Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa
File:                     3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          txoedPttvMQlNctC1MXvyJ5aXw06wgKSMdukg0qgTgI=
Subject key identifier:   53:33:82:75:3F:86:05:77:32:D8:E4:DD:C7:D2:CA:AE:78:E0:23:F5
Certificate issuer:       /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial:       A1BCB490DDDAFCEDDF58CD4BB875C12E779CA3
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa
Signing time:             Sun 03 May 2026 02:27:29 +0000
ROA not before:           Sun 03 May 2026 02:22:29 +0000
ROA not after:            Sun 02 May 2027 02:27:29 +0000
asID:                     63859
IP address blocks:        158.140.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
                          rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:bc:b4:90:dd:da:fc:ed:df:58:cd:4b:b8:75:c1:2e:77:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
        Validity
            Not Before: May  3 02:22:29 2026 GMT
            Not After : May  2 02:27:29 2027 GMT
        Subject: CN=533382753F86057732D8E4DDC7D2CAAE78E023F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:43:5d:c7:f1:bc:94:01:01:da:11:ea:c8:
                    6c:50:71:8c:83:7c:81:ce:09:96:0e:a8:2e:83:8d:
                    87:0b:a4:06:0f:42:a1:ba:5c:72:e7:19:6f:db:5c:
                    df:f4:a0:32:fb:3b:5d:78:7c:4b:e4:a0:d2:ad:f8:
                    11:2d:8d:96:fd:a9:5d:0a:4d:9a:94:fe:6c:be:9a:
                    ac:a9:7a:64:80:83:d6:45:27:3a:14:d7:8b:72:9d:
                    39:b4:e1:a9:f5:43:86:ad:90:e3:87:10:7e:11:2d:
                    42:2f:0d:cc:19:4e:17:a3:b7:20:62:e1:35:83:09:
                    cb:7f:39:9b:6f:47:6e:7a:e9:c3:c5:88:e2:af:d9:
                    7d:ea:ae:14:15:5f:4c:27:23:84:fa:95:da:32:b2:
                    6a:bf:70:e0:f8:48:70:da:51:20:03:c0:f6:cc:67:
                    71:13:b5:ad:fc:b8:22:bf:4d:7c:34:95:4b:ca:73:
                    c6:e3:0c:51:ea:76:95:88:8e:cd:f4:8d:af:ca:0d:
                    68:bc:b5:89:5f:c7:25:2b:9f:8f:b9:d0:9c:20:10:
                    26:99:a2:3b:db:ab:61:3a:f0:69:5d:e5:44:10:f4:
                    96:c1:17:84:13:15:d4:42:82:fc:70:c5:e9:cc:06:
                    97:45:e8:87:4a:4b:55:40:fc:aa:39:df:40:fd:ca:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:82:75:3F:86:05:77:32:D8:E4:DD:C7:D2:CA:AE:78:E0:23:F5
            X509v3 Authority Key Identifier:
                keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.140.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:20:e2:27:18:08:d1:86:9e:b5:32:93:5a:2a:0e:86:3c:
         89:3a:1f:7f:c0:16:13:db:39:cc:be:2d:83:6a:db:47:4d:a2:
         44:e9:59:9c:d5:2e:6b:43:97:05:ee:5c:33:fe:d6:cd:5f:7b:
         3a:49:5b:f1:ab:3c:50:ee:37:34:9d:62:f2:ee:1d:35:30:8f:
         aa:cd:e8:7c:a3:c0:69:40:84:8b:5d:d7:48:43:15:4d:8f:a4:
         8d:dc:7f:b8:70:4b:e4:44:2a:a6:96:b6:ad:43:53:3e:5e:49:
         8f:29:9f:6e:1a:33:9d:75:49:fc:e3:8b:13:51:96:42:f9:f5:
         e2:5d:de:da:15:47:1b:21:fa:f1:e8:6c:2b:60:00:0d:a9:bf:
         90:b2:e1:38:af:54:2b:00:af:71:45:55:5b:28:ac:03:a5:10:
         be:4f:91:e5:71:25:a3:d5:43:fb:5a:76:3b:80:ac:72:ef:ce:
         5d:16:02:76:25:3d:65:fd:0e:37:ce:7b:84:df:b9:c3:5c:f0:
         0a:3d:22:25:a9:d4:36:3d:4c:52:e2:f9:65:b6:0c:ed:24:d1:
         8a:a9:01:ad:1e:96:1a:0c:59:85:d5:af:b9:85:d1:cd:e2:b7:
         be:71:59:12:9b:cf:75:58:52:54:59:4f:5a:b1:ca:53:69:5b:
         36:1c:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:23 2026 by rpki-client