Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa
File:                     3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          cBN4exQ6hTDEWz2y+KP5gXvc6bpBJj+7QGmYaAkLEyc=
Subject key identifier:   CB:AA:6D:DA:8E:98:48:F1:00:D9:DB:5A:4A:76:6C:37:D3:2A:E9:B6
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       1F9E3CEC4669D56133A28F0AAD56EF38F810E050
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:30:38 +0000
ROA not before:           Sun 03 May 2026 02:25:38 +0000
ROA not after:            Sun 02 May 2027 02:30:38 +0000
asID:                     135478
IP address blocks:        175.158.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:3c:ec:46:69:d5:61:33:a2:8f:0a:ad:56:ef:38:f8:10:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:38 2026 GMT
            Not After : May  2 02:30:38 2027 GMT
        Subject: CN=CBAA6DDA8E9848F100D9DB5A4A766C37D32AE9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:14:03:bc:5b:5f:29:e7:6c:42:b5:05:c3:
                    38:42:bf:25:09:37:db:0d:c8:33:d6:51:85:95:d8:
                    ee:2e:16:ea:bc:1c:43:0f:3f:9c:dd:55:c3:2f:49:
                    45:27:6c:3e:03:16:19:de:6f:1b:d5:d1:9e:ab:88:
                    6f:0d:d2:25:30:f4:78:de:6a:a9:ec:42:ee:2d:20:
                    e4:68:af:e6:07:b8:cd:ca:3a:b1:83:ff:fc:99:b3:
                    5b:55:4c:80:e4:eb:a1:33:36:c0:c8:db:e5:9a:9e:
                    d8:ad:be:d2:b7:bf:25:cd:b0:47:88:be:a8:56:e2:
                    4c:a6:a4:d0:e3:aa:bf:a7:99:0d:1c:91:0e:1f:55:
                    95:31:d5:43:e1:8a:2d:47:10:dd:1b:e8:1a:53:55:
                    bf:20:86:2f:e1:75:ce:da:ac:23:d4:e4:ac:35:5d:
                    5c:2a:f8:46:5a:43:58:6c:de:03:c9:73:cd:8b:80:
                    67:98:c6:30:7a:72:d5:a1:f4:fc:a5:c8:ae:9e:9c:
                    a4:8c:3d:2e:7f:c5:31:a6:58:25:eb:09:b4:be:e4:
                    23:03:7c:ec:ef:19:f2:a9:67:f9:f6:3d:51:5b:a1:
                    ee:43:3c:fa:b6:b0:12:0b:d3:41:e7:7a:1b:7c:d0:
                    bd:c1:35:c9:b0:11:2e:4e:ea:22:ff:32:93:10:61:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AA:6D:DA:8E:98:48:F1:00:D9:DB:5A:4A:76:6C:37:D3:2A:E9:B6
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f31392d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:59:72:e8:65:2f:7d:ed:f1:fd:30:e6:f9:00:c0:33:30:
         93:98:41:b4:61:10:78:a0:2b:fe:60:79:fb:a9:9c:56:57:0e:
         77:63:be:af:c4:ed:e0:30:1f:f9:b0:fb:af:0b:8f:56:41:09:
         45:cf:14:66:58:49:19:c3:21:71:51:49:0e:a5:9b:cf:28:a7:
         df:0d:61:ca:13:c0:86:9b:9e:b6:25:5b:d4:d5:09:bf:35:52:
         21:78:b4:96:65:43:fc:8f:c9:42:d4:9d:88:88:73:55:0a:02:
         70:b5:9f:d2:a7:57:ef:9f:22:36:c8:e3:ad:f4:9e:a8:e0:0d:
         30:8e:3e:5b:64:76:ae:38:16:76:26:6d:bb:fb:31:50:a3:fb:
         aa:a1:35:94:01:4f:ec:14:00:78:15:e3:c5:b2:be:a7:a1:25:
         b7:a6:57:51:af:c2:0c:21:7d:36:a9:f1:da:e6:a4:47:c2:af:
         2d:fa:47:62:16:8d:fd:72:bc:5a:90:0e:6a:d3:70:97:33:b9:
         dc:14:fa:d9:97:80:73:db:3d:4c:67:ed:0f:7b:92:9b:a2:7b:
         68:04:03:45:fd:13:e0:33:9f:83:a9:43:aa:fc:0b:b5:78:b1:
         57:b6:c6:b2:27:78:8d:81:c5:18:44:a1:b3:1c:30:35:04:32:
         da:f5:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:04 2026 by rpki-client