Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
File:                     3136302e32322e362e302f32332d3233203d3e20313532373936.roa (raw, json)
Hash identifier:          azsz9z1KEsnyuF15yUQXq8B2sogEjx41kyrRUx9ZzNg=
Subject key identifier:   60:5B:8E:8C:1D:6A:0A:E8:E7:B7:26:28:69:ED:24:9C:94:94:CA:F7
Certificate issuer:       /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial:       5747FB95AB18BF0593B941C1EF343BD3CB297DCC
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
Signing time:             Thu 16 Apr 2026 06:00:01 +0000
ROA not before:           Thu 16 Apr 2026 05:55:01 +0000
ROA not after:            Thu 15 Apr 2027 06:00:01 +0000
asID:                     152796
IP address blocks:        160.22.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 08:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:47:fb:95:ab:18:bf:05:93:b9:41:c1:ef:34:3b:d3:cb:29:7d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
        Validity
            Not Before: Apr 16 05:55:01 2026 GMT
            Not After : Apr 15 06:00:01 2027 GMT
        Subject: CN=605B8E8C1D6A0AE8E7B7262869ED249C9494CAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:01:7a:af:b8:83:8b:eb:6f:02:6d:4b:cb:5b:
                    db:03:c7:bc:28:46:71:2b:c9:07:d8:5f:4c:e9:63:
                    46:c0:1d:7e:cb:09:57:53:23:44:88:59:e1:1f:f7:
                    f9:83:44:7d:99:1c:72:25:8d:dd:31:24:f6:2f:90:
                    0c:50:52:96:65:6f:fd:e3:c5:fd:8f:33:0d:ec:12:
                    ce:fb:e2:38:c1:3f:1e:0d:5d:ab:68:bc:1b:cf:bd:
                    19:78:36:65:08:28:0c:7e:da:88:2b:c1:82:b5:10:
                    04:da:ec:3a:1b:c3:ed:a2:e3:d0:b6:53:eb:0e:72:
                    d8:59:62:65:22:95:3a:4d:84:7b:5f:dc:2e:1e:74:
                    0c:36:1f:b5:c8:0f:c1:54:92:af:49:53:d4:6b:42:
                    95:e3:05:78:fb:2e:1a:cf:d1:f0:65:ed:b3:10:3a:
                    4b:d8:ff:33:ed:53:a7:6e:2f:b5:98:33:ea:0b:67:
                    3f:eb:b1:fe:48:51:29:fd:97:aa:9e:44:4a:4b:c4:
                    76:65:e3:3c:d7:e4:2a:e6:2d:81:67:98:ac:16:40:
                    b5:8e:e4:71:79:63:a8:c0:c1:4a:22:d3:81:82:34:
                    c4:9c:02:29:ed:66:9e:1d:f8:3e:ec:3e:e6:a0:5b:
                    a0:95:a6:76:45:7e:0c:b2:c8:0d:a5:cb:28:e3:a4:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5B:8E:8C:1D:6A:0A:E8:E7:B7:26:28:69:ED:24:9C:94:94:CA:F7
            X509v3 Authority Key Identifier:
                keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:89:8e:18:ba:41:87:bb:15:da:40:90:ab:ac:f1:9e:29:d4:
         e2:8b:e4:e1:40:c9:cb:bb:a8:5f:57:dd:d5:c7:34:ca:7f:0f:
         57:2f:90:dd:32:31:2d:e6:91:3a:55:75:96:7d:33:3e:c6:45:
         bf:f7:aa:fb:0f:37:17:bd:fb:f7:46:40:82:0a:f6:bf:6e:ad:
         2d:9e:f3:3c:1a:cd:29:d5:c6:a0:2a:30:08:21:fc:e3:dd:27:
         ac:42:95:95:2a:24:c7:d6:57:d0:30:31:6f:56:34:03:3d:15:
         63:df:53:78:ae:c4:07:1c:6a:41:47:48:90:55:d1:13:19:55:
         dd:fd:a8:5b:b1:21:ec:35:41:60:6d:56:a7:d8:da:96:99:1b:
         3f:7e:66:e6:88:4a:38:1c:7e:3f:47:3d:42:0f:8e:b5:de:79:
         f1:b7:e4:97:f5:7f:17:a0:92:32:1a:ae:bc:d4:64:cc:dc:c8:
         7f:ac:ed:0c:f3:75:3b:4c:8e:63:b7:bc:af:0f:ef:37:cb:55:
         1d:13:3c:11:9a:92:c2:c0:b8:d7:b1:70:57:da:7b:47:1d:01:
         36:be:31:08:69:4b:4c:11:40:08:5c:69:18:29:38:38:eb:c5:
         89:30:ba:c8:9a:f1:c5:89:a2:5b:db:ce:93:bf:3f:bb:03:00:
         c1:3f:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:28 2026 by rpki-client