Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa
File:                     3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (raw, json)
Hash identifier:          9S29qFeJZloki9PWW9tdgsR5Hw2QfhcPZXeZtm9LI8o=
Subject key identifier:   91:FA:6C:A5:A5:A2:E4:08:B3:2E:FD:20:6B:6C:1A:D0:21:3C:85:73
Certificate issuer:       /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Certificate serial:       2B04B0E035DB9B5EAD5B9141861D740AF9E74D86
Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa
Signing time:             Wed 07 Jan 2026 07:00:36 +0000
ROA not before:           Wed 07 Jan 2026 06:55:36 +0000
ROA not after:            Wed 06 Jan 2027 07:00:36 +0000
asID:                     152764
IP address blocks:        160.19.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl
                          rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 15:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:b0:e0:35:db:9b:5e:ad:5b:91:41:86:1d:74:0a:f9:e7:4d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
        Validity
            Not Before: Jan  7 06:55:36 2026 GMT
            Not After : Jan  6 07:00:36 2027 GMT
        Subject: CN=91FA6CA5A5A2E408B32EFD206B6C1AD0213C8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:12:a8:5c:80:46:c1:b6:05:14:26:ac:19:
                    84:b3:7e:fe:5a:a2:ed:f9:20:8f:15:58:58:23:3c:
                    df:9f:0f:58:e9:f4:2e:37:eb:19:ed:78:a5:d7:fc:
                    c2:36:0b:4c:9f:74:c2:89:36:29:11:a5:ef:ec:e5:
                    f9:89:e6:9f:b9:e1:13:51:50:a0:7c:f0:d2:4f:80:
                    73:51:93:9e:ca:d2:75:3f:fa:55:76:c8:b7:c1:09:
                    4b:13:2c:b0:9d:d6:a8:44:ca:df:b0:86:ba:72:f0:
                    a8:fa:37:33:70:e1:37:11:8d:55:d1:3b:88:ea:da:
                    e3:e9:5f:8b:34:ca:98:76:03:ea:3d:95:f8:fa:14:
                    86:95:e6:80:bb:22:10:34:d4:4a:87:6d:64:e0:3a:
                    ea:69:a3:c7:31:24:09:38:d3:66:55:8b:a5:57:fa:
                    5a:75:ba:46:3f:e8:64:21:97:51:f4:20:07:03:e9:
                    44:6e:70:be:4b:91:6d:84:ba:52:25:48:f3:5e:c1:
                    79:d0:f7:c8:d0:e0:22:90:09:04:c6:ac:9f:25:3f:
                    4d:d5:6e:f2:04:03:2d:95:b1:87:39:1f:5c:be:1e:
                    fe:ba:c6:03:f0:a1:08:ad:5e:79:9a:cb:65:65:c3:
                    5f:5c:7c:0a:87:1a:7d:3d:68:74:5c:54:cd:d5:a2:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FA:6C:A5:A5:A2:E4:08:B3:2E:FD:20:6B:6C:1A:D0:21:3C:85:73
            X509v3 Authority Key Identifier:
                keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:b1:1f:84:45:78:f4:ca:db:c5:b4:4d:61:f8:58:3c:43:
         dd:63:53:ba:5b:33:9f:a4:22:05:d8:59:c3:f1:58:69:ab:8b:
         30:d2:e8:b8:0b:36:77:c1:ab:70:97:47:f7:73:19:4a:4d:74:
         f1:dd:35:88:37:97:77:4b:dc:65:95:2d:42:21:f3:49:3f:44:
         8b:41:ce:40:21:56:74:7e:dd:89:3d:0e:c2:78:2e:30:d6:e7:
         66:07:7a:3b:ca:ad:a7:4a:19:73:48:5f:a5:8b:8b:f0:34:25:
         70:59:3e:8f:0b:a4:86:02:97:8c:7b:3a:e3:d0:d0:a1:21:5b:
         65:32:64:a0:64:93:58:77:ad:98:1b:02:e5:3b:0b:3e:57:69:
         91:3c:36:91:7a:21:d0:1c:3a:62:76:96:19:23:b3:46:49:82:
         40:1a:b0:bf:ee:66:b8:24:03:2a:08:03:26:9c:07:e0:d6:26:
         ff:b7:23:4c:fd:7b:56:c1:05:4f:a6:e7:7b:9d:86:f2:e2:78:
         01:78:b9:fa:8b:fd:e8:fd:ae:f8:4d:18:e7:57:c3:36:fd:0b:
         92:5c:4d:34:d1:61:8b:2e:ae:fa:2c:ad:15:38:df:03:12:cd:
         5d:d8:a8:0f:1d:56:46:04:6e:db:8a:b2:c2:74:4e:7e:8a:07:
         ac:aa:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:51 2026 by rpki-client