Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa
File:                     3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (raw, json)
Hash identifier:          t+VcXkUWUHKF6UOibDMpWswUlzEPH8qZz8XYAlMIEgc=
Subject key identifier:   42:14:A9:59:8E:FE:14:5F:4D:0E:C4:75:5F:D3:05:F7:AC:17:B0:AB
Certificate issuer:       /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
Certificate serial:       6AC534B36031D2F5DC8AE102B4C034E6C938D6FA
Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa
Signing time:             Mon 13 Apr 2026 19:00:02 +0000
ROA not before:           Mon 13 Apr 2026 18:55:02 +0000
ROA not after:            Mon 12 Apr 2027 19:00:02 +0000
asID:                     152806
IP address blocks:        160.22.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl
                          rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:34:b3:60:31:d2:f5:dc:8a:e1:02:b4:c0:34:e6:c9:38:d6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
        Validity
            Not Before: Apr 13 18:55:02 2026 GMT
            Not After : Apr 12 19:00:02 2027 GMT
        Subject: CN=4214A9598EFE145F4D0EC4755FD305F7AC17B0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:de:a0:4a:c2:6b:a8:f3:6c:0c:6c:5f:fb:
                    f2:4d:5e:3a:b5:0d:20:82:8d:9e:21:35:93:8c:1c:
                    d4:59:6f:6a:52:bd:f2:27:58:14:6a:d8:be:00:78:
                    bd:6d:b3:9a:03:b8:ea:7e:3e:9a:93:a4:f8:6e:75:
                    75:f3:c5:71:e5:eb:e3:31:0f:32:f5:88:e4:11:23:
                    c6:9f:ae:b3:96:aa:b8:72:2f:09:7c:4d:36:41:66:
                    66:ad:d0:a7:4e:c1:a9:eb:f3:ec:40:a8:71:0b:06:
                    eb:18:ce:65:67:3a:9c:67:06:3b:5d:15:dd:a6:cb:
                    c1:bd:1a:2e:ac:a0:ec:0d:92:95:ab:f6:00:bd:c9:
                    3e:9a:31:66:05:df:6a:3d:cd:17:75:de:42:a9:ce:
                    ee:74:22:a5:fd:9f:67:de:67:2b:8c:e9:a4:50:01:
                    4a:e1:f5:7a:79:25:e8:20:ee:f3:08:0f:e4:9f:5b:
                    3c:88:26:ee:a3:b2:4d:ff:02:a8:de:db:a8:1c:43:
                    b8:7c:cd:eb:92:50:75:d4:b8:38:2d:d5:6f:a7:d0:
                    66:fc:6b:7a:bb:23:e2:f6:74:a9:17:ca:2c:38:c4:
                    2f:6b:ae:18:50:14:82:18:21:05:3a:a1:6f:13:28:
                    3b:76:a2:11:5e:18:44:28:5a:78:30:02:0d:a8:41:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:A9:59:8E:FE:14:5F:4D:0E:C4:75:5F:D3:05:F7:AC:17:B0:AB
            X509v3 Authority Key Identifier:
                keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:75:5a:8f:81:5c:54:85:bf:d5:16:47:a8:4f:40:87:f9:
         b5:52:d9:88:33:dc:a3:18:1b:31:12:67:77:c1:d4:1b:2b:cc:
         d4:7f:2b:08:ec:08:95:d1:f3:23:80:79:ec:e2:f7:19:25:05:
         b4:d7:a3:ba:8a:ee:67:b5:64:f0:6e:79:45:ae:41:ee:13:99:
         cb:72:b9:1c:b7:88:15:66:ad:b3:26:87:f8:c9:2a:7f:ee:e5:
         44:2f:4f:58:c1:eb:65:5c:04:fb:b9:2d:69:4c:67:9f:ab:f6:
         0d:04:21:a6:e8:60:94:8c:06:ba:89:42:0a:ed:95:27:3c:e2:
         2c:53:fa:b0:6d:d6:4d:58:a8:75:c1:22:10:f2:b8:34:a4:4a:
         02:88:61:70:f6:24:a2:f4:ae:d2:56:a2:6f:e4:02:27:d1:b0:
         6a:2e:71:43:37:04:af:27:37:0e:1c:bd:c1:94:0a:0e:fc:3e:
         ec:34:02:d3:1b:6e:b3:ac:5d:94:22:d1:a1:f6:a7:a3:fb:c0:
         d8:a8:fd:38:d3:28:88:52:64:3c:17:a6:af:b7:3a:bf:8e:92:
         eb:ee:28:4a:87:8d:42:a6:7b:b9:4b:6d:d3:2d:e4:75:64:57:
         ec:d6:ad:a0:51:bc:46:44:e3:00:d3:95:d0:b3:16:5b:c3:f3:
         21:7f:ac:23
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUasU0s2Ax0vXciuECtMA05sk41vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2
ODg0QkI4QzAeFw0yNjA0MTMxODU1MDJaFw0yNzA0MTIxOTAwMDJaMDMxMTAvBgNV
BAMTKDQyMTRBOTU5OEVGRTE0NUY0RDBFQzQ3NTVGRDMwNUY3QUMxN0IwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI96gSsJrqPNsDGxf+/JNXjq1
DSCCjZ4hNZOMHNRZb2pSvfInWBRq2L4AeL1ts5oDuOp+PpqTpPhudXXzxXHl6+Mx
DzL1iOQRI8afrrOWqrhyLwl8TTZBZmat0KdOwanr8+xAqHELBusYzmVnOpxnBjtd
Fd2my8G9Gi6soOwNkpWr9gC9yT6aMWYF32o9zRd13kKpzu50IqX9n2feZyuM6aRQ
AUrh9Xp5Jegg7vMID+SfWzyIJu6jsk3/Aqje26gcQ7h8zeuSUHXUuDgt1W+n0Gb8
a3q7I+L2dKkXyiw4xC9rrhhQFIIYIQU6oW8TKDt2ohFeGEQoWngwAg2oQVJNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQhSpWY7+FF9NDsR1X9MF96wXsKswHwYDVR0j
BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3
NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0
QkI4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGNlMzkxLWE1ZDMtNDExYi1h
OTdiLWU4NjJmYmY1NjMxYy8wLzMxMzYzMDJlMzIzMjJlMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWGjANBgkqhkiG
9w0BAQsFAAOCAQEAnoB1Wo+BXFSFv9UWR6hPQIf5tVLZiDPcoxgbMRJnd8HUGyvM
1H8rCOwIldHzI4B57OL3GSUFtNejuoruZ7Vk8G55Ra5B7hOZy3K5HLeIFWatsyaH
+Mkqf+7lRC9PWMHrZVwE+7ktaUxnn6v2DQQhpuhglIwGuolCCu2VJzziLFP6sG3W
TViodcEiEPK4NKRKAohhcPYkovSu0laib+QCJ9Gwai5xQzcEryc3Dhy9wZQKDvw+
7DQC0xtus6xdlCLRofano/vA2Kj9ONMoiFJkPBemr7c6v46S6+4oSoeNQqZ7uUtt
0y3kdWRX7NatoFG8RkTjANOV0LMWW8PzIX+sIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:05 2026 by rpki-client