Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa
File:                     3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa (raw, json)
Hash identifier:          VO3wRePJW0P5LPFqmLwt0og5x5dJDIO5oTuApv8v4iE=
Subject key identifier:   FD:76:CA:37:61:13:F1:A2:7C:8A:A8:FA:EB:E9:22:F3:63:3C:B2:B2
Certificate issuer:       /CN=13164A0B7B011F7B6F8AA03906462F7A372BAA47
Certificate serial:       10274B904CF0AF8AD8D4C4A6B05BA796ACBA846F
Authority key identifier: 13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa
Signing time:             Sun 03 May 2026 02:33:50 +0000
ROA not before:           Sun 03 May 2026 02:28:50 +0000
ROA not after:            Sun 02 May 2027 02:33:50 +0000
asID:                     151995
IP address blocks:        175.111.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.crl
                          rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:4b:90:4c:f0:af:8a:d8:d4:c4:a6:b0:5b:a7:96:ac:ba:84:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13164A0B7B011F7B6F8AA03906462F7A372BAA47
        Validity
            Not Before: May  3 02:28:50 2026 GMT
            Not After : May  2 02:33:50 2027 GMT
        Subject: CN=FD76CA376113F1A27C8AA8FAEBE922F3633CB2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:7b:5a:4a:a0:3a:9c:19:12:bd:b6:e5:9f:
                    39:13:df:85:79:58:dc:57:77:cc:ac:26:cf:c5:1d:
                    21:f5:95:11:42:bb:83:8c:6a:c7:0b:35:36:5c:6c:
                    9f:ff:00:96:2d:23:e2:2c:04:8a:e2:c3:96:28:c5:
                    35:c7:c1:9e:06:d7:42:4c:e2:d3:ec:ac:fd:36:88:
                    ef:1e:70:58:43:73:52:70:06:62:3d:11:34:60:1d:
                    9f:23:12:59:6c:0e:be:fb:3e:8c:44:be:19:f1:18:
                    48:e8:fa:35:18:3e:f6:9f:e4:f1:18:37:2b:18:0d:
                    3a:65:53:ad:7c:3f:73:9c:11:3a:06:21:7b:09:67:
                    3c:5a:dd:59:96:09:3d:5c:46:17:da:0d:93:62:31:
                    a7:5e:fc:c1:a6:96:bc:9a:0d:18:9a:4c:c7:05:cf:
                    26:80:7c:13:8c:f5:3f:24:fe:7e:56:39:36:04:b0:
                    22:3e:00:e0:4c:32:d5:a7:32:7d:82:75:c1:76:1f:
                    b7:22:c6:be:d2:45:16:00:47:6a:a4:8b:0d:cf:d2:
                    7a:5e:3a:db:5d:36:9f:45:48:8b:fa:22:21:7f:2b:
                    84:14:0b:75:51:99:07:9e:a9:f0:36:5a:a4:fc:41:
                    fd:bb:d5:1e:c8:55:f8:bb:0b:50:0e:1e:fa:d3:01:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:76:CA:37:61:13:F1:A2:7C:8A:A8:FA:EB:E9:22:F3:63:3C:B2:B2
            X509v3 Authority Key Identifier:
                keyid:13:16:4A:0B:7B:01:1F:7B:6F:8A:A0:39:06:46:2F:7A:37:2B:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/13164A0B7B011F7B6F8AA03906462F7A372BAA47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13164A0B7B011F7B6F8AA03906462F7A372BAA47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55511a8a-30da-4670-a010-7926d7cd510b/0/3137352e3131312e39362e302f32342d3234203d3e20313531393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:31:10:f0:0f:33:9f:3c:82:2a:23:07:c6:cd:11:4d:2a:
         48:84:7b:a8:54:5e:10:ac:0e:ce:78:3a:92:0b:9c:52:06:73:
         7d:2f:7f:c5:ac:45:0c:ff:e9:b3:82:92:25:af:c8:6e:33:d3:
         9c:ee:a1:f3:bd:df:d7:78:57:a7:ec:6a:f3:83:2b:0d:80:64:
         f7:8d:d3:62:77:a8:69:a2:cb:23:ca:7a:f9:32:f1:81:c9:0a:
         f2:c4:46:be:1c:93:63:5b:12:ca:aa:f0:f8:7d:81:3f:83:ee:
         b3:d4:58:12:31:1f:0f:86:ae:82:9d:be:85:1e:0b:88:1c:25:
         00:9a:4f:1a:63:5d:5d:6b:fb:55:a2:e1:73:ca:b4:a1:1e:8c:
         90:24:7a:49:7e:f0:e7:54:2f:fc:cd:df:71:40:d4:64:5d:75:
         46:33:1c:d1:a7:5c:7e:7f:2a:1f:48:79:45:94:df:35:fb:6d:
         69:6b:36:c9:f3:71:b1:e8:56:68:5d:1b:30:40:e3:88:6a:0c:
         ab:6e:f8:c5:43:0a:50:0c:d7:f0:2b:39:7f:93:24:46:91:13:
         ce:81:e1:2d:d7:0d:a2:3a:23:26:7a:7c:37:be:76:fe:b0:83:
         7b:97:fc:b4:ca:cf:22:14:c0:a4:c4:c1:4d:8c:96:81:c9:a1:
         32:81:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:20 2026 by rpki-client