Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
File:                     3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=
Subject key identifier:   95:2A:45:38:D9:E6:5C:95:B3:12:8D:0F:0A:1C:0E:E0:DC:3D:5C:24
Certificate issuer:       /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Certificate serial:       6D99E931B0A65B14EFAB28590513AE0C3B58F4B2
Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
Signing time:             Wed 18 Feb 2026 15:57:30 +0000
ROA not before:           Wed 18 Feb 2026 15:52:30 +0000
ROA not after:            Wed 17 Feb 2027 15:57:30 +0000
asID:                     154410
IP address blocks:        160.191.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
                          rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:99:e9:31:b0:a6:5b:14:ef:ab:28:59:05:13:ae:0c:3b:58:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
        Validity
            Not Before: Feb 18 15:52:30 2026 GMT
            Not After : Feb 17 15:57:30 2027 GMT
        Subject: CN=952A4538D9E65C95B3128D0F0A1C0EE0DC3D5C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:66:1d:da:77:57:3e:a5:75:8c:29:9b:2a:
                    40:f7:7b:a0:b8:da:09:c6:6c:6d:3f:ca:a6:08:85:
                    c5:04:d5:23:17:9b:be:16:00:a7:fc:ae:7f:41:54:
                    c2:71:02:0f:bf:67:d8:9e:56:39:e4:d0:d0:3f:e8:
                    93:00:9e:4f:1a:fe:98:f1:93:e9:6a:c4:c0:c8:f8:
                    e8:c5:2d:a6:30:38:c8:fb:c8:61:5a:8e:84:f6:6e:
                    95:33:09:8b:16:8c:2d:e0:6a:69:a7:f1:43:20:0c:
                    a5:a1:60:db:30:71:77:50:14:d2:b7:9e:24:b9:ef:
                    90:5f:af:0d:cf:7a:49:6b:66:8f:88:ed:50:60:68:
                    44:7a:e2:5b:98:4f:09:a9:31:2f:ec:07:2a:ce:eb:
                    12:fb:86:2f:0e:38:2b:bf:3d:8b:1f:be:2c:e1:47:
                    ba:8f:db:af:e7:9a:69:48:d7:28:7f:a7:b8:9f:c2:
                    f0:6f:c6:c6:08:96:63:8c:fe:ec:e2:2b:21:fa:f1:
                    3b:ab:3e:c3:10:df:f0:c9:36:da:8f:9d:2e:dd:ac:
                    69:e3:3c:2b:92:cd:36:6b:15:a2:be:4d:19:cd:7c:
                    6d:c5:92:1e:67:43:74:9e:e2:b6:84:42:9c:79:5e:
                    49:d1:84:c8:7d:84:44:7d:21:df:d2:48:db:98:e9:
                    ea:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:45:38:D9:E6:5C:95:B3:12:8D:0F:0A:1C:0E:E0:DC:3D:5C:24
            X509v3 Authority Key Identifier:
                keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:41:00:7f:47:28:e1:29:aa:da:cb:26:22:a5:7e:13:12:
         b3:d2:9c:1b:59:97:4a:cb:c9:3f:bf:33:b0:93:5f:e5:99:01:
         24:0c:aa:f9:bd:7a:43:d4:fc:1e:d9:97:bb:17:1c:9a:eb:f8:
         c0:3e:45:7e:63:1d:08:a8:ad:7b:17:e9:cb:f9:03:df:ae:b7:
         f4:59:ee:1b:f0:be:31:30:a7:b2:6b:34:f4:82:aa:cd:43:90:
         b8:de:b6:59:1d:48:42:2e:fc:9f:df:b8:1b:37:2c:42:c6:e5:
         ca:41:da:39:1e:d1:54:53:62:b0:a2:74:59:c2:0b:9a:82:85:
         85:da:c9:a8:d9:1f:12:80:ce:e7:54:f2:97:d5:72:a5:80:bb:
         f6:7f:da:9f:64:c1:07:62:31:c3:5c:f6:66:5f:ef:e4:df:db:
         d3:07:c2:b9:13:83:37:b9:95:ac:6f:10:ac:d6:4b:23:44:72:
         3e:04:a9:20:10:37:b2:42:67:67:71:0e:58:3a:cb:25:40:70:
         4d:c4:06:f1:13:75:89:6c:89:27:02:ae:ba:5c:9b:4d:1d:00:
         db:6d:94:2b:15:68:08:d4:32:8b:f5:8f:3a:e2:43:8b:d4:1c:
         17:dc:7c:d2:dd:cb:d7:da:d6:c3:e3:cf:b1:22:37:d0:f6:a8:
         f0:60:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:28 2026 by rpki-client