Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31392e302f32342d3234203d3e20313532343431.roa
File:                     3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (raw, json)
Hash identifier:          SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=
Subject key identifier:   C0:A6:60:3B:23:A0:6A:C0:42:D5:A2:76:5E:CE:EE:0B:CE:21:41:67
Certificate issuer:       /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Certificate serial:       65C676AB45284E042946AB75952EC98C7614E2FB
Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31392e302f32342d3234203d3e20313532343431.roa
Signing time:             Sun 03 May 2026 02:25:42 +0000
ROA not before:           Sun 03 May 2026 02:20:42 +0000
ROA not after:            Sun 02 May 2027 02:25:42 +0000
asID:                     152441
IP address blocks:        157.66.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
                          rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c6:76:ab:45:28:4e:04:29:46:ab:75:95:2e:c9:8c:76:14:e2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
        Validity
            Not Before: May  3 02:20:42 2026 GMT
            Not After : May  2 02:25:42 2027 GMT
        Subject: CN=C0A6603B23A06AC042D5A2765ECEEE0BCE214167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:e2:cc:66:ad:63:33:36:7c:b6:86:1e:b7:
                    82:c6:b3:1d:54:5a:16:21:3b:06:2b:5b:97:14:f9:
                    34:2d:e5:43:f6:71:8c:0b:24:6d:43:b2:8c:4a:25:
                    42:c5:d7:54:ad:21:8c:6c:2f:eb:61:d9:af:fe:bb:
                    8e:af:99:96:10:bb:d8:a1:c5:7d:3f:58:84:ec:8c:
                    3a:d9:48:f6:81:de:eb:73:89:ea:39:65:70:4f:8c:
                    f6:37:09:7f:0d:db:81:51:89:06:bb:f4:89:1b:a7:
                    bc:67:e9:3c:90:98:cd:3b:24:19:ab:a9:86:53:d9:
                    36:7b:aa:6c:1c:2f:f7:8f:56:d5:40:3e:5e:72:d6:
                    87:ec:bd:e3:fc:a9:f8:3b:e3:f6:4f:0a:49:15:68:
                    54:ae:d4:45:90:84:64:18:64:01:c5:a1:b0:95:91:
                    10:5b:62:bd:d2:62:c0:7d:69:af:1d:2b:a5:7e:0c:
                    66:4f:c8:15:cf:08:3d:75:aa:82:a6:1f:a0:16:57:
                    39:89:16:25:d8:0d:a7:1f:63:4c:d5:6c:4e:a6:54:
                    1e:86:7f:fb:6f:14:9c:3c:fc:89:2a:1e:66:a4:b9:
                    e6:09:35:e4:90:44:23:b1:e4:ce:4d:1c:03:f8:3f:
                    fe:f9:4e:a6:76:97:9a:97:01:5d:20:28:c2:4a:3e:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:60:3B:23:A0:6A:C0:42:D5:A2:76:5E:CE:EE:0B:CE:21:41:67
            X509v3 Authority Key Identifier:
                keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/3135372e36362e31392e302f32342d3234203d3e20313532343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:7d:fa:57:36:1b:59:54:cc:17:05:70:4d:20:ff:05:be:
         73:76:3d:21:67:1f:e9:b9:7a:d1:da:37:43:48:a8:13:95:b7:
         2e:58:70:65:be:de:4b:af:af:70:54:91:a5:4d:a4:e0:e6:1a:
         8d:9c:61:3a:36:0e:8d:1a:8e:ab:a6:50:15:63:36:29:9e:34:
         38:34:2e:b7:6f:4d:be:4b:0a:f4:14:a9:ff:55:83:7d:47:24:
         61:be:70:44:58:bb:7c:bc:cc:2e:8c:f6:8b:e0:cb:78:37:cb:
         51:60:5e:45:24:d5:be:14:a1:9d:cc:71:05:ad:4a:8f:8a:66:
         fc:5a:59:a6:c7:9d:05:f6:2f:30:1d:b6:8a:a5:d3:33:27:ce:
         03:44:81:4f:b2:1b:4b:50:19:ac:8d:97:a5:13:18:7c:d6:3b:
         cc:89:67:63:43:6e:9d:e0:c3:0c:5f:5d:56:07:d0:f0:30:0f:
         d7:50:0f:3c:28:7a:b6:40:fc:0b:37:ae:0c:c7:d8:83:e1:a7:
         a4:80:06:46:aa:ec:55:0b:5a:62:73:21:00:87:d7:f2:1d:c9:
         f7:81:e6:ab:79:37:15:0d:fe:6f:b3:54:5a:70:ef:3c:65:70:
         dd:fe:02:96:f0:26:39:68:35:5d:54:4a:f6:0a:75:13:cb:ff:
         b3:a4:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:05 2026 by rpki-client