Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa
File:                     3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (raw, json)
Hash identifier:          0iLcK2GmKo9TlWspNBxfVBn2mZhpVjYhpHKKgY4CDoA=
Subject key identifier:   D2:5D:B5:45:0D:50:EE:22:16:FF:E9:3C:49:CC:81:2D:AF:EE:F7:81
Certificate issuer:       /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
Certificate serial:       09AB12EBEEE6D8FF5EE111D3AC0243BAD555BC90
Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa
Signing time:             Sun 03 May 2026 02:13:35 +0000
ROA not before:           Sun 03 May 2026 02:08:35 +0000
ROA not after:            Sun 02 May 2027 02:13:35 +0000
asID:                     149720
IP address blocks:        160.22.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl
                          rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:12:eb:ee:e6:d8:ff:5e:e1:11:d3:ac:02:43:ba:d5:55:bc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
        Validity
            Not Before: May  3 02:08:35 2026 GMT
            Not After : May  2 02:13:35 2027 GMT
        Subject: CN=D25DB5450D50EE2216FFE93C49CC812DAFEEF781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:d5:84:a5:52:66:09:54:d1:ba:bf:08:a2:
                    f3:a4:6c:c3:45:38:e3:f7:19:1f:1e:75:62:a4:0d:
                    8e:ef:25:8b:94:65:38:b7:56:0f:e5:e0:c3:bf:7b:
                    c3:d8:1a:64:0e:25:25:da:73:6c:5c:ed:0a:2e:d5:
                    43:85:7c:da:93:fe:b7:c6:83:d0:d1:d7:97:43:ae:
                    14:8d:2d:ce:d9:f3:17:91:50:cc:7a:63:18:30:c6:
                    3d:fd:8c:94:49:3a:b8:0e:c4:5f:9d:73:a0:0b:28:
                    89:ad:27:5f:c6:24:ed:26:37:4b:34:44:24:c8:ec:
                    b7:aa:5d:71:f9:fa:72:df:5a:48:71:cf:80:54:56:
                    b2:e6:20:fb:20:80:59:11:52:d2:9c:d2:4b:7d:71:
                    b2:2c:57:f2:dd:d8:f8:33:f7:62:70:5c:2d:0e:3d:
                    f5:84:ec:12:81:7f:92:b4:d9:24:c8:43:65:14:70:
                    0a:68:d0:fd:e0:b3:3a:16:43:5d:18:69:fe:9b:ae:
                    56:2d:3d:d9:fd:68:25:db:f5:b1:87:3a:49:4c:33:
                    1b:81:4f:3d:11:45:2d:45:21:c0:47:6e:f6:89:56:
                    2b:85:1c:61:7a:6a:c0:25:bd:fe:1c:99:af:7b:17:
                    fd:39:16:36:6d:99:84:56:36:f8:80:01:d9:9f:3c:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:B5:45:0D:50:EE:22:16:FF:E9:3C:49:CC:81:2D:AF:EE:F7:81
            X509v3 Authority Key Identifier:
                keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:f6:f7:36:c5:6b:2d:08:67:17:b6:78:6a:e7:d2:9f:b9:
         77:08:82:19:56:32:ba:67:f0:0f:f9:99:9d:79:bd:38:27:d4:
         60:8c:c7:27:38:05:c6:74:3b:0a:40:5e:5b:4e:74:99:c1:ce:
         c0:c9:2d:27:c4:ed:74:eb:94:4b:49:c8:0b:e8:69:5b:11:38:
         5a:80:7f:1d:04:d5:83:0e:66:2d:e6:b1:79:c8:80:68:fa:6c:
         46:56:fc:54:35:8b:42:e9:40:dc:6b:24:a0:07:82:c4:b4:7b:
         f6:93:8d:13:62:73:da:71:27:5c:e6:e9:bb:e3:7d:69:c9:58:
         b8:56:52:24:e7:4d:7d:4b:03:82:dd:ee:6e:ce:49:8d:13:5b:
         ae:05:f1:15:8a:bf:c5:4a:c0:83:ee:0f:94:53:b7:cf:e2:e5:
         05:62:58:1e:08:7e:82:24:ac:07:bb:b7:1a:82:12:ab:ff:d6:
         3c:ad:fb:78:41:ee:6c:cd:eb:01:34:ae:0c:d8:3f:c9:b2:36:
         91:91:73:90:18:f1:2e:b7:24:0b:26:b6:03:2f:43:7a:f8:c2:
         47:92:e4:8a:99:f1:8d:a3:0e:c7:2d:04:5d:d2:25:e4:c8:fd:
         b5:45:08:be:5d:c3:9d:bb:34:57:d5:58:41:32:63:55:2f:6c:
         9f:4a:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:24 2026 by rpki-client