Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
File:                     3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (raw, json)
Hash identifier:          s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=
Subject key identifier:   C6:0A:F9:20:00:6E:27:2C:31:D9:0A:10:F6:9B:E4:D3:63:29:27:2C
Certificate issuer:       /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
Certificate serial:       5A0AB19FD64A403449919F43521ECAFE2A6B3285
Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
Signing time:             Sun 03 May 2026 02:45:52 +0000
ROA not before:           Sun 03 May 2026 02:40:52 +0000
ROA not after:            Sun 02 May 2027 02:45:52 +0000
asID:                     141609
IP address blocks:        157.66.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl
                          rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:b1:9f:d6:4a:40:34:49:91:9f:43:52:1e:ca:fe:2a:6b:32:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
        Validity
            Not Before: May  3 02:40:52 2026 GMT
            Not After : May  2 02:45:52 2027 GMT
        Subject: CN=C60AF920006E272C31D90A10F69BE4D36329272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:9d:dc:02:18:b4:90:cf:08:40:58:a5:5c:
                    5f:75:36:5d:f2:4a:ea:64:58:a0:f8:72:7d:77:12:
                    81:95:47:c3:48:94:c7:68:91:af:47:ad:95:4f:40:
                    f9:68:f5:dc:ae:b1:0f:53:96:bf:88:77:9e:34:5b:
                    34:ae:b4:b4:4f:58:40:8e:c4:ba:37:ad:d9:f2:81:
                    e1:08:35:1c:4e:51:c3:31:c0:71:c3:b3:91:96:8e:
                    fa:db:90:58:c1:99:5b:78:b7:f1:cb:02:39:2f:81:
                    a3:09:e8:e6:c7:d1:3f:31:38:67:cf:5d:79:c4:c4:
                    c8:12:30:31:fa:ac:4b:6e:39:31:a0:29:df:af:35:
                    74:a6:53:2b:44:de:d3:20:57:51:9a:4d:3e:97:88:
                    b2:fc:7e:e4:32:74:b5:9d:ea:36:c4:f4:1a:3f:ca:
                    84:cd:5e:4e:b2:12:dc:25:28:a5:14:8b:5f:ea:e2:
                    dd:d1:57:14:2b:7f:ec:67:24:54:7e:9f:ca:ce:94:
                    3a:0e:5d:f0:11:24:70:a0:c1:37:96:58:1a:ae:f5:
                    45:52:6d:3d:63:02:0b:7f:09:40:0d:6a:07:2e:52:
                    60:d3:7b:df:2a:68:e8:f6:9b:03:1d:d4:3c:94:b8:
                    fe:9e:ae:70:76:c8:a6:45:0d:ee:b6:26:cb:9d:bc:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0A:F9:20:00:6E:27:2C:31:D9:0A:10:F6:9B:E4:D3:63:29:27:2C
            X509v3 Authority Key Identifier:
                keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:75:4a:40:f3:b2:eb:59:66:b4:51:f7:a2:04:c7:be:72:
         7f:ea:f0:ad:d1:b6:67:ef:e6:dd:92:c7:6d:5b:e6:46:0e:a2:
         1d:da:d8:b7:3c:00:66:2b:f7:c7:f4:73:98:8b:10:49:ce:a4:
         38:c6:6d:82:88:ca:2c:32:04:9c:c6:1e:71:e7:a8:fd:49:32:
         a5:00:eb:7b:00:02:1e:f5:02:36:1d:a5:19:4d:34:a8:c4:87:
         b3:ed:9e:b9:d9:88:2e:69:f4:e3:2d:58:21:df:e9:49:79:c4:
         61:f9:2b:9d:7e:34:39:3d:4a:43:d9:d2:26:5d:06:5b:83:26:
         4b:c1:4b:b6:93:d6:5d:dd:2d:ea:72:0e:88:fb:12:39:99:4a:
         2e:9f:cb:16:6d:50:f6:e9:19:c4:b8:37:69:2d:de:80:ca:5a:
         b9:90:ad:28:47:35:4f:3e:4b:03:2c:de:7a:51:79:c2:1c:d4:
         67:c0:f1:da:64:f8:cc:a9:11:21:72:46:83:58:86:72:4d:eb:
         c6:e3:22:02:72:25:c6:65:59:8b:da:74:67:00:4d:b1:6c:0c:
         5c:37:ea:17:2a:75:4e:e8:e3:a7:99:08:51:57:b0:46:53:f6:
         1b:6c:4d:93:05:69:f4:66:4a:40:98:e9:47:00:41:6d:34:6a:
         5b:b3:6c:e6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWgqxn9ZKQDRJkZ9DUh7K/iprMoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx
QTE2RjhERjAeFw0yNjA1MDMwMjQwNTJaFw0yNzA1MDIwMjQ1NTJaMDMxMTAvBgNV
BAMTKEM2MEFGOTIwMDA2RTI3MkMzMUQ5MEExMEY2OUJFNEQzNjMyOTI3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAp3cAhi0kM8IQFilXF91Nl3y
SupkWKD4cn13EoGVR8NIlMdoka9HrZVPQPlo9dyusQ9Tlr+Id540WzSutLRPWECO
xLo3rdnygeEINRxOUcMxwHHDs5GWjvrbkFjBmVt4t/HLAjkvgaMJ6ObH0T8xOGfP
XXnExMgSMDH6rEtuOTGgKd+vNXSmUytE3tMgV1GaTT6XiLL8fuQydLWd6jbE9Bo/
yoTNXk6yEtwlKKUUi1/q4t3RVxQrf+xnJFR+n8rOlDoOXfARJHCgwTeWWBqu9UVS
bT1jAgt/CUANagcuUmDTe98qaOj2mwMd1DyUuP6ernB2yKZFDe62JsudvMbJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxgr5IABuJywx2QoQ9pvk02MpJywwHwYDVR0j
BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1
MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG
OERGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkZGJiNzljLTllYTItNDdmMC1i
NDVmLTE4MTY2NTBiYTIzZi8wLzMxMzUzNzJlMzYzNjJlMzYzMjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzQzMTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CPjANBgkqhkiG
9w0BAQsFAAOCAQEAZrN1SkDzsutZZrRR96IEx75yf+rwrdG2Z+/m3ZLHbVvmRg6i
HdrYtzwAZiv3x/RzmIsQSc6kOMZtgojKLDIEnMYeceeo/UkypQDrewACHvUCNh2l
GU00qMSHs+2eudmILmn04y1YId/pSXnEYfkrnX40OT1KQ9nSJl0GW4MmS8FLtpPW
Xd0t6nIOiPsSOZlKLp/LFm1Q9ukZxLg3aS3egMpauZCtKEc1Tz5LAyzeelF5whzU
Z8Dx2mT4zKkRIXJGg1iGck3rxuMiAnIlxmVZi9p0ZwBNsWwMXDfqFyp1Tujjp5kI
UVewRlP2G2xNkwVp9GZKQJjpRwBBbTRqW7Ns5g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:50 2026 by rpki-client