Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa
File:                     3135372e36362e35382e302f32332d3233203d3e203633383633.roa (raw, json)
Hash identifier:          UIZ5WPv7k1hpGcTiFHJVpKxY08OSIOQ+IDxbkKabgJw=
Subject key identifier:   26:B0:02:32:F9:1B:BB:57:F6:C9:E2:7F:65:C7:5B:AC:1E:A8:2A:67
Certificate issuer:       /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial:       13E5EEA93FBA44CF3388BB48D50335D63A4173B5
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa
Signing time:             Sun 03 May 2026 02:30:21 +0000
ROA not before:           Sun 03 May 2026 02:25:21 +0000
ROA not after:            Sun 02 May 2027 02:30:21 +0000
asID:                     63863
IP address blocks:        157.66.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
                          rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e5:ee:a9:3f:ba:44:cf:33:88:bb:48:d5:03:35:d6:3a:41:73:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
        Validity
            Not Before: May  3 02:25:21 2026 GMT
            Not After : May  2 02:30:21 2027 GMT
        Subject: CN=26B00232F91BBB57F6C9E27F65C75BAC1EA82A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:d3:d7:64:f5:03:6d:e0:98:69:db:65:cf:
                    45:96:8f:c2:a9:f3:97:29:ca:9c:ce:a5:6c:95:14:
                    f7:0d:59:32:30:72:ae:cb:e8:92:cd:f0:e1:6f:b9:
                    97:66:7c:fb:1f:e1:03:97:aa:0d:85:18:4f:9e:15:
                    8b:35:53:fc:a1:aa:a5:c1:c7:e3:1f:3c:cb:79:36:
                    0a:ba:9d:e0:cb:45:62:9d:bd:e3:ff:68:89:81:9a:
                    cb:37:71:b9:a4:f2:d4:58:ab:c8:52:81:7c:f0:43:
                    92:ae:71:10:ee:ee:df:62:93:60:2b:5c:4e:da:5c:
                    f2:d8:5b:41:26:cf:91:a2:11:30:0b:c2:41:cc:c6:
                    94:5e:23:f2:39:b4:61:cc:99:80:8e:f2:db:64:61:
                    c1:1a:45:9b:2e:e4:4b:b6:13:20:72:34:da:12:65:
                    be:51:9c:96:79:bb:64:87:1b:fd:6e:a9:f5:de:17:
                    fd:81:36:5f:8c:4e:b1:62:1c:36:f3:30:4d:2e:c2:
                    b4:53:51:8c:b4:d5:e4:1e:4e:9b:d9:a3:55:18:1d:
                    b9:85:a5:dd:af:16:08:dc:7d:0e:fb:88:31:e3:fb:
                    bf:3b:f7:1f:21:b8:1e:98:d8:8a:e0:3c:05:94:5a:
                    ee:de:8a:f1:50:db:45:49:7d:e8:26:64:95:7f:77:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B0:02:32:F9:1B:BB:57:F6:C9:E2:7F:65:C7:5B:AC:1E:A8:2A:67
            X509v3 Authority Key Identifier:
                keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:98:84:c2:72:c5:1a:a8:db:10:15:ca:25:63:1f:0a:79:
         a5:80:ef:7c:e1:54:5c:b5:e5:04:b2:11:5d:6b:a4:95:10:54:
         9a:96:eb:f2:cf:4e:09:c4:30:c9:b2:c6:80:a8:ea:8f:e1:a5:
         03:91:f8:55:07:c0:fc:9d:a3:ff:75:37:2f:35:ea:e6:07:e4:
         a5:c7:d8:2f:f4:d2:26:d8:3a:0a:ff:04:eb:a8:d6:df:56:54:
         be:9a:3b:88:58:bb:24:d6:42:69:3b:e1:d8:9f:bf:0a:45:e4:
         5f:d8:48:06:25:1f:72:7e:be:10:db:91:f7:a2:7c:01:17:06:
         88:6c:df:41:45:94:62:90:d5:3f:e9:3e:e5:46:fb:67:85:00:
         bb:0d:a8:91:85:38:9e:e6:dc:cf:21:d4:cd:95:6b:23:52:88:
         7d:94:c1:bb:46:08:b9:f9:49:b4:ae:57:68:91:5b:70:2c:da:
         d2:e3:fb:f7:fa:1c:60:ac:3e:2d:9c:05:8a:d1:72:12:ad:12:
         24:f1:0a:fc:1f:29:6a:14:cf:4a:18:e0:08:af:fc:b5:9a:63:
         32:d7:5a:6e:d0:c2:4a:b4:89:93:ac:4e:e2:ce:5c:fb:46:6a:
         04:fa:9d:76:26:c4:61:2c:83:08:b9:39:10:28:dd:1d:8d:af:
         2e:3f:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:13 2026 by rpki-client