Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
File:                     3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          YSFAL2tW6cTVQfgDTgZL8q+MB0PvmVYIYCi98VnDYcA=
Subject key identifier:   04:04:2A:5E:20:31:41:E3:C4:9C:E6:E1:3B:77:04:F5:37:1C:F3:07
Certificate issuer:       /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial:       65DF1BCD5E66F65462EAB7040F361E37EDC1F4C2
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
Signing time:             Sun 03 May 2026 02:15:48 +0000
ROA not before:           Sun 03 May 2026 02:10:48 +0000
ROA not after:            Sun 02 May 2027 02:15:48 +0000
asID:                     56242
IP address blocks:        137.59.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
                          rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:df:1b:cd:5e:66:f6:54:62:ea:b7:04:0f:36:1e:37:ed:c1:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
        Validity
            Not Before: May  3 02:10:48 2026 GMT
            Not After : May  2 02:15:48 2027 GMT
        Subject: CN=04042A5E203141E3C49CE6E13B7704F5371CF307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:cd:31:35:6d:27:42:30:79:94:50:6e:13:
                    8e:2b:25:f5:a5:7d:03:69:c6:9a:7e:0f:52:32:09:
                    c3:58:ec:15:0c:f6:a3:a8:34:91:8d:42:f6:4f:e4:
                    d0:59:d5:c6:da:8f:bb:ee:c9:85:50:40:a5:fb:54:
                    fd:a6:27:14:15:1f:a6:a2:be:b0:70:ba:1c:1d:36:
                    c2:3a:9f:cf:01:82:c0:15:22:96:d0:1d:7d:c1:ee:
                    44:11:cb:30:09:01:c6:fb:30:d7:cd:7f:9c:f1:a5:
                    89:c5:75:6a:88:8b:64:5b:20:da:e5:5b:dc:67:2f:
                    cb:ab:72:8d:67:7f:85:fe:b6:02:2b:07:54:3f:66:
                    b7:76:3b:13:61:24:73:22:f1:ce:fc:3e:1d:55:2a:
                    08:63:57:78:9f:d7:60:9e:82:41:5f:a5:ff:41:0e:
                    03:d4:79:c1:c8:c3:09:3b:0d:a5:95:f6:41:4d:ab:
                    15:df:8f:25:33:00:30:a0:a9:42:c6:33:b9:70:4c:
                    85:4e:4a:17:b2:97:75:4b:97:6e:70:32:3e:20:ba:
                    01:68:1c:47:ad:5e:de:96:ea:47:24:58:f7:14:e8:
                    bf:67:e7:e5:81:17:d2:5a:ea:05:d2:0e:d9:29:88:
                    73:4a:84:b4:db:4a:e4:87:9c:3d:82:3a:da:7d:ef:
                    27:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:04:2A:5E:20:31:41:E3:C4:9C:E6:E1:3B:77:04:F5:37:1C:F3:07
            X509v3 Authority Key Identifier:
                keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:1b:b6:a5:12:d6:e6:68:98:bf:8b:b2:c7:34:23:08:7b:
         5f:95:34:c5:46:db:23:e2:77:0b:a8:88:f5:c2:a8:9f:d4:5e:
         2d:2d:03:e7:e1:1a:21:12:d9:db:65:2b:6b:e4:08:23:34:83:
         cd:04:8d:38:a4:7b:fa:24:94:b0:65:f5:56:14:0f:67:5d:77:
         1e:9a:f7:92:fd:0b:a6:3b:34:fb:34:db:2f:62:5f:c1:fe:6b:
         88:e4:f5:58:cc:a2:08:f8:4d:6d:d3:a6:41:d3:ac:8e:6a:91:
         a7:73:99:12:a0:73:93:76:4c:0c:f6:95:5f:0e:06:80:6d:d4:
         1c:83:45:a8:cd:1f:ce:64:f9:3b:a0:86:8f:cc:cf:74:22:4c:
         a6:f9:1e:a2:5f:9b:63:4d:6d:71:2e:f2:58:1a:4f:0d:0a:5d:
         94:1c:ef:e0:8c:b5:3d:1c:9d:fb:ad:88:4f:f5:bc:b0:8d:22:
         5b:06:d4:31:d1:66:06:c9:0d:ef:e6:13:e6:c7:a6:40:7a:1d:
         4f:07:df:c7:b6:74:9a:5e:33:a8:13:d1:e3:7b:9d:16:f5:cd:
         a5:6a:ad:f8:e5:c8:1e:3e:ce:5a:ee:ab:eb:4d:0e:69:16:0c:
         43:e0:37:a6:c2:e8:c1:43:dc:9f:83:ea:3f:ff:3b:50:c2:5d:
         cd:02:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:22 2026 by rpki-client