Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          PNeE/+7B+BLu8LaYSXrWWlcFbIVgwo7q+aOooyp+C94=
Subject key identifier:   26:FF:3D:3D:CB:C2:90:44:09:AC:F8:75:B6:35:BE:C1:6C:45:0D:DF
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       127328E4B02572A358CA7590111A197AAA01D51D
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 04 Mar 2026 17:00:02 +0000
ROA not before:           Wed 04 Mar 2026 16:55:02 +0000
ROA not after:            Wed 03 Mar 2027 17:00:02 +0000
asID:                     58381
IP address blocks:        163.53.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Mar 2026 03:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:73:28:e4:b0:25:72:a3:58:ca:75:90:11:1a:19:7a:aa:01:d5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Mar  4 16:55:02 2026 GMT
            Not After : Mar  3 17:00:02 2027 GMT
        Subject: CN=26FF3D3DCBC2904409ACF875B635BEC16C450DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:5b:b1:64:11:72:ea:62:c7:95:46:60:ee:
                    8d:e3:28:b9:9d:95:b1:ac:8d:1c:d3:5d:1b:3b:10:
                    f4:4e:4a:f5:eb:4d:84:be:62:66:05:ec:c9:cb:3b:
                    d0:be:ee:39:c5:e0:8d:0a:13:4d:92:88:74:7c:01:
                    90:9f:0a:16:23:43:9d:d3:23:bd:ef:67:8a:d1:9f:
                    47:0d:ca:4c:83:50:58:07:c0:02:95:dd:31:ee:96:
                    58:28:43:b0:70:b5:0e:44:85:73:7e:ca:21:8a:3f:
                    b2:f5:5e:40:3b:6a:ee:15:38:99:56:04:cc:be:7c:
                    b8:95:0e:29:21:c5:76:df:68:c1:20:64:0e:63:7f:
                    3e:4d:d7:0a:f9:22:5f:74:3d:39:0a:9b:01:3d:a1:
                    04:81:ab:a8:08:9d:99:7e:5f:0d:9e:73:a4:66:75:
                    e6:ac:34:ad:e0:11:86:eb:97:08:8e:93:47:05:67:
                    f7:12:b9:b8:94:f1:69:7f:4f:22:fb:c7:05:14:0e:
                    c2:38:b6:51:66:4e:ec:b8:ae:e6:96:ef:71:f4:fd:
                    9d:6d:27:25:e2:b5:fc:0d:78:64:12:0c:3e:ae:e7:
                    63:38:25:18:f5:00:36:d1:3b:6a:0f:65:67:9b:b0:
                    f1:48:1e:c3:f2:3b:c8:34:5a:17:68:3c:de:66:5b:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:3D:3D:CB:C2:90:44:09:AC:F8:75:B6:35:BE:C1:6C:45:0D:DF
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:26:cb:55:0c:f0:86:07:76:9d:13:a9:a3:43:33:eb:13:6b:
         5b:16:1c:3a:79:c5:69:a1:99:73:84:2e:77:90:3e:ce:2a:6a:
         7d:29:a7:95:5f:f6:7e:5a:84:d1:52:53:f8:df:2e:88:91:c9:
         b2:d0:13:a1:6c:b3:0c:1f:87:d4:2a:b5:75:4a:5e:81:f6:36:
         11:62:1d:77:6e:ec:61:e5:eb:0c:ea:24:74:17:b5:93:45:f3:
         4b:1a:dc:71:7e:c6:c3:b4:9b:81:c1:83:f9:e4:de:51:6c:78:
         79:bd:bf:04:cf:b4:46:7f:0d:ee:d4:a7:f7:6f:8a:d2:b6:50:
         2c:ec:db:a6:93:85:36:9a:1d:00:bd:cb:c1:52:39:b6:10:30:
         5d:1a:fb:df:25:c1:76:a3:80:5b:9d:01:24:ff:10:f7:dd:bb:
         1c:fd:90:86:70:1e:38:77:49:a1:6a:8e:ca:49:15:83:56:61:
         a7:73:f5:77:68:33:17:ae:a3:8b:86:c7:43:ae:6d:d2:88:a0:
         6e:aa:49:04:de:c6:eb:2f:e6:0c:3d:70:79:c6:0d:9e:0c:b0:
         07:68:f4:6d:fe:44:e5:7a:28:7b:27:fe:40:77:b6:05:f4:ad:
         69:59:92:49:5e:45:10:89:9a:3a:2d:13:1a:db:07:39:21:b9:
         21:6a:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:41:18 2026 by rpki-client