Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa
File:                     3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (raw, json)
Hash identifier:          58o8xpIjp/oK6y5/vK0zJIBaCvI36zLpQOrEy+WjU/0=
Subject key identifier:   8E:D4:5A:40:3D:F2:57:2D:00:C0:8F:F7:0E:6D:E3:14:0C:DB:8D:2A
Certificate issuer:       /CN=A950C0F5B830659E499444729038D5D2047859FB
Certificate serial:       6FEF1F265530F4561C68F0E12CC3CB3198840402
Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa
Signing time:             Tue 14 Apr 2026 17:00:01 +0000
ROA not before:           Tue 14 Apr 2026 16:55:01 +0000
ROA not after:            Tue 13 Apr 2027 17:00:01 +0000
asID:                     152793
IP address blocks:        160.22.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl
                          rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ef:1f:26:55:30:f4:56:1c:68:f0:e1:2c:c3:cb:31:98:84:04:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB
        Validity
            Not Before: Apr 14 16:55:01 2026 GMT
            Not After : Apr 13 17:00:01 2027 GMT
        Subject: CN=8ED45A403DF2572D00C08FF70E6DE3140CDB8D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:1a:af:f7:e5:3f:7b:9f:76:2a:a8:98:94:
                    2b:7e:81:f0:87:28:be:7b:e5:b7:3f:bb:c0:68:d1:
                    ee:ba:26:43:76:d3:2d:43:18:63:8b:55:1d:c2:c7:
                    b4:d6:58:81:4a:e7:a3:ee:2c:57:42:6d:32:d0:27:
                    eb:59:3f:94:26:95:66:8e:5e:cc:03:64:07:31:a9:
                    ff:24:67:50:c5:8d:da:69:30:7f:72:d0:ae:72:01:
                    da:63:25:78:64:55:3c:ed:80:b3:d0:57:aa:a9:42:
                    85:77:b9:7b:ff:04:b2:4e:e3:bb:3c:9b:82:42:ce:
                    80:96:a9:3f:2f:b3:6b:df:44:98:af:4b:a4:a3:3e:
                    7a:2a:8b:66:ca:a9:61:0e:f5:cd:80:80:53:10:d7:
                    a4:33:af:b9:23:84:04:68:2a:9d:6e:4c:87:a0:a7:
                    a8:79:14:e7:49:6c:64:b9:5d:7f:62:ba:74:d8:dd:
                    8c:16:cf:c4:ae:d3:ca:b6:c5:47:3b:52:ee:ec:67:
                    cf:fd:ae:3d:d6:46:a4:d7:c2:11:6e:f7:6d:2c:fc:
                    b6:65:a7:64:f4:94:f5:4d:db:11:3c:30:ee:35:1c:
                    a5:80:0d:a3:54:b6:e2:11:73:bf:55:11:c8:cc:bf:
                    39:5f:b6:c2:29:c4:ad:c0:d6:00:e8:d6:25:70:55:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:5A:40:3D:F2:57:2D:00:C0:8F:F7:0E:6D:E3:14:0C:DB:8D:2A
            X509v3 Authority Key Identifier:
                keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:88:41:ba:73:5a:46:88:8c:b2:0e:68:2c:f9:ae:0b:e8:
         97:e5:c3:66:2f:56:00:76:32:8f:02:99:90:fc:eb:74:51:16:
         fd:67:16:d4:df:ad:cd:f2:a9:15:b4:df:89:58:ca:f9:62:23:
         41:2c:61:fd:ac:01:2c:74:0b:21:38:2d:72:df:dd:11:4a:e9:
         73:5f:2f:bc:0f:27:01:21:0f:b9:74:93:1f:60:93:8d:ed:0f:
         02:08:ee:2c:18:6c:2a:1c:ff:e8:8c:ae:8d:29:7a:d8:b4:cb:
         e8:0b:ee:32:31:2f:63:c3:4d:b1:80:26:6f:1f:59:00:6c:0f:
         d0:1b:d7:75:44:16:fe:df:0c:f9:5e:69:4d:5e:69:3c:03:76:
         52:c6:11:fa:ca:d8:ca:5a:40:47:7c:e0:9d:71:18:f0:a1:84:
         ce:0b:e1:cd:28:51:79:56:18:51:03:d4:a0:4d:f7:33:21:4f:
         18:d3:57:60:56:76:ee:bb:d4:91:70:7d:6e:9f:fe:b4:34:17:
         cd:3f:04:8a:44:38:6e:94:4f:a3:4c:c7:56:9e:2e:ec:d5:5c:
         5a:c2:e3:76:89:af:5a:97:57:09:e1:8c:72:07:0d:a9:f9:16:
         b4:57:9c:b6:51:80:55:ce:36:6a:28:08:0d:5b:28:66:12:42:
         d9:2e:27:a7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb+8fJlUw9FYcaPDhLMPLMZiEBAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw
NDc4NTlGQjAeFw0yNjA0MTQxNjU1MDFaFw0yNzA0MTMxNzAwMDFaMDMxMTAvBgNV
BAMTKDhFRDQ1QTQwM0RGMjU3MkQwMEMwOEZGNzBFNkRFMzE0MENEQjhEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMxqv9+U/e592KqiYlCt+gfCH
KL575bc/u8Bo0e66JkN20y1DGGOLVR3Cx7TWWIFK56PuLFdCbTLQJ+tZP5QmlWaO
XswDZAcxqf8kZ1DFjdppMH9y0K5yAdpjJXhkVTztgLPQV6qpQoV3uXv/BLJO47s8
m4JCzoCWqT8vs2vfRJivS6SjPnoqi2bKqWEO9c2AgFMQ16Qzr7kjhARoKp1uTIeg
p6h5FOdJbGS5XX9iunTY3YwWz8Su08q2xUc7Uu7sZ8/9rj3WRqTXwhFu920s/LZl
p2T0lPVN2xE8MO41HKWADaNUtuIRc79VEcjMvzlftsIpxK3A1gDo1iVwVVDpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjtRaQD3yVy0AwI/3Dm3jFAzbjSowHwYDVR0j
BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4
MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4
NTlGQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhmNTgyZjJiLTg2MjUtNGYzOC1i
MjZlLTQyZmJkM2MyMWNmMC8wLzMxMzYzMDJlMzIzMjJlMzMzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWJTANBgkqhkiG
9w0BAQsFAAOCAQEAuWOIQbpzWkaIjLIOaCz5rgvol+XDZi9WAHYyjwKZkPzrdFEW
/WcW1N+tzfKpFbTfiVjK+WIjQSxh/awBLHQLITgtct/dEUrpc18vvA8nASEPuXST
H2CTje0PAgjuLBhsKhz/6IyujSl62LTL6AvuMjEvY8NNsYAmbx9ZAGwP0BvXdUQW
/t8M+V5pTV5pPAN2UsYR+srYylpAR3zgnXEY8KGEzgvhzShReVYYUQPUoE33MyFP
GNNXYFZ27rvUkXB9bp/+tDQXzT8EikQ4bpRPo0zHVp4u7NVcWsLjdomvWpdXCeGM
cgcNqfkWtFectlGAVc42aigIDVsoZhJC2S4npw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:19 2026 by rpki-client