Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa
File:                     3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          4ytwFgMzTlLkz27xKaZ6L+uZgH5PcZV5zjlTQDhi7II=
Subject key identifier:   D3:74:B3:AF:75:81:17:90:86:39:27:35:38:04:FB:42:D4:5D:64:27
Certificate issuer:       /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial:       7D3F6F88B9843B1F4B57C50B8F0F5EF1026078F7
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 02:30:39 +0000
ROA not before:           Sun 03 May 2026 02:25:39 +0000
ROA not after:            Sun 02 May 2027 02:30:39 +0000
asID:                     135478
IP address blocks:        175.158.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
                          rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3f:6f:88:b9:84:3b:1f:4b:57:c5:0b:8f:0f:5e:f1:02:60:78:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
        Validity
            Not Before: May  3 02:25:39 2026 GMT
            Not After : May  2 02:30:39 2027 GMT
        Subject: CN=D374B3AF75811790863927353804FB42D45D6427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:97:76:e2:df:76:de:28:1e:0f:a3:07:ac:
                    9b:a5:34:11:21:b1:2e:3d:b9:52:24:40:01:85:b7:
                    a9:7e:87:97:c9:91:62:66:32:46:12:e4:14:b3:43:
                    15:5c:51:8b:dd:b9:ce:fc:5a:5e:d1:e3:4e:ce:47:
                    36:e1:c3:6a:b9:d2:b9:13:5e:9c:22:71:a1:b5:73:
                    5f:df:91:04:ed:61:64:35:ae:3c:07:5a:76:b3:c9:
                    aa:6c:7b:41:3b:43:06:9d:71:e1:af:f7:29:2d:ca:
                    1d:bc:ff:a7:87:7e:52:de:c5:b8:bd:c8:00:50:16:
                    2e:e5:3c:41:2b:ed:8e:a4:45:31:a9:9c:98:95:95:
                    4d:1f:3e:8d:84:70:cb:04:d2:56:c0:21:f5:1e:7e:
                    1f:f6:20:30:3d:87:21:87:e1:b4:db:32:db:e3:d4:
                    8d:c8:78:57:56:9b:09:5d:fa:11:bc:e9:42:fc:d4:
                    fc:7e:65:f9:c7:34:0d:dc:72:33:34:35:7b:bb:0c:
                    8f:83:7d:a7:09:98:31:5c:4d:b9:38:b1:68:32:f7:
                    0b:58:f5:1a:f6:66:7d:70:51:08:59:13:f3:7f:88:
                    50:d7:d0:51:aa:83:7a:05:7a:bd:63:3b:6b:92:6e:
                    d2:8e:5c:2c:5e:b5:20:06:be:72:06:5a:cc:68:a7:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:74:B3:AF:75:81:17:90:86:39:27:35:38:04:FB:42:D4:5D:64:27
            X509v3 Authority Key Identifier:
                keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e34382e302f32302d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:73:0f:6a:ba:ad:75:86:12:b0:97:f2:60:e1:48:f8:46:50:
         06:9f:bf:03:d4:ca:44:22:ab:04:3f:ef:2b:bc:b9:2c:fe:1b:
         69:bc:80:49:c8:70:eb:ea:00:b9:bf:81:c1:0e:f2:ac:07:e1:
         01:7a:04:71:47:25:c0:aa:59:16:cf:0f:37:4b:34:ac:3d:80:
         a8:d3:13:a9:6d:18:1b:c5:4b:c8:2b:80:f7:3f:29:28:f9:18:
         fd:61:1a:a8:22:2a:02:91:f2:66:77:c3:9b:54:12:93:89:65:
         43:4b:a0:16:19:dc:5d:c9:12:a9:f0:62:48:2f:85:d0:f9:f1:
         9a:b6:e7:29:d1:93:d0:37:a3:21:7c:94:2c:c8:dc:17:33:7c:
         25:df:23:a4:0e:be:bf:0e:b9:f5:01:80:98:b8:79:94:77:46:
         d5:e3:3c:18:8c:75:56:a8:22:46:50:8e:b9:e7:d9:2e:4a:5b:
         f8:d0:75:22:67:c9:de:b4:8b:3d:7c:22:36:54:ca:2b:7f:0b:
         dc:8b:f8:b7:dd:ca:49:c2:fe:d9:21:44:8b:91:43:ba:e6:12:
         ec:f5:9f:c1:36:51:30:7a:06:2e:45:a7:13:f9:25:36:12:b4:
         60:8c:d8:de:85:29:bb:04:04:19:14:c0:4e:30:87:b0:25:82:
         b1:b0:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:31 2026 by rpki-client