Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
File:                     3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier:          Jc9uidaalUxZZcIN6U2HF/YTypqnkC1z9uB0RypRbr8=
Subject key identifier:   61:28:BD:78:1A:AC:9D:C0:B7:35:75:2B:A1:BB:CF:0F:7A:35:F1:1A
Certificate issuer:       /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial:       16CCB044CDC6E63A3B83E8E83D09F177FBA04F0C
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa
Signing time:             Sun 03 May 2026 02:44:04 +0000
ROA not before:           Sun 03 May 2026 02:39:04 +0000
ROA not after:            Sun 02 May 2027 02:44:04 +0000
asID:                     45706
IP address blocks:        150.107.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
                          rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cc:b0:44:cd:c6:e6:3a:3b:83:e8:e8:3d:09:f1:77:fb:a0:4f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
        Validity
            Not Before: May  3 02:39:04 2026 GMT
            Not After : May  2 02:44:04 2027 GMT
        Subject: CN=6128BD781AAC9DC0B735752BA1BBCF0F7A35F11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:f8:d9:91:6d:0c:d5:af:11:ec:f7:8b:97:
                    20:79:b2:d7:bb:98:25:c8:9b:71:76:6d:91:f4:64:
                    07:99:3f:9f:71:1d:b4:2b:5a:cd:8b:3e:3b:35:02:
                    ac:4b:e3:7e:37:6a:d2:a0:05:52:01:19:1e:0c:64:
                    bb:e0:73:eb:71:79:38:db:67:d8:b4:77:e9:a4:ed:
                    db:6e:86:aa:ab:a1:c3:32:99:f2:a7:0f:af:24:5c:
                    e9:1b:b9:34:f4:74:09:85:74:00:e0:20:24:27:36:
                    d8:9c:2a:24:4f:1e:c1:13:fb:82:c1:27:88:1b:7a:
                    cb:cd:28:98:1a:d9:50:f1:de:98:2d:3c:1a:99:77:
                    6a:4f:b0:8a:61:b2:18:3f:82:ff:71:1f:82:70:45:
                    59:76:a1:43:ce:50:c5:6a:eb:86:17:7d:72:bc:e5:
                    8b:32:40:df:20:cd:9d:7d:2b:0e:96:19:f5:65:46:
                    99:1e:70:ac:60:11:cf:e3:94:0e:43:7b:cf:03:a6:
                    46:b5:7a:26:f7:c7:20:07:86:b9:b7:22:91:75:18:
                    fb:91:ec:1e:b2:15:b3:11:3a:e9:d1:fb:16:b1:76:
                    f4:8a:7c:58:ea:da:f1:e6:77:ec:82:04:43:bc:f4:
                    dd:a9:6a:76:b1:c3:19:dc:bc:60:32:5c:1b:a3:31:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:BD:78:1A:AC:9D:C0:B7:35:75:2B:A1:BB:CF:0F:7A:35:F1:1A
            X509v3 Authority Key Identifier:
                keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:5b:a1:c3:49:4b:5f:c3:76:e7:3b:70:a0:de:ff:ad:01:59:
         76:cc:21:85:74:76:5a:d5:1e:79:70:91:7a:be:f5:d5:21:05:
         ea:0d:98:33:c5:82:bb:f0:3e:8c:64:41:1f:80:a5:bf:20:ab:
         6c:19:6c:14:dc:f5:1d:93:0c:84:79:e3:06:d9:2a:87:ce:25:
         d6:2e:fe:97:6f:92:e9:ea:22:84:8d:c9:87:fd:58:17:11:18:
         8e:bf:f3:7d:bb:18:86:78:0d:90:cf:cf:98:ae:c2:ec:a5:16:
         d6:dc:8e:1d:38:bd:66:c8:04:50:80:c2:ca:98:93:22:b6:56:
         88:bb:f7:c5:38:38:ad:79:5e:14:16:ba:4d:5d:25:34:c6:b8:
         5e:64:04:a4:0e:b3:b5:f3:9a:f1:bf:fe:66:93:df:ea:3f:ca:
         4a:47:ee:ad:7d:ea:85:2f:2d:a3:f6:f4:23:8c:82:fb:2d:ef:
         90:dc:3e:f5:4b:95:71:43:a2:d9:9c:a1:4a:9d:14:c0:02:93:
         9d:d6:c2:4f:af:9a:c0:13:9c:94:ec:8a:cd:df:9e:e1:0a:09:
         23:8e:54:ee:58:fb:23:db:ed:09:df:45:2f:11:3e:82:33:cf:
         7b:4b:f0:ae:63:92:10:c6:7e:dd:fd:15:e7:64:b1:ad:89:ac:
         73:7f:ac:bf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFsywRM3G5jo7g+joPQnxd/ugTwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwQzBBRDAxQ0JGNkVFOUI0MjU0MzA1RTdCMzQwRDY0
QzU5NzREMDAeFw0yNjA1MDMwMjM5MDRaFw0yNzA1MDIwMjQ0MDRaMDMxMTAvBgNV
BAMTKDYxMjhCRDc4MUFBQzlEQzBCNzM1NzUyQkExQkJDRjBGN0EzNUYxMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4fjZkW0M1a8R7PeLlyB5ste7
mCXIm3F2bZH0ZAeZP59xHbQrWs2LPjs1AqxL4343atKgBVIBGR4MZLvgc+txeTjb
Z9i0d+mk7dtuhqqrocMymfKnD68kXOkbuTT0dAmFdADgICQnNticKiRPHsET+4LB
J4gbesvNKJga2VDx3pgtPBqZd2pPsIphshg/gv9xH4JwRVl2oUPOUMVq64YXfXK8
5YsyQN8gzZ19Kw6WGfVlRpkecKxgEc/jlA5De88Dpka1eib3xyAHhrm3IpF1GPuR
7B6yFbMROunR+xaxdvSKfFjq2vHmd+yCBEO89N2panaxwxncvGAyXBujMVR7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYSi9eBqsncC3NXUrobvPD3o18RowHwYDVR0j
BBgwFoAU4AwK0By/bum0JUMF57NA1kxZdNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzdjZDY4ZjQtNjlhNS00NzVmLWFlZTQtM2VmNGI4ZDMwMmRkLzAvRTAwQzBBRDAx
Q0JGNkVFOUI0MjU0MzA1RTdCMzQwRDY0QzU5NzREMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FMDBDMEFEMDFDQkY2RUU5QjQyNTQzMDVFN0IzNDBENjRDNTk3
NEQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h
ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzUzMDJlMzEzMDM3MmUzMjM0MzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmv4MA0GCSqG
SIb3DQEBCwUAA4IBAQBqW6HDSUtfw3bnO3Cg3v+tAVl2zCGFdHZa1R55cJF6vvXV
IQXqDZgzxYK78D6MZEEfgKW/IKtsGWwU3PUdkwyEeeMG2SqHziXWLv6Xb5Lp6iKE
jcmH/VgXERiOv/N9uxiGeA2Qz8+YrsLspRbW3I4dOL1myARQgMLKmJMitlaIu/fF
ODiteV4UFrpNXSU0xrheZASkDrO185rxv/5mk9/qP8pKR+6tfeqFLy2j9vQjjIL7
Le+Q3D71S5VxQ6LZnKFKnRTAApOd1sJPr5rAE5yU7IrN357hCgkjjlTuWPsj2+0J
30UvET6CM897S/CuY5IQxn7d/RXnZLGtiaxzf6y/
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:54 2026 by rpki-client