Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa
File:                     3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          D+YK3wIXhlEzRz7xfyGBFbI75adsbp962KGAVJwIErE=
Subject key identifier:   80:57:1E:B7:D7:EA:59:41:2C:42:7B:1A:98:40:61:86:13:C0:A0:53
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       4F03D8036CCCECC74786C9C697CA4327C5552F8A
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 02:30:35 +0000
ROA not before:           Sun 03 May 2026 02:25:35 +0000
ROA not after:            Sun 02 May 2027 02:30:35 +0000
asID:                     4787
IP address blocks:        175.158.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:03:d8:03:6c:cc:ec:c7:47:86:c9:c6:97:ca:43:27:c5:55:2f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:35 2026 GMT
            Not After : May  2 02:30:35 2027 GMT
        Subject: CN=80571EB7D7EA59412C427B1A9840618613C0A053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:af:b0:39:41:8c:7f:32:a4:79:24:ed:dc:
                    08:20:7a:5d:4d:8f:08:e0:b4:bd:44:fc:0e:72:d9:
                    fc:9e:72:ce:73:2c:54:4c:02:e0:27:f4:ed:4d:41:
                    da:c3:be:c7:89:e0:29:97:cb:f6:66:92:5e:d6:7d:
                    c5:a6:8a:84:2f:f9:94:85:02:1d:32:2a:1d:a5:8c:
                    5f:5a:ab:27:38:0b:5a:da:49:40:df:1b:76:0a:af:
                    2b:08:03:ed:77:a8:5a:85:70:84:08:f5:47:d9:a6:
                    26:86:74:b9:b1:c8:05:7f:62:f1:39:be:aa:9e:03:
                    89:46:fb:b7:b8:97:96:c6:bb:d2:5b:3e:db:08:bf:
                    f1:ff:b4:85:50:f7:95:57:b8:b2:2d:2f:18:8e:a6:
                    4f:65:e9:e0:5c:15:94:48:e6:ce:db:ae:ee:e5:ab:
                    24:3b:3a:02:e2:c2:aa:db:e9:70:25:a3:8c:45:c9:
                    30:62:ec:6e:6e:e4:d6:39:66:7b:71:29:8a:28:7f:
                    12:9d:fd:78:40:85:89:7d:86:64:1e:c4:b6:04:14:
                    1b:1f:b3:4a:7d:de:64:f4:f0:d3:10:0f:81:db:8e:
                    0f:a8:a3:85:f2:c1:82:53:2e:9b:f4:5b:cd:33:0c:
                    8d:b4:f7:f6:bd:e9:5f:14:b9:f1:95:20:53:7a:aa:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:1E:B7:D7:EA:59:41:2C:42:7B:1A:98:40:61:86:13:C0:A0:53
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:a8:51:bc:50:a5:48:69:70:ec:ec:16:fb:df:d6:f4:cc:
         88:bf:50:c5:86:1e:40:02:9b:e5:93:e2:8f:c9:3a:79:39:f3:
         6f:30:00:1a:56:ac:b5:c6:5f:2b:68:f5:86:79:18:b6:41:89:
         f4:90:36:3b:57:f9:6d:86:c7:39:60:46:97:3f:cc:db:d1:95:
         8f:93:38:08:15:8b:99:51:30:34:0f:fc:05:09:b7:14:cf:6f:
         fb:72:55:af:9a:a3:8f:75:da:2c:d3:8d:fb:d3:20:65:6d:33:
         0c:13:2c:86:bb:07:b5:11:3c:e3:73:08:31:47:0e:1d:14:eb:
         0c:0f:89:a5:da:d1:e5:db:b4:20:49:38:29:e9:f4:d0:23:45:
         5a:7d:e8:5c:bc:ef:03:ab:64:8f:1a:c2:0d:80:1a:a0:e5:2f:
         94:31:c4:82:82:f9:a9:b3:51:88:7f:b6:31:43:b2:a2:3a:25:
         4f:fc:e4:2a:91:13:fd:21:5d:fb:b1:6f:9d:81:3e:8e:1a:29:
         1e:e8:dd:9e:a2:fd:6d:5b:e8:5d:db:80:a8:b1:e8:93:15:77:
         84:86:70:d3:c4:d0:f4:da:ee:f3:eb:c4:28:c1:3f:db:48:26:
         a5:8a:7b:91:d3:25:f7:da:a4:d7:9c:1c:d0:2d:a1:fc:e4:41:
         e9:57:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:25 2026 by rpki-client