Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa
File:                     3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (raw, json)
Hash identifier:          I26dPICHNbNpOEaAeWFDJjc3y6XbZTVJydnD33XIwu0=
Subject key identifier:   1B:C8:E1:A6:56:05:74:C4:FF:8B:FB:A3:5A:A8:C5:6A:7D:CD:74:52
Certificate issuer:       /CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Certificate serial:       4EFD643F05769463A99B0D82F4EA571DCFD69B48
Authority key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa
Signing time:             Sun 03 May 2026 02:34:39 +0000
ROA not before:           Sun 03 May 2026 02:29:39 +0000
ROA not after:            Sun 02 May 2027 02:34:39 +0000
asID:                     152069
IP address blocks:        150.242.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
                          rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:64:3f:05:76:94:63:a9:9b:0d:82:f4:ea:57:1d:cf:d6:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
        Validity
            Not Before: May  3 02:29:39 2026 GMT
            Not After : May  2 02:34:39 2027 GMT
        Subject: CN=1BC8E1A6560574C4FF8BFBA35AA8C56A7DCD7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:28:25:68:b9:1c:78:6b:02:5c:9d:ab:45:
                    7d:1e:1d:78:70:e8:d2:e2:a8:32:51:7b:c6:8c:08:
                    80:bb:8e:ff:88:33:6a:8b:b1:77:6b:96:24:8e:17:
                    cf:7d:74:e4:f8:34:e0:86:8d:7b:ef:9a:dc:05:66:
                    b7:44:9f:6b:e6:3e:75:1a:cd:f2:ba:ae:dd:a3:8f:
                    2b:06:60:46:a0:fe:0a:1b:3d:50:f3:04:c4:32:97:
                    6e:c3:ce:c4:7b:4f:42:98:fa:42:35:2a:bd:b3:b7:
                    75:bc:91:78:9c:ea:9e:69:eb:95:a4:2f:15:e7:02:
                    19:38:39:5e:76:44:8f:37:b9:83:3a:3b:8b:db:c6:
                    4d:84:ab:3a:f3:4a:f2:57:22:22:14:e1:45:83:25:
                    2a:f8:8d:5e:3b:e4:73:aa:34:cf:a3:d4:9a:4c:41:
                    08:ec:2d:cd:33:69:82:02:ec:2d:ea:98:a2:b3:82:
                    73:72:a6:3c:de:eb:24:3a:6c:0b:07:b7:87:5f:5d:
                    07:80:35:d7:0c:13:9a:f6:a1:4a:6d:23:fe:39:53:
                    46:97:55:05:d0:90:cc:dd:ea:b3:8d:c3:d0:ff:3a:
                    4f:cb:78:37:4c:3e:19:64:4e:a1:91:de:f1:46:4a:
                    62:77:f2:64:07:3a:59:3c:cf:38:4c:a5:e7:a7:50:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C8:E1:A6:56:05:74:C4:FF:8B:FB:A3:5A:A8:C5:6A:7D:CD:74:52
            X509v3 Authority Key Identifier:
                keyid:F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:09:79:19:7e:1c:fe:58:8a:5d:f0:12:04:c2:3b:e7:f0:5e:
