Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa
File:                     3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (raw, json)
Hash identifier:          o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=
Subject key identifier:   16:93:82:B6:CD:6C:A7:A5:9C:5F:97:A0:C4:BF:97:E9:E1:59:07:A0
Certificate issuer:       /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial:       333025F24D2A2106E52F68CD08175AB932CACF32
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa
Signing time:             Sun 03 May 2026 02:44:08 +0000
ROA not before:           Sun 03 May 2026 02:39:08 +0000
ROA not after:            Sun 02 May 2027 02:44:08 +0000
asID:                     152794
IP address blocks:        157.66.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
                          rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:30:25:f2:4d:2a:21:06:e5:2f:68:cd:08:17:5a:b9:32:ca:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
        Validity
            Not Before: May  3 02:39:08 2026 GMT
            Not After : May  2 02:44:08 2027 GMT
        Subject: CN=169382B6CD6CA7A59C5F97A0C4BF97E9E15907A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:02:85:c3:cd:3c:22:0e:49:25:64:f4:9f:
                    6d:b6:4d:30:03:e1:07:2c:6f:f3:16:81:c5:8d:d0:
                    44:7f:64:35:20:a8:3b:ce:e6:a5:4d:b3:26:d1:5c:
                    4b:de:79:72:00:48:e5:80:3f:92:e5:0c:ad:87:c5:
                    00:41:a8:84:a2:a9:31:ea:db:2f:98:33:e6:62:cc:
                    d9:e5:c5:34:e5:63:99:7b:44:e1:49:1f:d4:27:ca:
                    63:9a:04:e5:62:f3:8d:0e:ae:84:3c:f0:79:4b:dd:
                    bd:11:07:42:54:f3:5b:14:6a:e0:d8:9e:20:57:fa:
                    26:83:92:71:93:92:08:8f:0c:4f:e8:54:16:85:f2:
                    6c:7e:dc:3c:17:41:54:6b:c5:76:62:1b:53:ef:cd:
                    77:de:bf:65:71:7e:87:46:11:cb:af:13:d4:27:79:
                    33:ad:47:73:a2:62:27:17:f7:cc:d3:97:fb:46:cf:
                    9a:31:ac:09:33:32:c3:5f:91:0b:cb:ea:fd:65:45:
                    e5:bd:4c:37:c4:f9:a6:1f:fb:eb:d1:31:8f:bf:5a:
                    a8:a9:93:32:f0:78:5d:e7:5d:d6:2b:2e:6b:45:23:
                    5d:2a:f5:60:f6:1d:c4:fb:73:a7:11:ea:3c:a2:1e:
                    2f:9e:a3:75:0b:81:d7:3f:2c:85:66:2e:24:1d:20:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:82:B6:CD:6C:A7:A5:9C:5F:97:A0:C4:BF:97:E9:E1:59:07:A0
            X509v3 Authority Key Identifier:
                keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:43:11:15:e4:06:5e:1b:8a:e0:a7:56:86:19:0b:e4:1c:b1:
         c2:74:f8:09:be:c1:94:6b:30:67:e0:6f:a7:79:7f:a1:c2:00:
         3c:a3:f0:d7:31:55:1f:26:6b:95:d3:40:47:53:52:f7:b3:db:
         9d:81:17:9b:72:37:b4:d2:9a:00:79:87:e7:b3:ac:03:09:e3:
         b4:c8:2a:84:c3:a8:8c:b2:77:46:af:7f:78:e3:64:1a:27:de:
         ba:30:c5:98:38:a8:2e:53:3e:a9:41:7e:5c:6d:35:b8:7a:55:
         af:66:91:1d:c8:45:55:26:99:8b:14:5b:2c:2b:70:5b:29:5f:
         3f:33:03:ea:c9:23:1a:a3:33:24:9a:7c:81:55:c1:6a:0f:1c:
         69:26:58:f1:4c:bb:d7:04:46:10:1c:51:55:01:23:d8:3c:6b:
         7c:85:ea:ad:8e:3d:9a:45:0f:76:f9:73:87:6c:14:c3:19:74:
         45:e4:6d:e9:fa:20:cf:e3:05:8c:8f:a0:d6:86:74:60:a6:33:
         be:a4:2b:56:42:3e:58:8b:01:94:56:ce:3c:05:18:e1:12:75:
         c8:f4:66:f7:c4:73:16:fc:2f:c2:87:38:7c:c1:23:92:a8:bc:
         f9:e5:55:7b:64:e4:93:58:16:8c:07:a8:58:ef:f0:14:15:ca:
         8c:6e:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:00 2026 by rpki-client