Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35392e302f32342d3234203d3e203633383633.roa
File:                     3135372e36362e35392e302f32342d3234203d3e203633383633.roa (raw, json)
Hash identifier:          xBh74co4G4oy4kEOH1+s92iqFVlcazWJc0LznYHJ110=
Subject key identifier:   5A:0F:3D:FE:CB:54:C6:2D:5F:BF:6A:55:46:C3:95:B1:EE:AD:30:8A
Certificate issuer:       /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial:       776DE3A6313E32AC61996E8B81C18F6E07971779
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35392e302f32342d3234203d3e203633383633.roa
Signing time:             Sun 03 May 2026 02:30:21 +0000
ROA not before:           Sun 03 May 2026 02:25:21 +0000
ROA not after:            Sun 02 May 2027 02:30:21 +0000
asID:                     63863
IP address blocks:        157.66.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
                          rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6d:e3:a6:31:3e:32:ac:61:99:6e:8b:81:c1:8f:6e:07:97:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
        Validity
            Not Before: May  3 02:25:21 2026 GMT
            Not After : May  2 02:30:21 2027 GMT
        Subject: CN=5A0F3DFECB54C62D5FBF6A5546C395B1EEAD308A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:68:6a:a4:2d:77:5e:f9:04:71:0c:ae:f4:
                    44:15:83:4d:8b:66:ed:1e:e9:9d:53:d5:5a:f3:c8:
                    2e:b2:52:64:62:a6:d4:f1:e5:a8:06:89:9a:bf:57:
                    78:0b:d5:16:54:06:2d:9f:d9:f4:37:31:05:fb:32:
                    d1:9e:f6:68:b5:5a:d9:34:0b:2e:4b:f1:7d:fe:b6:
                    51:2a:67:fc:29:59:e2:87:0b:32:0b:c4:cd:6d:bb:
                    09:f1:05:15:3e:9d:e9:95:95:5e:c5:68:27:b0:5a:
                    cd:5d:4e:ee:27:7a:11:81:5a:7c:69:c1:9d:bf:07:
                    57:5f:68:b2:40:72:44:c0:79:93:17:38:8e:5b:fb:
                    b4:b2:15:e0:f4:3b:cd:52:f4:14:ac:84:5c:a5:2e:
                    a8:02:71:d9:87:b7:0b:86:fa:c7:f4:ad:14:26:4c:
                    74:f6:e6:37:90:b5:b1:34:e8:54:fa:52:e2:50:51:
                    85:1b:18:21:40:34:9a:44:c0:0d:3a:89:5f:31:27:
                    04:1f:44:de:ec:e3:e0:31:a4:77:92:a1:73:8a:96:
                    f9:e2:e5:b3:f9:ef:bd:5a:a7:0c:17:48:bb:a4:10:
                    22:a8:64:49:39:c6:30:e4:ad:ff:ac:06:72:2d:47:
                    00:22:6a:d0:a1:ae:0f:9b:2d:f8:79:ee:0c:38:16:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:3D:FE:CB:54:C6:2D:5F:BF:6A:55:46:C3:95:B1:EE:AD:30:8A
            X509v3 Authority Key Identifier:
                keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35392e302f32342d3234203d3e203633383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:45:2a:43:ae:2f:d3:55:9c:7c:f8:30:61:ac:a8:28:21:a0:
