Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa
File:                     3135372e36362e35362e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=
Subject key identifier:   92:E7:22:DB:2B:99:BB:F7:79:1D:60:AD:55:F2:EC:C1:F1:21:31:FE
Certificate issuer:       /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
Certificate serial:       019EB1E66EB5AEAAA5F7A686FC46AD3C448D22E0
Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 02:17:37 +0000
ROA not before:           Sun 03 May 2026 02:12:37 +0000
ROA not after:            Sun 02 May 2027 02:17:37 +0000
asID:                     58477
IP address blocks:        157.66.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b1:e6:6e:b5:ae:aa:a5:f7:a6:86:fc:46:ad:3c:44:8d:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
        Validity
            Not Before: May  3 02:12:37 2026 GMT
            Not After : May  2 02:17:37 2027 GMT
        Subject: CN=92E722DB2B99BBF7791D60AD55F2ECC1F12131FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:16:02:86:ab:45:7b:dc:48:bc:05:4e:a0:
                    00:8d:32:1d:ac:95:2f:ca:9c:6d:d3:7f:7b:af:94:
                    0c:68:2f:98:83:69:7c:21:1e:db:a8:40:c7:31:74:
                    e5:f4:64:bd:71:16:f4:07:9f:5d:2b:8e:41:d6:a9:
                    82:1c:26:2b:60:f1:4d:b6:a5:ba:7a:55:2f:f2:73:
                    0b:3a:9c:47:e6:a4:c1:9c:ff:af:8a:e0:75:cb:21:
                    a4:eb:01:95:bf:28:a4:b9:fd:12:a4:fc:a1:bd:59:
                    fe:3d:b4:32:f2:bb:85:88:e5:77:77:3b:28:54:f5:
                    a7:9a:fb:b8:ae:ac:ed:43:96:30:84:33:5d:fa:e8:
                    69:a5:97:08:0b:4c:4d:b5:7a:fb:7c:5a:88:21:4b:
                    8d:fe:61:0d:5f:63:49:96:95:1b:56:74:d6:08:55:
                    bb:0e:a0:6a:bc:7e:76:04:99:f6:52:90:2b:74:32:
                    cd:93:13:d6:63:f4:08:a4:5d:16:6a:6a:0e:72:99:
                    8f:c0:b5:aa:fc:a9:cd:56:27:6a:39:b2:af:50:66:
                    f1:5f:68:b2:01:d0:d3:40:a6:a9:9d:28:ac:81:14:
                    6a:a4:00:14:00:be:86:52:60:54:23:b9:fd:f8:68:
                    c5:17:73:31:1b:9f:f7:cb:fc:5e:79:6d:08:6a:cf:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E7:22:DB:2B:99:BB:F7:79:1D:60:AD:55:F2:EC:C1:F1:21:31:FE
            X509v3 Authority Key Identifier:
                keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:03:16:b6:dd:c5:47:56:e1:c0:5b:01:1d:00:e1:d5:17:
         0a:c4:d6:68:be:89:d1:e5:dd:29:17:d6:7a:a6:0a:c8:4f:75:
         f2:b2:4c:10:c4:b7:88:8a:af:7c:4b:5c:8b:a5:f4:2a:b1:15:
         10:a6:6d:e7:b2:80:d4:91:2c:53:63:0a:96:ab:67:dc:7e:da:
         23:13:f9:1c:20:90:a8:44:87:73:6e:88:d5:7a:36:36:02:50:
         b5:0d:6a:e3:b0:41:40:7b:08:97:ad:25:05:22:5c:b8:39:92:
         97:70:19:05:7f:1a:9d:e9:3f:e2:50:18:46:76:9d:13:ec:db:
         3f:17:bb:13:64:3c:32:03:6d:f6:40:cc:a0:b3:68:64:24:72:
         ab:5c:b6:96:45:fc:0e:60:25:20:70:18:99:92:18:f8:e6:98:
         77:35:18:05:a0:b9:cd:01:e4:3a:ae:4a:24:b3:dc:bf:24:83:
         ca:cf:28:2b:4a:ba:fa:9a:05:02:52:74:d7:81:9e:dc:2c:91:
         2c:63:67:1d:00:4c:0e:bc:6f:b1:63:f8:63:2f:7b:86:38:b3:
         2a:8a:ef:4a:c8:45:36:b6:51:db:d2:2c:34:ba:c2:7e:48:f1:
         59:bd:84:16:49:26:53:38:8c:8e:b3:ed:44:a9:07:69:10:66:
         ee:0f:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:24 2026 by rpki-client