Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa
File:                     3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (raw, json)
Hash identifier:          SPxSgg7v93g2zKDq6VJY7JIwATBMTBJuqljMQUmTbgY=
Subject key identifier:   07:C0:67:56:00:76:12:CE:4C:64:6E:14:0E:31:5D:CB:5A:66:FD:C9
Certificate issuer:       /CN=3790F06CA970C551E1C9D51C4794B87804967AF1
Certificate serial:       1151AE363C45106AF020189FD1794F75317E23
Authority key identifier: 37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa
Signing time:             Sun 03 May 2026 02:17:23 +0000
ROA not before:           Sun 03 May 2026 02:12:23 +0000
ROA not after:            Sun 02 May 2027 02:17:23 +0000
asID:                     138804
IP address blocks:        157.66.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl
                          rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:ae:36:3c:45:10:6a:f0:20:18:9f:d1:79:4f:75:31:7e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3790F06CA970C551E1C9D51C4794B87804967AF1
        Validity
            Not Before: May  3 02:12:23 2026 GMT
            Not After : May  2 02:17:23 2027 GMT
        Subject: CN=07C06756007612CE4C646E140E315DCB5A66FDC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:8e:86:8f:24:29:41:4e:eb:64:40:0b:b8:
                    3d:e2:7c:22:4d:87:6d:1c:a2:a5:f2:cd:5e:40:b7:
                    30:ce:e4:2f:d0:b9:26:d0:6a:ac:f1:70:93:22:5f:
                    10:c4:4f:b7:c5:6c:0c:0f:28:f6:a5:8d:4d:97:7f:
                    3f:d9:f1:87:1f:96:3c:09:da:15:4a:8d:78:7e:fa:
                    51:90:f2:f1:9d:a7:4f:c8:f4:33:6b:7e:4a:ba:1e:
                    2b:d6:dd:32:40:e4:8c:ea:ca:28:c3:fc:94:6f:97:
                    5d:64:62:98:90:9c:83:0b:2c:43:9e:15:21:fc:f2:
                    1e:c4:e8:0e:d9:69:39:c3:62:97:ad:b5:36:15:8d:
                    f1:82:9b:11:bb:f1:1f:87:b6:49:89:f1:b3:3f:67:
                    11:f6:6b:17:d0:a3:d7:54:57:3e:2c:38:8a:fd:fc:
                    a7:d6:bc:dc:24:42:7f:da:b3:80:cd:25:cd:ae:68:
                    67:41:5c:cc:d1:27:b5:2d:32:79:0a:a3:38:39:7c:
                    b9:1d:c3:9a:ea:78:3a:17:23:e0:65:b8:01:3e:b6:
                    dc:bb:a6:3b:07:5b:27:86:26:92:4f:09:ac:41:6c:
                    05:ca:84:dc:88:5a:ae:85:22:4b:c5:cd:f5:22:9b:
                    1f:70:fd:88:8b:a6:ac:c0:f8:d0:91:99:e9:62:84:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C0:67:56:00:76:12:CE:4C:64:6E:14:0E:31:5D:CB:5A:66:FD:C9
            X509v3 Authority Key Identifier:
                keyid:37:90:F0:6C:A9:70:C5:51:E1:C9:D5:1C:47:94:B8:78:04:96:7A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3790F06CA970C551E1C9D51C4794B87804967AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3790F06CA970C551E1C9D51C4794B87804967AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/3135372e36362e33372e302f32342d3234203d3e20313338383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:23:dc:f6:77:1f:d0:69:97:c0:4c:dc:4a:51:e4:c1:b2:07:
         27:59:0e:7e:e8:f5:45:f8:80:e8:4d:04:d1:8f:67:aa:fb:ff:
         29:90:95:2b:00:e3:95:2f:8e:3a:6c:b9:1a:67:e8:8b:91:ad:
         8a:62:09:45:a1:ef:49:51:78:6a:78:dc:1a:67:c7:a9:1f:ca:
         23:e9:06:2f:c3:7f:e8:cc:74:7b:05:3e:33:50:78:42:8f:de:
         52:ce:a4:1f:be:59:a8:3c:6f:42:15:5e:5e:28:87:48:b0:b5:
         2c:ea:8f:a4:0d:03:90:7b:10:7c:c1:db:f3:00:c2:0f:33:3a:
         b1:34:59:19:4f:91:ab:34:86:6e:78:b1:55:99:90:66:af:ff:
         7d:06:c9:5d:60:9b:0f:0e:2e:7f:3c:47:26:24:33:50:75:2f:
         e7:94:0d:eb:a9:65:44:1f:4b:f3:96:6c:03:91:2e:dd:60:23:
         ba:84:ed:d6:d1:c6:60:61:6d:71:bd:bd:ff:79:85:f3:cd:37:
         89:58:49:43:9e:22:8c:80:4d:ff:8c:ae:58:fa:d4:7d:f9:74:
         c2:7b:0f:db:3a:b7:23:65:e7:cd:31:95:23:14:02:3d:b2:d1:
         70:42:e3:96:b1:75:d8:df:22:42:53:69:45:78:45:40:a9:ec:
         0e:12:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:51 2026 by rpki-client