Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39322e302f32332d3233203d3e20313532343037.roa
File:                     3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (raw, json)
Hash identifier:          JeBWxU2nKUoJd4mmQd29lF3qX2yOUpENL2Ej8COjW7k=
Subject key identifier:   B4:90:84:06:94:18:05:1A:3C:55:63:BC:AA:6F:E8:DA:85:A2:A7:73
Certificate issuer:       /CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
Certificate serial:       427D8228E428584DCA18E18009982AFDBC44D814
Authority key identifier: 3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39322e302f32332d3233203d3e20313532343037.roa
Signing time:             Sun 03 May 2026 02:40:47 +0000
ROA not before:           Sun 03 May 2026 02:35:47 +0000
ROA not after:            Sun 02 May 2027 02:40:47 +0000
asID:                     152407
IP address blocks:        157.20.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl
                          rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7d:82:28:e4:28:58:4d:ca:18:e1:80:09:98:2a:fd:bc:44:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B610B6D52EFC83BEC0E681395E172E5584CB922
        Validity
            Not Before: May  3 02:35:47 2026 GMT
            Not After : May  2 02:40:47 2027 GMT
        Subject: CN=B49084069418051A3C5563BCAA6FE8DA85A2A773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:07:6a:e6:04:ff:b1:a8:27:26:a7:ec:31:
                    5e:df:89:c5:e4:ac:aa:43:e2:cf:49:5a:3d:47:2c:
                    9b:e0:65:f4:2c:0c:25:9d:ff:ba:6c:fe:15:1d:58:
                    46:fa:7c:95:54:d0:8c:e5:f9:47:a0:45:81:7d:b9:
                    fc:69:00:62:37:ee:97:eb:47:27:4f:ce:f9:50:40:
                    35:80:96:12:4c:88:b7:77:19:85:52:a9:4b:17:38:
                    87:17:bc:d2:f0:44:d0:8c:9a:2a:0b:ab:17:b8:f0:
                    a5:cf:aa:06:1e:9e:e5:6b:c8:e5:a1:ff:30:2f:3b:
                    bd:e9:72:af:b8:e9:11:a5:b9:f0:ca:c7:9b:d0:e7:
                    d1:36:05:39:51:b3:f1:3e:63:d1:e8:45:c8:34:af:
                    c7:60:39:7f:a3:50:1f:6a:54:76:17:03:2e:42:6a:
                    4d:e2:3b:4c:b6:6e:dd:d3:38:07:c6:05:16:36:70:
                    0d:dc:3b:5c:0f:f6:0b:29:f9:86:70:e8:d0:1a:6d:
                    b9:85:45:62:e5:3e:68:11:f9:c5:93:0e:35:0e:9e:
                    e3:9b:8e:6d:e4:f5:23:7a:36:47:be:2a:4e:9f:af:
                    a1:c5:4b:69:69:3c:f4:34:90:a0:89:f5:4a:5f:a3:
                    ea:f3:79:00:e6:77:7e:72:e9:63:22:20:d2:c1:7b:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:84:06:94:18:05:1A:3C:55:63:BC:AA:6F:E8:DA:85:A2:A7:73
            X509v3 Authority Key Identifier:
                keyid:3B:61:0B:6D:52:EF:C8:3B:EC:0E:68:13:95:E1:72:E5:58:4C:B9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3B610B6D52EFC83BEC0E681395E172E5584CB922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39322e302f32332d3233203d3e20313532343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:3b:8d:05:fa:0b:5f:bf:42:b6:ea:ba:6f:45:f6:4d:74:
         4a:d6:9e:6c:da:76:8e:b6:6d:9d:01:bc:f0:9a:fb:ee:91:c0:
         af:00:28:19:31:54:60:bb:e4:11:46:a7:17:08:cb:d8:1d:4e:
         c5:57:bc:da:51:61:88:0f:db:72:55:d6:38:94:ba:2d:b9:a7:
         60:f8:bd:3e:6b:72:1e:dd:9f:ab:78:60:30:c1:c0:03:59:fb:
         85:3e:1e:8f:81:ec:61:b1:46:cf:04:2e:1f:0f:42:8c:92:0c:
         29:7d:c7:f8:a2:c6:c0:f6:96:7c:84:00:2f:c7:a6:7e:2e:67:
         10:ea:20:a1:7c:a2:fd:37:23:83:75:1b:aa:8f:2d:d5:03:14:
         8b:11:ad:83:b0:f9:c9:21:d8:fa:1f:5a:12:9d:06:ab:55:de:
         46:21:01:85:3c:b5:78:c1:5a:4c:41:8f:8b:a9:c7:0c:d5:e3:
         f3:75:54:53:1f:08:1b:f8:1b:fc:70:29:c9:d4:62:9e:8b:48:
         8a:ff:9c:47:49:af:2f:6e:e2:79:88:a1:a7:a2:0d:1e:4f:33:
         da:2a:59:d3:ca:de:11:3b:51:d1:3e:8c:be:6d:7d:96:5b:0f:
         77:3c:2a:e8:64:03:de:1a:8c:bd:46:81:40:e7:fd:e4:2d:40:
         2f:b0:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:34 2026 by rpki-client