Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa
File:                     3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          FNJq44/bzzX1K9H0JbSrPSxG07Zm0h8xrtnvE0fljbw=
Subject key identifier:   9E:A9:11:88:B4:35:91:1D:2C:83:96:60:49:8F:8C:39:B0:4C:EB:C8
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       3B9F117B3E33EE45E1C68793BDC98360D822419F
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:30:40 +0000
ROA not before:           Sun 03 May 2026 02:25:40 +0000
ROA not after:            Sun 02 May 2027 02:30:40 +0000
asID:                     135478
IP address blocks:        175.158.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9f:11:7b:3e:33:ee:45:e1:c6:87:93:bd:c9:83:60:d8:22:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:40 2026 GMT
            Not After : May  2 02:30:40 2027 GMT
        Subject: CN=9EA91188B435911D2C839660498F8C39B04CEBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:a6:da:98:07:b5:92:b2:9f:e9:64:d8:cf:
                    34:a8:eb:37:d8:a0:b3:06:3a:30:d2:c5:f3:5e:5c:
                    52:be:e7:18:ff:57:a2:3c:ca:7a:9d:a3:a5:40:22:
                    d1:dc:45:ac:a8:a9:f3:43:03:e1:07:d5:3f:b4:92:
                    ca:6d:29:bb:d7:09:fc:78:72:0d:bd:a9:c6:39:f4:
                    f2:20:18:82:00:b4:b7:a8:9c:b1:7a:6c:97:f3:de:
                    63:c0:b6:b4:9d:18:9b:6c:41:30:af:65:02:68:43:
                    f6:b6:0f:af:3c:06:63:65:f1:06:e6:d6:31:0d:2a:
                    15:64:87:99:ab:a7:7b:ac:6f:2a:00:f5:b8:f2:70:
                    b0:3a:b4:ff:1d:f1:cd:83:70:dd:1b:40:4a:53:5c:
                    2d:89:a1:16:19:46:b4:51:c6:85:9f:d3:37:ab:a5:
                    8f:be:78:93:a4:95:21:63:63:a6:01:54:f5:08:cb:
                    d3:52:31:c0:c2:ab:01:5a:95:55:21:66:36:24:a6:
                    c5:5f:74:82:68:d9:5c:8a:f0:e9:ef:38:ae:08:d9:
                    f7:93:3e:c4:4f:e8:ed:e1:09:b6:5e:81:51:fe:df:
                    4b:f3:f5:23:7b:39:d7:18:54:09:3e:b6:06:83:c6:
                    c9:b5:69:a2:2d:2e:ac:c7:a8:7d:83:cb:c7:0a:51:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:11:88:B4:35:91:1D:2C:83:96:60:49:8F:8C:39:B0:4C:EB:C8
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:12:51:d6:71:20:43:76:63:b9:d9:c2:56:b9:07:c1:de:9c:
         7d:90:f8:ae:9e:51:6b:b1:af:b1:9e:85:fe:40:ea:f7:3e:00:
         ec:10:3e:a3:e9:aa:bb:11:e1:02:83:a5:d2:b2:1a:78:b2:5c:
         bc:e0:9f:4e:f9:e6:93:90:30:68:1b:75:c3:cc:b4:76:09:23:
         95:6a:d7:be:94:e9:da:b7:c9:99:1d:d6:b9:b6:a8:32:7f:b5:
         f8:a0:8b:71:3a:07:43:37:68:74:d5:af:8e:d6:7b:44:b8:ed:
         ee:6b:3c:ee:46:30:6f:82:59:33:d6:ed:15:59:35:48:54:2a:
         f7:24:b9:e1:c9:77:24:67:24:9a:95:0f:af:af:61:42:1f:12:
         8f:26:ca:91:7a:cc:43:a8:72:b6:9d:96:5f:c5:0b:dc:b2:ea:
         ba:73:e5:2c:e8:75:d9:b1:23:ab:26:98:30:b0:b8:e7:54:c0:
         d9:f6:19:66:d9:61:95:00:66:ed:ac:e3:a4:54:d0:ec:86:6f:
         04:92:ba:14:81:6b:3a:f7:5a:bb:42:b6:72:50:9b:78:ef:c2:
         2f:ad:90:52:70:8f:04:a2:8c:51:0d:3c:34:2b:ff:21:bd:9d:
         8a:c8:39:9c:a9:f5:2b:78:76:89:b2:5a:42:ba:17:e5:c8:29:
         e4:4c:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:36 2026 by rpki-client