         ec:4f:7d:44:8d:7c:5f:7f:d1:d0:c8:89:33:0d:6b:98:ee:a7:
         68:88:45:2f:60:77:40:c2:81:65:00:6a:89:2e:98:a9:94:d4:
         cf:d5:6c:d1:5c:30:52:54:c8:bd:6d:c5:8c:75:97:67:15:b3:
         c0:1c:77:81:67:67:8e:69:14:e1:cc:9d:a9:ea:01:69:24:f0:
         a6:52:c5:ab:06:9f:55:7b:fe:d8:ac:b2:1f:0b:dc:b4:4a:1a:
         07:6d:b3:0a:07:43:d0:d5:64:74:65:81:38:9e:17:19:a7:ec:
         72:5f:7a:3d:49:4d:11:19:24:d2:b5:66:a1:79:f9:c1:e9:60:
         63:a4:dc:f2:8e:18:d1:ee:23:53:01:b7:b8:ca:71:f0:09:41:
         6b:6b:0a:b4:93:99:b5:2a:aa:5b:2c:c0:ab:81:65:8f:b3:7c:
         f1:cb:54:37:a2:c4:49:a8:a0:d9:2d:15:07:69:63:bf:b9:37:
         9d:9a:f5:9e:5b:99:df:c8:58:ff:cc:85:01:37:b1:5b:2e:e4:
         5b:c8:50:27:f7:e6:c6:5e:0d:93:55:35:94:1c:5a:72:92:b3:
         14:a5:06:7b:70:da:32:1a:a4:f2:86:1a:25:0d:c8:ed:3f:93:
         81:69:f3:cb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTv1kPwV2lGOpmw2C9OpXHc/Wm0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwODAxOUYzRERBRkQ3OUJCMUM4QjYzODA5QzMxNzQy
NjQ2RUQ5NDAeFw0yNjA1MDMwMjI5MzlaFw0yNzA1MDIwMjM0MzlaMDMxMTAvBgNV
BAMTKDFCQzhFMUE2NTYwNTc0QzRGRjhCRkJBMzVBQThDNTZBN0RDRDc0NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoiglaLkceGsCXJ2rRX0eHXhw
6NLiqDJRe8aMCIC7jv+IM2qLsXdrliSOF899dOT4NOCGjXvvmtwFZrdEn2vmPnUa
zfK6rt2jjysGYEag/gobPVDzBMQyl27DzsR7T0KY+kI1Kr2zt3W8kXic6p5p65Wk
LxXnAhk4OV52RI83uYM6O4vbxk2EqzrzSvJXIiIU4UWDJSr4jV475HOqNM+j1JpM
QQjsLc0zaYIC7C3qmKKzgnNypjze6yQ6bAsHt4dfXQeANdcME5r2oUptI/45U0aX
VQXQkMzd6rONw9D/Ok/LeDdMPhlkTqGR3vFGSmJ38mQHOlk8zzhMpeenUF0PAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUG8jhplYFdMT/i/ujWqjFan3NdFIwHwYDVR0j
BBgwFoAU+QgBnz3a/Xm7HItjgJwxdCZG7ZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTdjMDU1MjEtMDMzOC00ZjMxLWEyMDktNGY4NzhiZWY2MzhhLzAvRjkwODAxOUYz
RERBRkQ3OUJCMUM4QjYzODA5QzMxNzQyNjQ2RUQ5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTA4MDE5RjNEREFGRDc5QkIxQzhCNjM4MDlDMzE3NDI2NDZF
RDk0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3YzA1NTIxLTAzMzgtNGYzMS1h
MjA5LTRmODc4YmVmNjM4YS8wLzMxMzUzMDJlMzIzNDMyMmUzMTM3MzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzIzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGW8rAwDQYJ
KoZIhvcNAQELBQADggEBADYJeRl+HP5Yil3wEgTCO+fwXuxPfUSNfF9/0dDIiTMN
a5jup2iIRS9gd0DCgWUAaokumKmU1M/VbNFcMFJUyL1txYx1l2cVs8Acd4FnZ45p
FOHMnanqAWkk8KZSxasGn1V7/tissh8L3LRKGgdtswoHQ9DVZHRlgTieFxmn7HJf
ej1JTREZJNK1ZqF5+cHpYGOk3PKOGNHuI1MBt7jKcfAJQWtrCrSTmbUqqlsswKuB
ZY+zfPHLVDeixEmooNktFQdpY7+5N52a9Z5bmd/IWP/MhQE3sVsu5FvIUCf35sZe
DZNVNZQcWnKSsxSlBntw2jIapPKGGiUNyO0/k4Fp88s=
-----END CERTIFICATE-----
Generated at Wed May 13 16:48:10 2026 by rpki-client