Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa
File:                     3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (raw, json)
Hash identifier:          81iVc0eqOS8yM/8VwLUQzIZGEDm7s9hpw8WC5TgZ8l0=
Subject key identifier:   5E:1B:7E:2A:A4:FA:B9:9A:1A:CE:52:07:29:AD:BB:12:10:99:C8:0C
Certificate issuer:       /CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
Certificate serial:       42EC715576715C47DAEBA30C902D30AD02F440C1
Authority key identifier: F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa
Signing time:             Sun 03 May 2026 03:19:28 +0000
ROA not before:           Sun 03 May 2026 03:14:28 +0000
ROA not after:            Sun 02 May 2027 03:19:28 +0000
asID:                     152787
IP address blocks:        160.19.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl
                          rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ec:71:55:76:71:5c:47:da:eb:a3:0c:90:2d:30:ad:02:f4:40:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42C5B076183F4ABDA9CE87706113FD26143DBBC
        Validity
            Not Before: May  3 03:14:28 2026 GMT
            Not After : May  2 03:19:28 2027 GMT
        Subject: CN=5E1B7E2AA4FAB99A1ACE520729ADBB121099C80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:44:fd:5f:bc:b3:95:c9:61:c8:f7:4c:11:f1:
                    ea:b5:3b:c0:87:9a:d4:02:1a:61:5d:4d:8f:7e:8a:
                    25:f3:b9:c3:43:9f:1b:c4:36:69:ea:90:34:51:23:
                    ce:ec:b8:f4:af:5d:be:a7:e4:fd:1c:e3:64:64:11:
                    37:b1:9c:fa:e5:3f:28:35:97:95:26:4d:a2:61:e6:
                    ee:ef:fa:52:fe:e9:79:aa:87:a9:df:17:4c:0f:43:
                    7f:d6:e5:a2:f1:b7:b4:06:85:df:ad:a5:c7:36:26:
                    f7:07:ac:01:e1:5f:37:43:79:49:e9:3a:51:e5:f0:
                    c7:cf:57:97:90:56:6a:c9:d1:94:f5:d8:ec:d9:6d:
                    81:17:12:d2:c3:c8:c1:a0:c3:a8:ad:42:b4:57:bf:
                    ee:45:2e:d3:2a:f2:67:ba:f7:59:a6:8c:b8:6e:79:
                    f6:28:28:34:93:39:1e:52:5c:e1:7d:09:33:56:e0:
                    b5:b9:36:ca:a7:45:05:11:6e:02:d3:0a:30:70:2d:
                    ee:57:a4:54:2a:fd:f7:ca:c6:ed:69:e6:53:44:4c:
                    12:64:6e:39:d6:94:61:49:f7:f3:8c:cd:2f:78:78:
                    d8:d5:c2:0a:e3:f7:24:a3:4f:33:c7:5b:2b:2f:e1:
                    93:34:a1:68:d3:f8:fd:33:15:4f:7d:f1:6c:0b:48:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:7E:2A:A4:FA:B9:9A:1A:CE:52:07:29:AD:BB:12:10:99:C8:0C
            X509v3 Authority Key Identifier:
                keyid:F4:2C:5B:07:61:83:F4:AB:DA:9C:E8:77:06:11:3F:D2:61:43:DB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F42C5B076183F4ABDA9CE87706113FD26143DBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:40:be:4b:ea:ba:77:08:3e:8e:b4:5b:8c:4c:cb:62:a9:b5:
         aa:20:de:e5:27:da:bc:93:f1:71:af:15:b6:3f:0c:da:85:78:
         01:d1:43:47:40:a2:7a:ad:05:e2:28:ec:a2:20:06:2d:36:82:
         57:14:e8:7a:48:7e:c4:25:3a:84:8d:d8:f2:0a:39:61:8f:99:
         d8:67:34:c9:52:20:00:7d:03:0f:c5:c7:7f:88:1d:22:2e:b3:
         83:54:e9:d4:00:c3:42:a1:f2:bc:32:cc:e7:5f:e7:32:6b:54:
         96:50:23:06:19:a9:64:17:62:80:2e:8b:85:1f:4b:21:61:4b:
         85:b6:7f:25:92:57:6d:f8:50:e8:b1:23:f1:01:ca:53:23:47:
         01:56:85:15:84:b4:b6:4d:1e:98:8b:0e:a5:66:bc:01:16:56:
         76:06:31:c3:18:4f:9c:3a:df:88:2b:ef:79:72:bd:41:7a:90:
         8a:b8:ec:c5:fe:ad:9e:c4:9b:81:33:50:91:24:86:e9:2f:94:
         f1:e5:76:3d:80:15:e8:5e:95:ce:28:69:09:2e:0a:f9:e8:bd:
         ef:c1:47:25:bd:45:06:0b:4f:af:d1:bc:a9:f2:cb:4d:c5:32:
         f9:19:83:ac:9e:ca:2a:e9:51:d1:d9:e4:65:c0:5c:04:87:50:
         5e:e3:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:39 2026 by rpki-client