Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa
File:                     3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (raw, json)
Hash identifier:          1Gi2e8AAFWDOKE+5UmsqFduRDaB0LnfA1YnSqLcGLnY=
Subject key identifier:   DD:D0:70:D2:D1:B1:25:64:C6:81:01:0A:5D:92:A0:CF:E0:A9:A4:5E
Certificate issuer:       /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
Certificate serial:       5C0E43FE773D818919ECDF227CDC807BF99907DC
Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa
Signing time:             Sun 03 May 2026 02:32:48 +0000
ROA not before:           Sun 03 May 2026 02:27:48 +0000
ROA not after:            Sun 02 May 2027 02:32:48 +0000
asID:                     152373
IP address blocks:        157.15.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl
                          rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0e:43:fe:77:3d:81:89:19:ec:df:22:7c:dc:80:7b:f9:99:07:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D
        Validity
            Not Before: May  3 02:27:48 2026 GMT
            Not After : May  2 02:32:48 2027 GMT
        Subject: CN=DDD070D2D1B12564C681010A5D92A0CFE0A9A45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:3c:5f:de:db:28:b0:6b:55:50:73:fc:f3:
                    a3:80:6a:8c:6d:39:d7:91:19:39:00:94:83:66:6c:
                    3c:aa:66:43:58:46:91:bf:df:74:05:69:d3:4f:e1:
                    80:9f:ef:1e:0a:52:e7:1a:57:90:95:c6:3f:fe:fe:
                    07:97:59:fd:b2:10:b9:a2:53:b6:4a:29:df:26:69:
                    29:ec:c8:d1:3e:93:99:91:95:c1:dc:f4:f3:1a:0f:
                    e8:aa:f6:bd:3c:66:94:16:ed:0f:b1:be:1e:e1:43:
                    3c:b4:26:20:c6:85:e9:12:89:76:8e:79:d7:d3:ac:
                    f8:64:ce:5b:44:c6:e1:4e:cd:f2:80:0a:32:2e:a2:
                    77:53:b3:a6:b5:6e:fb:3d:42:ac:da:d5:b0:2c:c3:
                    38:c2:77:4f:dd:c4:aa:a1:63:8c:27:2e:a1:e8:b2:
                    c1:87:a1:13:1b:41:d0:13:e2:5d:27:ef:97:3e:37:
                    54:83:64:9b:ea:b4:81:9a:a5:01:89:79:67:55:78:
                    97:6b:44:5a:fc:b8:45:3a:0d:e4:d0:92:52:d2:5c:
                    bf:54:ac:cc:8b:01:f1:e9:99:76:40:73:85:ca:af:
                    c5:0c:35:c9:8a:45:cd:1e:f5:55:17:0f:4c:99:f4:
                    f6:14:29:3b:18:22:c4:82:a1:26:3a:a0:ae:4d:a1:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:70:D2:D1:B1:25:64:C6:81:01:0A:5D:92:A0:CF:E0:A9:A4:5E
            X509v3 Authority Key Identifier:
                keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:52:77:4c:14:db:40:87:dd:bc:91:8b:4a:74:30:6a:b9:e0:
         d2:34:e2:7a:90:44:55:2e:53:1f:4e:4b:56:f5:ac:72:cf:ae:
         e2:5b:e2:49:b5:3d:0a:cb:69:c4:60:fb:4d:2d:4f:c9:c4:0b:
         0d:cd:be:65:df:6d:27:3c:32:08:c6:4d:50:71:cb:74:de:11:
         4f:d4:a2:a1:51:a0:61:de:b2:31:9e:80:6b:e5:00:f6:db:4d:
         8d:b0:69:44:27:2e:bc:98:6b:1d:af:1b:b8:66:fc:91:95:ed:
         b0:8b:b7:86:4f:f5:d4:ab:e7:11:a0:55:a0:a4:fd:f0:c6:80:
         7c:0c:2b:4e:f5:2e:fc:e5:07:32:bf:6d:14:4e:48:2f:d3:da:
         11:15:b8:1c:a7:1b:e0:2c:44:e8:ba:ee:45:50:37:25:84:be:
         f0:a9:e0:fc:9b:4f:7e:07:3f:24:9e:10:4f:4c:94:2a:33:c6:
         48:f6:13:bc:2c:65:99:16:a6:41:0e:bd:45:c7:f9:4d:f5:dc:
         af:b3:3e:5b:cb:0e:af:e5:8c:f9:96:3b:0e:bc:62:87:4a:40:
         49:52:38:cd:dc:70:09:58:a3:34:b8:1f:7d:56:15:81:0e:ce:
         9f:78:df:6f:e1:31:a6:49:fa:5c:af:1c:40:e5:f1:25:e0:0b:
         cb:0b:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:04 2026 by rpki-client