Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3136332e35332e3138342e302f32322d3234203d3e2039333431.roa
File:                     3136332e35332e3138342e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          IKevF/TaAXRCQqAkjDe8gNlC20buB960VCm4FbpqHto=
Subject key identifier:   F8:48:CE:72:2D:22:88:54:E4:E3:B9:C8:2D:E9:35:ED:20:52:12:8B
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2D4E291CBD9F628CC1D2269B9F9DF1D589CDF49A
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3136332e35332e3138342e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 24 Feb 2026 06:00:02 +0000
ROA not before:           Tue 24 Feb 2026 05:55:02 +0000
ROA not after:            Tue 23 Feb 2027 06:00:02 +0000
asID:                     9341
IP address blocks:        163.53.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4e:29:1c:bd:9f:62:8c:c1:d2:26:9b:9f:9d:f1:d5:89:cd:f4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Feb 24 05:55:02 2026 GMT
            Not After : Feb 23 06:00:02 2027 GMT
        Subject: CN=F848CE722D228854E4E3B9C82DE935ED2052128B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:ce:73:e2:35:98:f6:b5:25:ab:83:15:79:
                    29:2b:cd:62:1f:56:07:6b:52:88:04:ac:73:26:34:
                    f2:61:37:1f:0a:2d:67:b3:4c:6c:f9:ec:87:7a:6c:
                    94:87:da:3b:ed:fc:c4:a5:1f:6f:a5:a1:66:e5:7b:
                    7a:07:34:60:1d:92:70:74:84:54:e2:92:2e:1d:f4:
                    6b:12:61:18:e3:17:e8:70:10:4c:30:18:cf:a3:91:
                    59:16:12:52:e1:67:bd:44:1b:25:60:40:0d:91:a3:
                    b1:a9:90:65:5c:c2:82:2e:12:39:09:8a:23:27:7f:
                    d8:cf:1f:27:7e:82:02:1a:6f:e5:a7:ab:fc:94:a0:
                    2d:34:ca:cb:8e:d2:06:98:3f:e0:2d:bf:e4:ba:d1:
                    6b:d6:53:44:50:50:5b:2d:8c:78:be:9d:59:5a:3a:
                    a2:35:69:f8:72:21:59:df:70:45:f1:1e:23:23:dd:
                    18:f3:45:fa:ac:a4:39:18:ef:07:a5:35:84:a3:a1:
                    a9:c2:bf:e4:c2:19:f0:e1:3c:73:dc:7b:89:57:c9:
                    e6:1e:97:f1:3c:9c:66:37:65:83:0f:49:79:ff:0c:
                    22:02:d9:2e:c7:cc:7b:9c:be:84:15:a0:90:66:9c:
                    d0:a3:1f:97:9e:7a:34:d7:ae:f8:69:8e:bc:9e:d9:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:CE:72:2D:22:88:54:E4:E3:B9:C8:2D:E9:35:ED:20:52:12:8B
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3136332e35332e3138342e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:31:ef:4c:75:58:5d:98:f6:d9:e8:26:72:4d:3b:65:55:c7:
         1a:ce:18:ba:c3:a7:ed:f3:c2:0f:62:bd:90:a8:b3:5b:f3:c0:
         8b:43:8e:83:3f:88:65:ee:56:cc:2e:ef:8e:43:5e:e6:e6:c9:
         eb:26:ad:63:4e:32:29:e7:6f:67:36:c5:51:9f:e3:3e:87:c0:
         86:e9:8c:a7:7a:f3:fa:3c:6a:b4:c0:95:49:22:af:24:a8:c3:
         45:6c:e3:e4:66:f3:28:ee:f8:79:78:d2:3b:bd:d1:f1:8c:8c:
         ee:f9:ef:7f:16:f9:8d:34:1a:42:72:6a:86:24:6c:35:5b:30:
         eb:c5:cc:51:17:2a:a8:71:85:4e:d6:70:d6:f4:e6:cb:97:fa:
         67:a9:4f:aa:1c:ea:6b:e9:b7:90:45:40:1a:3f:df:5b:21:df:
         ef:85:9a:a0:ad:69:c7:e3:86:02:d9:c0:37:6d:56:72:63:e4:
         0f:eb:7e:27:c8:ac:86:4c:5d:4a:90:77:5c:7d:e3:52:1e:12:
         47:3f:fb:9a:48:4d:a9:85:2c:92:fb:a1:37:e3:e2:7e:54:63:
         80:00:92:cf:17:a3:02:46:1f:e8:f9:65:f9:e6:1b:b1:b9:a7:
         0e:2d:7a:55:47:12:be:4d:14:d5:2c:bd:44:82:88:c7:d8:c9:
         54:08:a9:7c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULU4pHL2fYozB0iabn53x1YnN9JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNjAyMjQwNTU1MDJaFw0yNzAyMjMwNjAwMDJaMDMxMTAvBgNV
BAMTKEY4NDhDRTcyMkQyMjg4NTRFNEUzQjlDODJERTkzNUVEMjA1MjEyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXA85z4jWY9rUlq4MVeSkrzWIf
VgdrUogErHMmNPJhNx8KLWezTGz57Id6bJSH2jvt/MSlH2+loWble3oHNGAdknB0
hFTiki4d9GsSYRjjF+hwEEwwGM+jkVkWElLhZ71EGyVgQA2Ro7GpkGVcwoIuEjkJ
iiMnf9jPHyd+ggIab+Wnq/yUoC00ysuO0gaYP+Atv+S60WvWU0RQUFstjHi+nVla
OqI1afhyIVnfcEXxHiMj3RjzRfqspDkY7welNYSjoanCv+TCGfDhPHPce4lXyeYe
l/E8nGY3ZYMPSXn/DCIC2S7HzHucvoQVoJBmnNCjH5eeejTXrvhpjrye2U2JAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+EjOci0iiFTk47nILek17SBSEoswHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzYzMzJlMzUzMzJlMzEzODM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKjNbgwDQYJKoZIhvcN
AQELBQADggEBAAYx70x1WF2Y9tnoJnJNO2VVxxrOGLrDp+3zwg9ivZCos1vzwItD
joM/iGXuVswu745DXubmyesmrWNOMinnb2c2xVGf4z6HwIbpjKd68/o8arTAlUki
rySow0Vs4+Rm8yju+Hl40ju90fGMjO75738W+Y00GkJyaoYkbDVbMOvFzFEXKqhx
hU7WcNb05suX+mepT6oc6mvpt5BFQBo/31sh3++FmqCtacfjhgLZwDdtVnJj5A/r
fifIrIZMXUqQd1x941IeEkc/+5pITamFLJL7oTfj4n5UY4AAks8XowJGH+j5Zfnm
G7G5pw4telVHEr5NFNUsvUSCiMfYyVQIqXw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:52 2026 by rpki-client