Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa
File:                     3135372e36362e32392e302f32342d3234203d3e203539323831.roa (raw, json)
Hash identifier:          TgXtz6oJv5efAvtzfgig61bBFIXryYgVRq0PKFmn7PM=
Subject key identifier:   2B:82:85:35:59:4E:AF:6A:D0:D3:06:D2:93:ED:CC:AA:F4:A3:55:42
Certificate issuer:       /CN=EAD173629E4F955F44EC781A3739775E738ACCFD
Certificate serial:       16DF1722048B28472E6B25AD8572C4B884CD285D
Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa
Signing time:             Tue 17 Mar 2026 09:03:23 +0000
ROA not before:           Tue 17 Mar 2026 08:58:23 +0000
ROA not after:            Tue 16 Mar 2027 09:03:23 +0000
asID:                     59281
IP address blocks:        157.66.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl
                          rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 22:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:df:17:22:04:8b:28:47:2e:6b:25:ad:85:72:c4:b8:84:cd:28:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD
        Validity
            Not Before: Mar 17 08:58:23 2026 GMT
            Not After : Mar 16 09:03:23 2027 GMT
        Subject: CN=2B828535594EAF6AD0D306D293EDCCAAF4A35542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:56:83:43:22:4a:27:5b:a4:35:42:8e:56:
                    e7:4b:33:c5:d7:c9:e2:5d:6d:5b:01:5d:e6:80:75:
                    67:a9:ba:fc:91:31:25:98:42:e1:40:22:28:13:4e:
                    f9:8a:ae:38:59:40:bc:20:02:43:a9:bf:76:45:4b:
                    68:f6:53:91:98:23:11:f2:6d:8e:37:a1:85:31:ea:
                    c6:30:9a:5d:ba:68:89:62:b8:eb:8d:0c:34:d2:15:
                    70:83:50:32:b2:c1:0b:e2:4a:03:5c:43:72:d5:2e:
                    3b:65:2f:fc:aa:69:6b:ab:84:3e:e9:a9:26:24:14:
                    f9:88:40:73:65:86:8b:69:b1:87:d2:b0:21:2a:ad:
                    73:b5:7f:40:58:d5:1c:76:b2:0a:da:35:12:a5:80:
                    3f:cc:61:fe:78:83:37:68:da:a7:d2:d3:99:7d:72:
                    74:04:01:70:c8:46:bf:d5:b6:d2:18:b8:91:5b:d8:
                    51:7f:92:c1:7e:aa:f0:e5:a6:e9:34:69:fa:4e:f8:
                    bf:4d:bd:02:14:a9:b9:03:4a:68:c8:ec:dd:fc:b7:
                    1e:0f:22:8e:2e:df:6a:a1:83:f7:ed:7a:1b:eb:e7:
                    78:85:1a:be:0a:80:70:d4:28:5c:ac:aa:4f:76:9d:
                    19:5c:7c:42:c3:ec:bf:fb:35:a8:6c:17:b1:07:99:
                    b2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:82:85:35:59:4E:AF:6A:D0:D3:06:D2:93:ED:CC:AA:F4:A3:55:42
            X509v3 Authority Key Identifier:
                keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:b2:86:4e:d9:ca:b0:1d:c9:c0:49:9a:be:94:41:22:10:
         70:09:37:4d:9f:1c:1a:2c:34:44:73:fc:a6:7a:58:96:6a:70:
         e4:7c:89:c0:1d:40:e4:e0:b7:c2:6c:ee:60:5f:96:90:4c:a4:
         2d:ca:d7:9f:9e:e6:27:2f:2a:45:e1:6f:9f:6b:93:d1:8c:44:
         65:90:89:63:1d:bd:51:5c:0b:fb:51:eb:05:95:a3:1c:60:17:
         9f:75:ca:49:3d:79:71:de:3c:09:3f:ee:a8:47:d8:84:c0:22:
         d3:39:71:41:af:2b:d0:66:b2:84:a2:10:b5:88:0b:2a:ff:25:
         2c:8c:4d:1d:6f:cb:c7:2a:2b:1f:82:ca:62:9e:01:67:d1:79:
         4b:5a:34:bd:0d:07:af:75:75:d7:25:39:a3:11:30:6a:6b:3e:
         2f:b7:4f:58:66:2e:01:9f:25:5f:64:5b:b4:44:fc:c9:27:4b:
         9f:43:85:ec:b3:3d:ed:1e:63:1e:5d:83:98:b4:78:1c:9b:9e:
         cc:1d:a4:8a:33:23:4b:eb:e9:d1:2f:ee:c4:da:08:b8:56:f7:
         1e:a9:22:81:64:87:80:1d:6a:6b:e5:b4:03:93:7a:e5:59:55:
         33:16:1c:ab:9b:e1:b5:44:44:0e:cf:63:5d:92:9b:17:b6:e0:
         94:47:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:29:47 2026 by rpki-client