         89:55:05:df:4a:38:3d:55:9c:b3:92:ac:12:1a:03:28:c6:cd:
         6b:93:3a:42:69:87:5c:0e:c5:05:c3:bf:07:95:76:3f:1e:59:
         f1:57:d4:e5:22:f2:6b:8f:85:79:da:6d:b9:12:5f:bf:6b:2f:
         c7:c7:45:c5:fe:88:8e:db:67:71:aa:c1:3e:a7:de:ba:b8:c1:
         5b:69:6c:e4:7a:c0:78:23:60:6b:1e:18:37:98:4e:96:ad:05:
         50:59:5b:52:7e:39:0c:2d:b5:2a:a5:c7:d4:5a:3c:81:6d:10:
         84:36:3d:ae:f5:c9:af:9d:f9:90:d0:9b:47:d6:a0:3d:b6:79:
         03:74:7a:99:c7:66:cf:aa:91:89:f4:5d:d2:64:05:b3:7c:12:
         48:32:ee:fd:01:7f:58:65:78:96:c8:31:51:3b:cb:a4:d8:ef:
         b5:a5:e1:f4:13:8a:0e:39:a4:80:eb:c4:27:32:ef:b9:a5:f7:
         19:42:f2:0b:21:b7:a4:2b:6d:d7:de:77:2c:65:d6:fc:0e:d0:
         63:43:e4:fe:c9:86:b8:dc:50:53:32:02:d8:6b:f4:df:2c:a4:
         d1:ed:0f:ef:e7:9d:27:57:09:0e:7a:81:98:f6:b3:75:72:99:
         2f:f3:8b:99
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUd23jpjE+MqxhmW6LgcGPbgeXF3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBMDA0N0VBOEU0RENFOTJFQkM1NzJFRThBMTFEMTdD
NkI2NDg3MjAeFw0yNjA1MDMwMjI1MjFaFw0yNzA1MDIwMjMwMjFaMDMxMTAvBgNV
BAMTKDVBMEYzREZFQ0I1NEM2MkQ1RkJGNkE1NTQ2QzM5NUIxRUVBRDMwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs12hqpC13XvkEcQyu9EQVg02L
Zu0e6Z1T1VrzyC6yUmRiptTx5agGiZq/V3gL1RZUBi2f2fQ3MQX7MtGe9mi1Wtk0
Cy5L8X3+tlEqZ/wpWeKHCzILxM1tuwnxBRU+nemVlV7FaCewWs1dTu4nehGBWnxp
wZ2/B1dfaLJAckTAeZMXOI5b+7SyFeD0O81S9BSshFylLqgCcdmHtwuG+sf0rRQm
THT25jeQtbE06FT6UuJQUYUbGCFANJpEwA06iV8xJwQfRN7s4+AxpHeSoXOKlvni
5bP5771apwwXSLukECKoZEk5xjDkrf+sBnItRwAiatChrg+bLfh57gw4FmivAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUWg89/stUxi1fv2pVRsOVse6tMIowHwYDVR0j
BBgwFoAU7KAEfqjk3OkuvFcu6KEdF8a2SHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDZiMDVmMzYtZTE3NC00ZGFkLWJjMmEtMDg5MjZjNWRkMDQ2LzAvRUNBMDA0N0VB
OEU0RENFOTJFQkM1NzJFRThBMTFEMTdDNkI2NDg3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FQ0EwMDQ3RUE4RTREQ0U5MkVCQzU3MkVFOEExMUQxN0M2QjY0
ODcyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ2YjA1ZjM2LWUxNzQtNGRhZC1i
YzJhLTA4OTI2YzVkZDA0Ni8wLzMxMzUzNzJlMzYzNjJlMzUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQjswDQYJKoZIhvcN
AQELBQADggEBAOFFKkOuL9NVnHz4MGGsqCghoIlVBd9KOD1VnLOSrBIaAyjGzWuT
OkJph1wOxQXDvweVdj8eWfFX1OUi8muPhXnabbkSX79rL8fHRcX+iI7bZ3GqwT6n
3rq4wVtpbOR6wHgjYGseGDeYTpatBVBZW1J+OQwttSqlx9RaPIFtEIQ2Pa71ya+d
+ZDQm0fWoD22eQN0epnHZs+qkYn0XdJkBbN8Ekgy7v0Bf1hleJbIMVE7y6TY77Wl
4fQTig45pIDrxCcy77ml9xlC8gsht6Qrbdfedyxl1vwO0GND5P7JhrjcUFMyAthr
9N8spNHtD+/nnSdXCQ56gZj2s3VymS/zi5k=
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:59 2026 by rpki-client