Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          c3R7uIRer6io0faYFiEl0ylntsRw2uXwfzoif+sXbkM=
Subject key identifier:   8F:5E:F3:2C:FC:62:6E:22:C8:E0:EA:7D:A0:96:EA:EA:6C:12:D9:D8
Certificate issuer:       /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
Certificate serial:       34D4E70A7950C3AD98DAC1AE6AEC4E005AEA293A
Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
Signing time:             Sun 03 May 2026 02:46:46 +0000
ROA not before:           Sun 03 May 2026 02:41:46 +0000
ROA not after:            Sun 02 May 2027 02:46:46 +0000
asID:                     152351
IP address blocks:        157.10.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl
                          rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d4:e7:0a:79:50:c3:ad:98:da:c1:ae:6a:ec:4e:00:5a:ea:29:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769
        Validity
            Not Before: May  3 02:41:46 2026 GMT
            Not After : May  2 02:46:46 2027 GMT
        Subject: CN=8F5EF32CFC626E22C8E0EA7DA096EAEA6C12D9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:32:8a:6d:c2:45:5f:98:36:5f:73:e7:9d:
                    09:9a:9c:ab:77:5d:f9:61:ab:68:2e:10:99:a0:64:
                    50:b9:55:66:22:56:a0:ef:4d:53:d6:b0:44:b1:65:
                    a9:94:41:4f:ba:da:a9:ee:fc:da:0b:9d:5b:f2:e1:
                    3b:f8:52:6e:93:27:d1:6e:95:c3:01:ea:51:30:4b:
                    d2:4e:be:d3:5a:57:de:3c:96:e8:6d:07:e8:f4:8d:
                    39:df:c3:40:f9:71:2b:91:ca:ef:bd:56:ef:cc:1b:
                    18:87:3a:97:94:43:07:19:62:d0:79:dd:7f:3d:72:
                    0f:27:6b:b8:9a:60:e4:d9:00:76:4a:ca:30:ba:ab:
                    c3:5d:0b:a2:1b:55:46:4c:29:ab:4a:89:2f:2d:e8:
                    d0:65:16:35:43:e3:07:55:73:a8:b4:f0:54:12:a6:
                    cc:5f:45:86:0b:40:73:d5:36:01:d1:4a:71:76:22:
                    c2:3b:69:39:d4:ba:d4:3d:fc:e2:f0:61:cd:b5:4a:
                    9d:cd:67:1a:4c:86:fd:97:80:42:3e:0b:48:0b:ce:
                    7b:f0:ce:23:34:bc:53:1b:c0:d7:af:54:7f:43:22:
                    c2:d4:e5:b1:04:88:57:ff:19:cf:70:ea:63:4d:cc:
                    ad:8b:44:0b:ad:f4:95:e0:b5:db:d8:e9:51:35:05:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:F3:2C:FC:62:6E:22:C8:E0:EA:7D:A0:96:EA:EA:6C:12:D9:D8
            X509v3 Authority Key Identifier:
                keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6b:d5:87:d2:ba:b7:a0:22:59:6f:54:01:c9:d0:74:9d:46:
         5d:5c:e4:87:77:81:6c:64:36:f6:4d:38:44:2f:d8:c3:95:ca:
         a0:42:ef:ea:e6:42:d7:fe:44:86:e2:99:dd:be:82:6d:c1:66:
         7d:cd:62:df:33:1c:cd:ad:14:dd:f0:0b:f3:16:bc:7d:b4:98:
         19:3c:7c:99:59:92:5e:58:f0:88:6d:76:44:9f:55:7a:90:97:
         b7:6d:c2:49:d6:97:fb:6d:e7:17:8e:11:77:62:03:b1:38:45:
         45:6a:28:45:14:d8:bf:de:7a:8e:d1:68:22:62:ac:05:d2:2a:
         21:4d:89:dd:41:cd:eb:9e:97:71:d4:96:1a:d3:e8:6c:5f:dd:
         f4:4f:75:0d:af:f7:05:39:69:77:12:1f:54:19:9a:ae:77:15:
         57:bb:c2:fa:a4:1d:f7:e7:26:5e:57:a1:b7:51:c4:d5:6e:89:
         42:03:f0:57:35:cc:9b:a6:b2:c5:f6:46:69:fe:59:1d:ac:4c:
         15:83:48:aa:80:57:5a:c4:73:c2:7d:de:4c:5e:b6:83:f5:12:
         9d:d6:34:fd:0a:87:61:6f:47:81:fd:41:d5:f0:63:7a:e1:a9:
         39:df:7e:82:a1:6a:79:80:37:fd:1e:d8:91:ab:3b:f8:ce:79:
         9e:47:34:27
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNNTnCnlQw62Y2sGuauxOAFrqKTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQw
MDlCQzc2OTAeFw0yNjA1MDMwMjQxNDZaFw0yNzA1MDIwMjQ2NDZaMDMxMTAvBgNV
BAMTKDhGNUVGMzJDRkM2MjZFMjJDOEUwRUE3REEwOTZFQUVBNkMxMkQ5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbDKKbcJFX5g2X3PnnQmanKt3
Xflhq2guEJmgZFC5VWYiVqDvTVPWsESxZamUQU+62qnu/NoLnVvy4Tv4Um6TJ9Fu
lcMB6lEwS9JOvtNaV948luhtB+j0jTnfw0D5cSuRyu+9Vu/MGxiHOpeUQwcZYtB5
3X89cg8na7iaYOTZAHZKyjC6q8NdC6IbVUZMKatKiS8t6NBlFjVD4wdVc6i08FQS
psxfRYYLQHPVNgHRSnF2IsI7aTnUutQ9/OLwYc21Sp3NZxpMhv2XgEI+C0gLznvw
ziM0vFMbwNevVH9DIsLU5bEEiFf/Gc9w6mNNzK2LRAut9JXgtdvY6VE1BYOjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUj17zLPxibiLI4Op9oJbq6mwS2dgwHwYDVR0j
BBgwFoAUMfW0F2Wd9u4DmRtqtecqJACbx2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODBjMjY2ZTYtMGI4NC00MzFmLTllNzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2
NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQwMDlCQzc2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zMUY1QjQxNzY1OURGNkVFMDM5OTFCNkFCNUU3MkEyNDAwOUJD
NzY5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwYzI2NmU2LTBiODQtNDMxZi05
ZTc0LTA2ZDNkOTNlOTcwNC8wLzMxMzUzNzJlMzEzMDJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KQjANBgkqhkiG
9w0BAQsFAAOCAQEAfmvVh9K6t6AiWW9UAcnQdJ1GXVzkh3eBbGQ29k04RC/Yw5XK
oELv6uZC1/5EhuKZ3b6CbcFmfc1i3zMcza0U3fAL8xa8fbSYGTx8mVmSXljwiG12
RJ9VepCXt23CSdaX+23nF44Rd2IDsThFRWooRRTYv956jtFoImKsBdIqIU2J3UHN
656XcdSWGtPobF/d9E91Da/3BTlpdxIfVBmarncVV7vC+qQd9+cmXleht1HE1W6J
QgPwVzXMm6ayxfZGaf5ZHaxMFYNIqoBXWsRzwn3eTF62g/USndY0/QqHYW9Hgf1B
1fBjeuGpOd9+gqFqeYA3/R7Ykas7+M55nkc0Jw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:28:41 2026 by rpki-client