Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/3135372e36362e35372e302f32342d3234203d3e20313530393835.roa
File:                     3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (raw, json)
Hash identifier:          F4rX5kdBMIK+q1JAnOl0J4l31YWcV9qdCJ59RuEth5I=
Subject key identifier:   5A:92:71:9E:D4:CB:1F:9C:3E:99:33:AB:B4:93:B4:F5:A8:19:84:FF
Certificate issuer:       /CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
Certificate serial:       2D7396933CD8642A75C0577497E0050E984A9A65
Authority key identifier: 1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/3135372e36362e35372e302f32342d3234203d3e20313530393835.roa
Signing time:             Sun 03 May 2026 02:52:24 +0000
ROA not before:           Sun 03 May 2026 02:47:24 +0000
ROA not after:            Sun 02 May 2027 02:52:24 +0000
asID:                     150985
IP address blocks:        157.66.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl
                          rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:73:96:93:3c:d8:64:2a:75:c0:57:74:97:e0:05:0e:98:4a:9a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D911706C9A5E8A4993B1AD519498DE9F609FD97
        Validity
            Not Before: May  3 02:47:24 2026 GMT
            Not After : May  2 02:52:24 2027 GMT
        Subject: CN=5A92719ED4CB1F9C3E9933ABB493B4F5A81984FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:d6:53:1c:48:78:4e:21:c8:24:e3:42:91:
                    9d:7e:f8:10:1c:ce:f8:de:7e:3f:77:3d:1e:5f:fb:
                    65:32:59:66:fc:48:d9:36:5a:40:25:80:c9:8e:83:
                    9c:a0:d2:d2:78:fa:79:d2:36:db:44:e6:65:3f:e9:
                    c2:5f:e4:bc:90:63:08:12:b3:8e:8c:61:ed:7a:e8:
                    36:e4:6d:d2:e3:97:a5:e9:fc:26:c2:c1:93:4c:5f:
                    aa:22:50:14:1b:13:8c:07:82:74:f3:b4:78:24:7e:
                    12:4a:1c:21:59:3c:b5:04:dd:31:37:51:76:af:01:
                    f2:fa:b0:39:7c:d3:92:a8:fc:92:f7:06:6d:75:d7:
                    f9:22:96:37:e3:69:42:1a:ac:8d:d4:56:53:4f:4a:
                    16:89:49:b9:d1:7c:db:61:ef:8f:e5:b8:9b:0b:e3:
                    7b:b0:a4:b1:9d:b6:1e:c3:40:a7:74:24:36:be:e9:
                    6e:c1:a4:84:42:90:ec:c0:32:a1:0b:7d:3e:da:de:
                    28:c0:16:2c:ac:41:b4:49:61:78:dc:b3:5d:0f:e8:
                    32:b3:72:f0:a9:cc:06:f9:53:1d:b4:66:04:0c:be:
                    b9:17:34:2c:a7:a1:b7:c5:8a:1b:75:2b:5f:2a:18:
                    43:9d:d5:b3:a0:7a:f8:d1:dc:a1:d4:79:8e:30:4c:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:92:71:9E:D4:CB:1F:9C:3E:99:33:AB:B4:93:B4:F5:A8:19:84:FF
            X509v3 Authority Key Identifier:
                keyid:1D:91:17:06:C9:A5:E8:A4:99:3B:1A:D5:19:49:8D:E9:F6:09:FD:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D911706C9A5E8A4993B1AD519498DE9F609FD97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/3135372e36362e35372e302f32342d3234203d3e20313530393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:ab:87:fe:a7:81:4b:45:15:3c:be:e4:d0:c9:f0:04:ac:
         93:10:90:d6:58:0e:81:67:b6:4c:25:45:2a:47:b0:58:6b:c2:
         14:bf:f9:f5:1e:58:29:1d:f5:16:60:cc:80:78:01:53:e4:e9:
         bc:fe:87:62:af:0d:0c:e4:11:c5:29:ad:74:1e:d8:b9:a2:b8:
         0c:cf:1f:ed:6e:c6:7c:b6:94:9f:8b:a4:79:a2:0f:25:05:1b:
         2c:9d:c9:94:7e:45:25:5d:14:f1:d7:0b:98:c3:a6:65:b3:02:
         a3:96:d0:df:ac:89:22:62:ca:c6:66:e6:f7:82:fc:4b:c1:8c:
         5a:e4:88:18:c6:99:f7:90:24:e2:d9:de:c6:6f:b2:c0:c1:b1:
         3f:68:00:33:86:87:5d:a4:ac:d6:e7:b0:11:c9:f2:44:2b:8b:
         41:b0:8b:a9:a9:c1:d2:c7:b7:7f:bb:9c:f4:f8:bc:02:78:f8:
         0f:9c:77:3f:7a:3f:c7:3f:4b:39:70:fe:35:ff:ef:8f:a1:65:
         b2:b6:8e:03:62:b7:bf:7a:60:e3:dd:38:b6:c9:a9:2f:02:5e:
         53:27:d5:47:2a:ba:c5:8d:2a:ef:1b:3b:19:d1:96:36:32:d5:
         68:6f:5c:a2:31:c9:89:5a:32:42:bb:90:25:33:61:26:f1:1a:
         3b:4a:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:20 2026 by rpki-client