Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
File:                     3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (raw, json)
Hash identifier:          tpH2JM9YTbmOossLdQW6SZYFmNHRQYnoyuwrrx1s/G4=
Subject key identifier:   2D:11:7D:14:3A:56:19:B3:7F:55:EB:FE:E0:77:79:56:27:09:26:6B
Certificate issuer:       /CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Certificate serial:       068885B08DFEE293035EFB3F2B49A3B0D2C6BE72
Authority key identifier: 1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
Signing time:             Sun 03 May 2026 03:18:33 +0000
ROA not before:           Sun 03 May 2026 03:13:33 +0000
ROA not after:            Sun 02 May 2027 03:18:33 +0000
asID:                     152779
IP address blocks:        160.19.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
                          rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:85:b0:8d:fe:e2:93:03:5e:fb:3f:2b:49:a3:b0:d2:c6:be:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
        Validity
            Not Before: May  3 03:13:33 2026 GMT
            Not After : May  2 03:18:33 2027 GMT
        Subject: CN=2D117D143A5619B37F55EBFEE07779562709266B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c8:c6:e2:5f:cd:11:a0:6c:42:77:e5:cb:3e:
                    31:3f:1c:f2:42:1e:7a:00:d3:f2:2a:2b:fc:04:b4:
                    f6:06:23:45:d2:38:00:a6:3b:85:38:b5:e7:1b:86:
                    0f:f7:28:ce:e4:c7:eb:30:94:63:20:37:77:69:8a:
                    cc:15:d7:dc:72:b1:a9:29:3c:65:01:9f:c5:85:cc:
                    95:eb:9f:b6:d8:00:2e:8a:8c:67:60:38:49:71:d7:
                    ca:2b:0c:fd:2f:39:81:59:0e:e7:16:e0:8d:5d:82:
                    91:24:af:18:4b:00:f7:6d:86:ed:a2:50:3c:b0:d3:
                    5c:32:09:bd:ef:ce:f4:a1:e6:da:57:8f:94:3d:ff:
                    0c:ff:a8:40:f0:11:83:ed:63:22:ff:be:cc:62:16:
                    65:f1:8c:8b:94:dd:69:fd:7b:60:cf:b9:47:fe:dc:
                    34:3f:2d:04:30:61:e4:e6:44:51:8b:3a:d9:cc:0d:
                    32:56:e1:0c:3d:82:53:d2:bb:c0:04:f9:5d:33:a0:
                    b1:57:77:8e:88:42:94:cb:0e:34:23:da:3b:1c:68:
                    08:4f:a7:9e:6d:93:dd:d7:77:32:ea:ad:41:7f:31:
                    4e:e5:49:35:98:22:dc:87:43:9e:cf:db:9c:96:37:
                    cb:da:ab:3d:0c:c9:7f:a9:0a:79:6b:71:46:d2:b5:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:11:7D:14:3A:56:19:B3:7F:55:EB:FE:E0:77:79:56:27:09:26:6B
            X509v3 Authority Key Identifier:
                keyid:1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:67:4d:86:d3:44:e9:3a:e3:0a:4d:30:3c:87:6b:64:fc:cf:
         18:3b:a3:32:70:b3:c5:4a:30:17:84:0a:88:f7:2e:65:79:99:
         ad:5e:da:82:95:c6:34:95:fe:b0:ad:47:1c:66:28:f1:5a:ed:
         4e:3e:41:c7:d9:ad:2c:f0:98:ce:18:db:17:f3:47:5a:32:9a:
         75:bf:ee:35:f9:70:d2:48:c7:d3:30:3d:5e:36:89:f2:33:c1:
         a4:c7:3e:76:78:80:4d:9c:77:e0:e9:27:c2:1d:cc:54:08:f2:
         89:6a:e0:68:26:46:43:69:d0:4a:a7:c7:f7:d6:b5:eb:81:69:
         bc:fb:92:30:6f:fc:88:4b:22:1a:7d:87:fb:6f:b0:e7:46:c2:
         6c:57:33:fc:6d:f6:2c:42:c6:61:30:a0:2b:ea:04:1e:c3:80:
         20:4d:dc:77:cf:c7:d9:53:5c:32:74:a7:5f:3e:ba:1d:89:5c:
         58:ef:e6:b0:a3:ce:04:ee:03:bc:8d:31:54:1e:aa:74:b3:de:
         14:9b:c6:82:27:e4:b1:b2:15:d0:b9:ce:91:b8:00:a6:b7:83:
         2b:00:45:19:df:96:1b:e0:5f:c4:8c:97:c5:fc:3a:85:b9:fc:
         69:f7:2a:b8:d0:dc:a8:20:c1:75:40:1b:4a:90:bd:df:90:85:
         89:33:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:19 2026 by rpki-client