Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa
File:                     3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          WqIjWGpeURTb5I09s6CiEJfrBSEVzJ6dkMvn+3bSDOQ=
Subject key identifier:   14:56:D9:1E:55:54:F2:31:0C:C4:70:77:A1:F8:3A:A4:8E:82:F5:05
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       402C0221FA2F9979256A5FD8EE02F9BB9137F439
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:30 +0000
ROA not before:           Sun 03 May 2026 02:22:30 +0000
ROA not after:            Sun 02 May 2027 02:27:30 +0000
asID:                     63859
IP address blocks:        158.140.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2c:02:21:fa:2f:99:79:25:6a:5f:d8:ee:02:f9:bb:91:37:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:30 2026 GMT
            Not After : May  2 02:27:30 2027 GMT
        Subject: CN=1456D91E5554F2310CC47077A1F83AA48E82F505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:1f:5e:e9:ea:f5:31:ea:5a:87:8a:04:42:
                    1f:a4:2c:bb:e7:a2:cf:ea:60:51:7d:18:d0:a7:43:
                    c1:92:e3:8d:52:b3:49:e8:ae:1c:36:93:a5:14:62:
                    cb:67:00:6f:e4:b6:1a:8a:8a:b7:ce:f1:e5:e8:57:
                    02:18:62:68:c8:20:8a:12:1f:0f:79:06:dc:20:bd:
                    6a:4d:59:f7:77:b5:af:7a:8a:4a:ce:dc:2d:6c:81:
                    1b:90:67:7c:b5:cb:2c:c4:23:3d:a6:47:f8:0f:ff:
                    50:34:88:f2:51:8a:01:aa:5d:5c:41:76:4a:c7:43:
                    7c:11:94:e7:8b:61:9b:07:7b:c6:b8:d0:a9:25:1b:
                    ff:aa:46:49:8d:8a:f0:8c:51:34:e7:45:ee:a8:32:
                    64:ac:bf:2a:c0:07:ef:e8:64:86:24:75:f5:e3:c7:
                    8c:2a:1c:1e:53:6f:5a:1d:ca:d3:51:f9:a0:f8:0f:
                    da:7e:53:05:63:95:35:fd:11:9f:3f:8d:d2:66:cc:
                    16:43:09:7f:8f:27:60:b0:10:80:74:b9:eb:f5:bd:
                    1e:f6:58:a4:0c:1d:bc:b1:81:a6:6a:6e:7e:46:b6:
                    bd:65:1a:60:0d:b2:e6:b5:97:4a:bb:e5:db:9d:53:
                    a0:df:09:2c:c3:f6:7c:ef:3a:de:9c:6b:2e:d7:05:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:D9:1E:55:54:F2:31:0C:C4:70:77:A1:F8:3A:A4:8E:82:F5:05
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137352e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.140.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:1f:ab:5d:8f:51:98:60:16:2d:7f:84:aa:56:c1:c7:29:
         39:18:5d:58:1d:67:30:76:e2:c6:f1:49:33:81:ae:e0:fd:2b:
         6d:bf:b1:ba:2a:79:02:e6:bc:68:13:43:ba:fb:6c:d7:fe:9c:
         c2:f5:68:d0:9c:7a:37:a9:24:b6:63:03:99:e5:10:b5:cb:73:
         19:36:79:0c:54:74:06:8c:ca:4c:de:3c:65:03:f3:36:20:6b:
         ed:30:41:8f:13:a0:f7:62:87:0c:b8:95:2e:5a:61:0f:34:15:
         4f:97:d5:65:90:74:35:26:b8:06:04:2c:32:9e:a1:ff:40:fe:
         9d:af:31:eb:eb:c7:15:66:da:8f:76:70:5f:42:c7:04:69:f6:
         ad:61:5c:c8:ef:9d:8b:57:11:95:e3:dd:b0:ec:f6:ea:85:42:
         20:84:c0:a3:f2:81:dd:e6:ff:58:7f:2d:39:da:f1:5a:3b:70:
         d2:d1:25:57:37:4e:b3:1b:84:80:fe:5a:8b:f7:97:42:f5:53:
         b0:e2:34:52:b9:27:fd:61:03:84:02:e6:98:fd:52:6a:3e:05:
         85:cb:5d:cd:54:7c:ba:05:aa:5b:cd:74:f0:aa:30:07:2a:15:
         ef:b3:d1:40:e0:01:da:fd:f4:1e:df:31:cb:13:09:0a:bd:87:
         6e:cf:87:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:41 2026 by rpki-client