Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          Lfd/5aGjxi/H/YoBH9y977x//WvhH9K9uLh2uUePXYE=
Subject key identifier:   19:5D:BC:48:AA:1C:19:6A:FF:A8:E4:2D:29:CC:4B:09:C2:C2:AC:DC
Certificate issuer:       /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial:       71E0BBE025993118E7EBECE099E67586F6E06DAE
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
Signing time:             Sun 03 May 2026 02:46:45 +0000
ROA not before:           Sun 03 May 2026 02:41:45 +0000
ROA not after:            Sun 02 May 2027 02:46:45 +0000
asID:                     152351
IP address blocks:        157.10.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
                          rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e0:bb:e0:25:99:31:18:e7:eb:ec:e0:99:e6:75:86:f6:e0:6d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
        Validity
            Not Before: May  3 02:41:45 2026 GMT
            Not After : May  2 02:46:45 2027 GMT
        Subject: CN=195DBC48AA1C196AFFA8E42D29CC4B09C2C2ACDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:4b:a6:40:ca:64:dd:cd:ca:24:40:ca:79:
                    b5:48:ea:63:cb:d5:86:6d:54:a7:46:9d:80:69:ad:
                    df:d8:e5:a9:3f:97:8a:5a:39:f8:62:ad:7b:8b:bc:
                    d8:98:30:9c:aa:8a:82:eb:bf:0c:a7:86:9e:49:81:
                    45:29:12:ed:7b:54:19:b3:a9:cc:cd:ee:fb:78:1f:
                    63:0c:5f:1f:7b:3f:81:10:70:3d:d0:3c:4a:9c:33:
                    48:a0:8d:9a:f0:7c:51:7f:8b:4c:7b:fe:71:82:f2:
                    cf:72:66:3a:83:d4:e5:3d:15:4f:6e:30:6a:9b:c8:
                    3c:47:b2:fa:fa:4d:a6:e3:38:16:05:4d:55:02:23:
                    0d:09:fc:0f:bc:48:24:a2:62:cc:18:a1:35:53:9d:
                    da:43:32:83:df:6d:7f:29:e7:b1:f1:bb:4d:22:df:
                    ff:84:ee:e9:b1:c8:a4:eb:57:04:29:2c:13:0d:04:
                    95:60:1b:e0:fc:61:75:5e:f3:ff:01:2b:49:83:2d:
                    16:46:e7:fa:cc:c0:3c:ba:f4:8c:30:8f:91:21:31:
                    58:6d:42:92:fb:51:55:52:67:b3:f2:e3:fa:7e:7c:
                    f3:10:76:6e:31:0a:69:e6:2c:4a:cf:8a:b3:ed:2c:
                    98:54:f5:00:18:7f:b0:95:f9:3f:bc:da:5d:11:0c:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:BC:48:AA:1C:19:6A:FF:A8:E4:2D:29:CC:4B:09:C2:C2:AC:DC
            X509v3 Authority Key Identifier:
                keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:e3:d5:5a:52:58:73:a1:87:55:1d:ac:89:fb:c3:1c:4d:
         89:72:32:84:cc:98:8b:b6:7a:8e:91:2c:bb:eb:b9:40:fa:98:
         dc:7a:a2:5c:b5:b4:7a:7c:c4:84:70:a1:03:41:40:30:95:1b:
         96:ad:d5:3c:40:9e:61:b1:e0:b1:48:fa:43:bc:b4:df:ed:f3:
         4f:75:d0:74:1e:ae:b5:7d:d6:fd:3b:13:ad:04:4c:7b:04:4e:
         2b:9a:7d:c0:74:7d:cb:55:d8:f3:9c:10:bc:29:de:24:af:fe:
         be:08:b8:54:a7:e5:3d:25:2e:2e:99:26:b2:d6:d7:64:fd:06:
         7e:29:e8:c8:01:f6:fc:da:40:4e:1c:13:8e:1b:2b:88:55:ed:
         e2:f2:f9:73:59:e0:04:27:55:f7:a5:e2:22:14:43:e0:7c:10:
         34:b6:e0:9b:16:d0:fb:f5:82:d9:41:47:58:95:66:41:8f:81:
         00:6c:9f:2a:6b:53:f1:ab:37:1e:7c:66:8b:e8:82:b4:8c:99:
         e3:ae:1b:58:43:dc:32:77:66:28:69:2f:b6:ca:87:cd:0e:35:
         52:40:64:eb:e0:96:fb:18:02:a8:8e:93:1c:4d:c9:da:88:f2:
         1c:ce:3f:3c:e9:20:77:a8:25:f5:51:a7:9f:f7:5d:52:ac:6f:
         fd:f6:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:13 2026 by rpki-client