12:72:3d:c0:0a:a5:eb:aa:26:68:cf:b1:e7:8f:66:aa:02:
         e6:01:d7:1a:22:06:d6:51:ef:4a:42:92:0a:3b:b3:86:22:67:
         21:e2:ab:87:12:c6:7f:d9:37:2b:f5:e4:60:24:20:f2:95:bf:
         bc:46:da:7f:5f:74:f1:99:83:2f:29:d0:95:88:2e:d6:58:e8:
         55:70:23:5f:3e:69:8b:a7:9a:49:85:b2:90:d5:9e:a8:d7:0a:
         1a:34:71:a2:08:4c:62:cd:44:2a:54:3b:21:f5:0d:5a:8e:3f:
         d3:3c:87:93:5f:8f:e8:ac:29:3f:4b:1e:8c:48:b2:9b:82:e4:
         51:ed:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:10 2026 by rpki-client