Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa
File:                     3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (raw, json)
Hash identifier:          eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=
Subject key identifier:   78:7B:D7:94:FB:14:45:43:C3:CF:AF:A4:3E:60:8B:0F:E2:14:7F:C9
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       7541DCCE90D55D3EB26B057973514D5B24CD0484
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa
Signing time:             Sun 03 May 2026 02:15:51 +0000
ROA not before:           Sun 03 May 2026 02:10:51 +0000
ROA not after:            Sun 02 May 2027 02:15:51 +0000
asID:                     59281
IP address blocks:        137.59.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:dc:ce:90:d5:5d:3e:b2:6b:05:79:73:51:4d:5b:24:cd:04:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: May  3 02:10:51 2026 GMT
            Not After : May  2 02:15:51 2027 GMT
        Subject: CN=787BD794FB144543C3CFAFA43E608B0FE2147FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:95:e9:42:89:22:ac:7f:93:3f:03:c0:c1:
                    ca:23:46:39:aa:16:6b:01:51:2d:49:da:31:f1:bd:
                    23:12:8b:73:21:d4:cb:a0:35:ad:7e:d6:88:18:78:
                    6d:6e:9b:c2:a9:0b:fa:65:8a:a9:19:0f:80:f0:b0:
                    ce:37:d3:99:44:44:bc:45:1e:d4:e8:7e:7c:e0:f4:
                    50:49:43:98:64:b4:4c:6a:2e:27:57:ed:9a:e7:b1:
                    0c:35:9a:ff:ea:af:fb:40:28:ac:5a:e9:8a:58:b6:
                    df:a8:ba:22:ca:88:94:7c:bf:cb:c9:3f:0e:87:5f:
                    e1:d9:cd:a8:b0:1d:91:36:9d:8c:75:96:29:2e:cc:
                    78:35:55:6b:37:7e:6f:70:c7:75:6a:37:92:e0:f5:
                    67:1f:f5:64:75:50:18:ba:7b:c8:58:29:b2:0f:d6:
                    c6:c2:ec:63:d2:e7:2e:8d:a1:0a:c2:f0:a9:31:ae:
                    84:17:54:d2:35:94:13:5b:ac:47:4e:1c:dc:a9:b2:
                    33:4b:01:45:57:91:4b:a3:e6:50:52:52:fa:aa:3a:
                    10:ec:79:f6:65:56:77:24:92:be:5e:9e:1a:bb:e6:
                    2a:cf:44:b1:f6:1d:63:f9:d7:07:74:db:40:bb:59:
                    82:59:ba:05:a7:16:49:39:61:49:db:27:d4:ba:24:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7B:D7:94:FB:14:45:43:C3:CF:AF:A4:3E:60:8B:0F:E2:14:7F:C9
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:95:69:eb:75:97:05:16:94:61:36:47:eb:6c:0c:45:96:25:
         48:18:30:52:bf:aa:67:b7:4b:fd:ea:87:db:da:18:3f:f5:41:
         1c:44:db:6f:98:79:bf:04:fc:13:8d:7d:73:92:cc:67:15:9c:
         df:c9:29:44:41:f1:23:66:7d:f7:a9:a5:ef:cf:5d:12:f1:b7:
         cc:6d:d8:14:50:42:e6:af:a7:a1:13:05:93:85:82:64:b2:60:
         14:2b:40:0b:36:f2:d4:67:5b:87:e8:05:2e:49:09:bd:39:ab:
         cc:23:d9:ea:0e:06:02:77:4e:c0:7f:66:2f:69:85:11:5d:05:
         f1:c7:78:4b:2a:7a:cd:3a:f8:04:1c:3e:24:69:1e:01:0d:99:
         f4:38:e1:30:15:40:d2:d3:99:7d:08:b9:d0:a7:18:03:80:fa:
         7f:c7:cf:0e:90:29:1b:d5:9f:75:c0:84:cb:11:42:1b:75:e0:
         40:3e:86:6c:9d:94:bc:c8:78:88:e5:c6:71:bf:62:b6:af:02:
         3b:a1:f2:09:c1:aa:02:91:d7:ed:85:45:21:87:11:23:70:b6:
         49:ab:70:7b:f4:92:0c:25:ec:12:43:1c:65:cb:f3:82:31:2e:
         ee:5a:30:94:2d:26:46:43:b1:9d:5a:fc:3b:3f:49:56:4a:a5:
         5f:a8:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:22 2026 by rpki-client