Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa
File:                     3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (raw, json)
Hash identifier:          f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=
Subject key identifier:   D6:58:87:9B:40:E8:16:63:12:8F:F1:11:88:78:90:81:E7:F3:59:48
Certificate issuer:       /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Certificate serial:       492292D544533B06DA061BE7EC2EF3DDA36EF88E
Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa
Signing time:             Sun 03 May 2026 02:25:43 +0000
ROA not before:           Sun 03 May 2026 02:20:43 +0000
ROA not after:            Sun 02 May 2027 02:25:43 +0000
asID:                     152441
IP address blocks:        157.66.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
                          rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:22:92:d5:44:53:3b:06:da:06:1b:e7:ec:2e:f3:dd:a3:6e:f8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
        Validity
            Not Before: May  3 02:20:43 2026 GMT
            Not After : May  2 02:25:43 2027 GMT
        Subject: CN=D658879B40E81663128FF11188789081E7F35948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:a7:a5:0e:85:c7:a6:90:14:ee:3f:9f:8e:
                    f1:eb:1a:a5:12:5d:96:ef:f8:d7:6a:ff:1b:3a:a4:
                    58:bc:03:49:4d:69:c8:44:d0:fd:2a:60:f6:aa:3d:
                    ba:34:c7:fc:2c:38:34:c0:a2:6f:a0:ec:da:09:0d:
                    33:c0:49:11:54:94:bf:70:65:ea:77:ff:3a:18:c3:
                    5b:eb:61:24:46:7c:52:01:c0:a8:32:10:80:3c:dc:
                    20:d9:48:0a:b1:b7:ed:d2:ec:59:b0:a6:aa:97:fc:
                    d6:45:2a:84:3e:2c:0d:7f:d6:8e:b9:b8:e9:5f:35:
                    ff:a3:30:e7:b7:d4:49:e6:2f:ef:94:fb:5e:f3:cc:
                    46:49:25:20:5f:e4:d5:b2:2e:79:6f:5d:35:4f:bf:
                    50:0b:26:1f:38:4e:8e:1b:68:56:4f:0f:00:7a:b0:
                    e4:e5:5b:a0:49:88:8f:6e:22:c3:ed:64:a8:17:bf:
                    43:c0:33:ec:99:b5:91:ca:80:e0:c6:7b:93:b2:e4:
                    d3:4a:16:2f:4a:f7:a6:a6:46:a8:c0:7e:5a:5b:a3:
                    e8:27:79:d5:72:26:d3:32:bc:e6:68:07:a8:e1:36:
                    3b:51:f0:e1:4c:32:69:1e:19:80:fe:d1:51:bd:3e:
                    c4:b0:d6:5b:8d:7e:a0:21:8e:63:25:41:08:98:ff:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:58:87:9B:40:E8:16:63:12:8F:F1:11:88:78:90:81:E7:F3:59:48
            X509v3 Authority Key Identifier:
                keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31382e302f32342d3234203d3e20313532343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:67:3f:86:f3:66:dc:5b:94:84:47:e1:2d:3c:4f:3b:37:14:
         1c:61:c7:7d:d1:03:7c:93:86:ca:f2:e4:ab:34:4b:f1:71:4b:
         88:86:38:d6:db:b1:a4:48:86:33:f8:5c:43:c1:34:ea:6b:7d:
         0e:6b:82:51:87:a9:8f:2f:a8:3c:9c:3f:e4:05:73:19:23:50:
         e9:2b:1b:c7:bd:17:e7:f5:50:e9:0a:ca:f6:9e:06:a6:40:74:
         7e:b3:8a:2b:82:0a:9a:a8:9b:d6:7d:a8:31:98:44:5b:05:85:
         6a:7a:1d:db:bc:0e:6b:80:73:7b:13:c6:91:0f:09:82:cb:42:
         7f:da:55:e7:02:4f:24:55:c4:65:43:2c:9a:64:a7:91:b9:44:
         41:96:64:6a:46:ac:0b:5f:3b:25:bf:58:eb:7e:d1:1c:30:42:
         9b:b6:bf:79:ff:4d:2c:be:23:1b:70:65:f7:9b:e3:d6:b2:42:
         28:d1:8f:c7:2f:36:0b:57:28:36:02:c3:7f:9c:27:ee:e3:be:
         26:cf:14:a5:49:cd:dc:81:3e:12:ba:38:c4:2f:be:66:81:61:
         39:9c:18:6c:ca:9b:9f:e9:c5:f6:56:d8:14:66:ce:9e:e7:58:
         76:ce:3f:b2:04:8e:53:56:32:87:8a:76:a1:38:09:cc:89:8f:
         8f:f7:37:cf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSSKS1URTOwbaBhvn7C7z3aNu+I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVE
MDcxN0Y4QTAeFw0yNjA1MDMwMjIwNDNaFw0yNzA1MDIwMjI1NDNaMDMxMTAvBgNV
BAMTKEQ2NTg4NzlCNDBFODE2NjMxMjhGRjExMTg4Nzg5MDgxRTdGMzU5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hKelDoXHppAU7j+fjvHrGqUS
XZbv+Ndq/xs6pFi8A0lNachE0P0qYPaqPbo0x/wsODTAom+g7NoJDTPASRFUlL9w
Zep3/zoYw1vrYSRGfFIBwKgyEIA83CDZSAqxt+3S7FmwpqqX/NZFKoQ+LA1/1o65
uOlfNf+jMOe31EnmL++U+17zzEZJJSBf5NWyLnlvXTVPv1ALJh84To4baFZPDwB6
sOTlW6BJiI9uIsPtZKgXv0PAM+yZtZHKgODGe5Oy5NNKFi9K96amRqjAflpbo+gn
edVyJtMyvOZoB6jhNjtR8OFMMmkeGYD+0VG9PsSw1luNfqAhjmMlQQiY/4CTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1liHm0DoFmMSj/ERiHiQgefzWUgwHwYDVR0j
BBgwFoAUd+n407zPU+cWZon7LTsmxdBxf4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNC
Q0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVEMDcxN0Y4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83N0U5RjhEM0JDQ0Y1M0U3MTY2Njg5RkIyRDNCMjZDNUQwNzE3
RjhBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM3NDQ2NTYzLTA5YmMtNDkxYi04
ZmI5LWZkMzlmMDkxNjY5ZC8wLzMxMzUzNzJlMzYzNjJlMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CEjANBgkqhkiG
9w0BAQsFAAOCAQEAkWc/hvNm3FuUhEfhLTxPOzcUHGHHfdEDfJOGyvLkqzRL8XFL
iIY41tuxpEiGM/hcQ8E06mt9DmuCUYepjy+oPJw/5AVzGSNQ6Ssbx70X5/VQ6QrK
9p4GpkB0frOKK4IKmqib1n2oMZhEWwWFanod27wOa4BzexPGkQ8JgstCf9pV5wJP
JFXEZUMsmmSnkblEQZZkakasC187Jb9Y637RHDBCm7a/ef9NLL4jG3Bl95vj1rJC
KNGPxy82C1coNgLDf5wn7uO+Js8UpUnN3IE+Ero4xC++ZoFhOZwYbMqbn+nF9lbY
FGbOnudYds4/sgSOU1Yyh4p2oTgJzImPj/c3zw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:20 2026 by rpki-client