Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa
File:                     3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (raw, json)
Hash identifier:          aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=
Subject key identifier:   93:DF:C1:ED:75:E5:46:7E:0B:15:20:FC:B8:5C:E3:A2:69:53:BB:99
Certificate issuer:       /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial:       61582001BA8EF4951C616C424E21EE14BDCBED52
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa
Signing time:             Sun 03 May 2026 02:44:07 +0000
ROA not before:           Sun 03 May 2026 02:39:07 +0000
ROA not after:            Sun 02 May 2027 02:44:07 +0000
asID:                     152794
IP address blocks:        157.66.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
                          rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:58:20:01:ba:8e:f4:95:1c:61:6c:42:4e:21:ee:14:bd:cb:ed:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
        Validity
            Not Before: May  3 02:39:07 2026 GMT
            Not After : May  2 02:44:07 2027 GMT
        Subject: CN=93DFC1ED75E5467E0B1520FCB85CE3A26953BB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:09:35:fa:29:50:b9:ad:56:8c:0d:41:08:
                    a4:79:ed:33:36:c1:95:60:f8:63:f4:45:f7:e0:cb:
                    9e:8e:e3:32:e0:19:02:98:80:b5:a4:84:78:7d:2a:
                    65:17:11:1b:19:87:81:8d:dd:75:77:23:c6:85:89:
                    a9:c0:59:8b:f8:76:d2:78:9b:a4:32:32:56:f8:b6:
                    a9:b4:22:47:77:6a:4b:5c:d9:35:12:6b:bc:6c:fd:
                    6d:f1:b0:a7:a3:a0:f6:ea:9a:f3:88:7f:7c:05:48:
                    6a:bd:88:b5:bf:5c:69:ce:f0:dd:f9:ef:b7:b3:3c:
                    d0:a4:45:61:00:9d:d3:02:eb:b2:41:2a:f7:a8:72:
                    03:23:ab:f6:57:50:d2:62:d9:b0:55:85:81:4f:c7:
                    f7:90:f3:bc:08:d4:f5:4a:80:9b:fc:dd:18:c3:15:
                    de:bc:41:f6:1d:a7:f2:ca:b8:a2:39:ac:0a:41:7f:
                    d2:41:f0:0c:1f:ff:b9:36:b8:50:3e:3e:81:65:06:
                    b6:18:08:5a:22:61:38:f2:26:e5:a3:7a:35:95:00:
                    77:a9:2d:ad:91:0c:d9:1f:c7:f0:52:bf:7b:7d:ad:
                    62:e7:68:8a:a3:22:6d:54:ff:38:a6:8a:a4:39:22:
                    cf:20:5c:62:98:98:a8:22:8c:ae:9d:ba:eb:35:97:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:C1:ED:75:E5:46:7E:0B:15:20:FC:B8:5C:E3:A2:69:53:BB:99
            X509v3 Authority Key Identifier:
                keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32342d3234203d3e20313532373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:f0:be:b4:fa:c6:d2:d8:05:49:e8:d8:bb:ac:fa:61:b4:
         21:f9:82:07:6d:2d:ca:eb:4b:2a:69:27:b6:b5:31:be:0b:1c:
         50:99:d5:4a:a6:85:1c:5e:ad:6e:10:a0:26:68:c4:09:71:9f:
         4d:12:f6:39:8b:2e:af:32:b5:81:fb:b8:38:8c:78:9c:d9:a0:
         48:9c:3f:a5:a4:e5:a2:9f:8c:2c:05:d8:25:43:d8:bd:ed:cf:
         77:bf:46:11:f9:8a:1c:37:53:09:21:72:3b:4f:79:89:e1:1f:
         3d:4d:12:33:3a:4d:3d:77:d4:b6:ec:74:d3:60:2f:a3:e3:70:
         03:3b:f8:32:12:a4:c9:84:b0:5f:a8:f9:63:24:36:84:c2:0c:
         24:cb:05:a0:1d:29:84:77:65:11:5a:78:9c:01:59:f6:96:bc:
         42:eb:4d:57:d1:b8:52:e4:d0:f3:36:75:a6:42:b9:77:41:be:
         8b:46:72:ab:45:58:46:e9:74:eb:d2:b9:33:1d:e2:d0:84:26:
         01:ab:9d:d3:84:d4:d4:e1:df:3c:93:b8:db:24:31:73:10:e0:
         2e:14:63:02:9f:3c:bb:79:73:ed:21:91:6f:1a:ee:1f:62:27:
         a8:13:23:af:76:29:bc:c0:a8:85:56:b9:a1:6a:17:81:9c:ce:
         40:44:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:52 2026 by rpki-client