Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa
File:                     3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (raw, json)
Hash identifier:          lH+nzpIH7qgPs23GtnInagGD3Vn9prF5U113/245LQE=
Subject key identifier:   C4:F9:89:A2:CF:0E:C8:4D:65:CF:C1:85:AD:E8:72:FF:D7:F7:83:8F
Certificate issuer:       /CN=F5B80CDE21C19D1110E1718B273B65D38874444D
Certificate serial:       3D19D4F0B1AB0333655F408E2011E719B6091216
Authority key identifier: F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa
Signing time:             Sun 03 May 2026 02:14:41 +0000
ROA not before:           Sun 03 May 2026 02:09:41 +0000
ROA not after:            Sun 02 May 2027 02:14:41 +0000
asID:                     152355
IP address blocks:        157.10.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl
                          rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:19:d4:f0:b1:ab:03:33:65:5f:40:8e:20:11:e7:19:b6:09:12:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B80CDE21C19D1110E1718B273B65D38874444D
        Validity
            Not Before: May  3 02:09:41 2026 GMT
            Not After : May  2 02:14:41 2027 GMT
        Subject: CN=C4F989A2CF0EC84D65CFC185ADE872FFD7F7838F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:b3:f8:a5:68:9c:79:74:fc:d4:39:aa:e8:
                    50:3c:23:0d:42:65:df:f5:ba:55:1a:69:15:c7:49:
                    58:96:42:e1:65:41:db:d2:14:8e:55:be:0c:63:03:
                    b0:81:5c:49:b4:10:64:03:51:33:8f:f5:cf:c4:ca:
                    6b:2d:5f:16:99:46:60:7e:cd:81:e0:97:35:39:df:
                    f4:0a:58:c6:ef:86:24:63:ac:9a:9d:27:7c:36:eb:
                    9d:9f:1f:d8:ce:0e:61:fc:63:04:3c:01:55:a1:e9:
                    bd:03:4e:cd:87:b7:60:79:12:be:10:b4:93:fd:5b:
                    77:20:b8:dc:4e:45:9f:7b:2f:66:de:93:cb:b3:70:
                    17:41:f0:5d:86:e5:a1:af:2e:7b:13:7f:08:43:54:
                    e7:b6:cf:e4:09:eb:96:03:dc:a7:5c:bd:3e:33:f5:
                    09:c5:ce:12:99:48:20:94:0a:06:48:bb:6b:30:e7:
                    3c:8e:96:07:85:1f:a6:cd:19:ee:c7:50:fe:29:ff:
                    55:1d:29:60:f5:dd:68:d4:7b:b6:55:35:3e:6d:a0:
                    df:e6:63:78:6e:2d:79:6c:78:ca:6c:0d:14:d2:69:
                    bf:77:ee:29:f2:68:75:24:56:69:81:8f:86:48:38:
                    31:09:dd:02:72:37:5e:d7:ee:a1:b3:40:3f:cd:a9:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F9:89:A2:CF:0E:C8:4D:65:CF:C1:85:AD:E8:72:FF:D7:F7:83:8F
            X509v3 Authority Key Identifier:
                keyid:F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:4b:44:c1:d2:b7:1e:45:b3:db:3a:bf:f3:a6:d9:d8:d0:
         ba:92:4e:b2:b6:ce:39:1c:99:fc:b3:93:79:05:b4:73:da:bd:
         8d:03:86:73:c6:f1:8f:a0:10:75:65:d3:e8:95:46:11:d3:3f:
         49:a7:1e:a4:a8:42:24:2e:ef:8e:e9:06:82:09:86:fa:d9:f7:
         62:c0:96:9b:57:f3:94:7d:92:2e:55:a5:68:e5:60:d2:96:c5:
         09:fe:6b:69:27:ae:4e:3e:54:ee:04:a8:4b:a6:c0:33:41:6b:
         6a:10:b9:c7:8f:4e:28:c9:12:29:a6:17:7b:8d:55:f4:4f:a5:
         c1:1e:15:13:39:45:a1:85:8e:86:a5:03:f2:ae:5c:db:22:13:
         47:1f:b4:9b:b9:10:26:20:d7:dc:5a:77:03:6f:63:f6:c9:5c:
         7c:67:9a:45:3b:62:3f:a2:c3:cc:fc:e9:60:e7:6f:87:fe:e3:
         96:b3:f2:47:b0:c5:1a:ac:fd:ee:da:09:59:5f:59:cd:1f:54:
         9d:47:64:76:ec:61:16:37:a2:eb:58:38:84:4a:cd:fc:89:88:
         a9:26:4c:0e:2d:ef:eb:52:dd:20:e9:62:2d:19:af:75:22:c0:
         b8:8f:00:c1:db:65:ef:6f:6d:d6:84:6f:db:60:70:c6:ba:83:
         a2:40:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:54 2026 by rpki-client