Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
File:                     3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (raw, json)
Hash identifier:          M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=
Subject key identifier:   EF:FB:E6:96:D0:F5:65:79:31:AF:98:4D:9D:A8:C5:F7:E2:46:A8:9C
Certificate issuer:       /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial:       485DD71E92C34936414F47EA7BC28DC1C9B9B0D8
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
Signing time:             Sun 03 May 2026 02:52:31 +0000
ROA not before:           Sun 03 May 2026 02:47:31 +0000
ROA not after:            Sun 02 May 2027 02:52:31 +0000
asID:                     152374
IP address blocks:        157.15.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
                          rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:d7:1e:92:c3:49:36:41:4f:47:ea:7b:c2:8d:c1:c9:b9:b0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
        Validity
            Not Before: May  3 02:47:31 2026 GMT
            Not After : May  2 02:52:31 2027 GMT
        Subject: CN=EFFBE696D0F5657931AF984D9DA8C5F7E246A89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:87:5d:a0:f8:76:c4:5d:83:3a:a1:3b:95:
                    73:38:a6:7b:0d:2c:34:ed:53:8d:8d:f4:19:00:f2:
                    f9:12:68:ad:4d:82:29:a1:ab:e2:f7:6f:52:67:a9:
                    6a:4f:97:90:a0:8d:f8:f5:a8:96:21:30:fa:a3:02:
                    98:73:14:f1:6e:e5:68:f0:58:2b:dd:c3:ce:73:74:
                    61:7f:b8:30:7f:d7:96:74:23:3a:70:0a:2f:a9:18:
                    4a:cc:0c:f5:8e:6e:d1:c9:91:cf:20:b0:5d:48:9b:
                    0e:f9:b3:84:a9:06:18:c2:d8:b2:62:d8:90:bf:d3:
                    af:f1:3e:6b:69:55:cc:84:76:8f:94:bb:ef:bf:3c:
                    1b:cb:80:94:25:8d:c5:c3:14:e2:1f:a5:b7:b5:47:
                    fd:68:60:51:41:56:0d:dd:f8:f3:7a:f5:7b:4f:b7:
                    92:93:8b:97:e8:ce:e8:23:c7:ab:75:05:66:89:01:
                    e2:11:32:6c:54:66:9c:7a:f0:50:3a:14:cd:8d:0a:
                    e4:a3:13:38:cb:db:bd:ab:65:0c:44:3e:d7:f7:8e:
                    e4:6d:24:22:d1:16:1b:dd:ca:df:f9:60:de:39:7b:
                    80:9a:c5:3f:f9:12:b7:b7:03:e8:89:0f:8f:e0:56:
                    e4:61:74:17:df:b7:f7:d0:d9:09:cb:28:74:f2:00:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:E6:96:D0:F5:65:79:31:AF:98:4D:9D:A8:C5:F7:E2:46:A8:9C
            X509v3 Authority Key Identifier:
                keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:7c:e8:dd:d0:a9:06:3a:57:93:94:42:a3:f8:95:ac:45:
         60:92:b0:29:33:50:6a:86:cb:e8:dd:cc:5f:3e:77:5b:ef:d2:
         9a:a6:b8:95:81:6f:1b:29:f3:91:a7:60:e6:a1:a6:90:75:1f:
         d8:68:49:a8:ff:20:ae:a9:b4:09:97:2e:4a:69:d1:a5:1f:1a:
         4f:31:6d:31:08:8a:24:a8:08:8c:b6:8a:52:d0:bc:25:85:be:
         ee:28:ce:59:b6:23:de:dd:6a:e9:18:0c:a9:5a:4f:fa:f9:2f:
         33:25:92:96:f8:0a:13:f6:b2:0d:14:3d:69:02:05:77:a6:52:
         5a:ff:65:62:af:f9:08:49:1a:ba:e5:5e:76:28:be:18:22:c5:
         de:6c:d6:88:ef:19:68:2d:91:7d:b6:af:45:64:bb:4a:ec:27:
         8b:fd:bf:87:42:0a:f5:60:d2:24:6e:b9:b4:bb:8a:b8:14:20:
         4e:64:18:36:6c:4d:05:20:b5:4f:08:50:b2:f6:7a:54:05:fb:
         43:69:fb:5c:6d:0a:65:1e:b4:dd:22:3a:e6:9e:dc:65:47:3a:
         33:6b:e3:81:ac:a3:93:1c:d1:7c:cc:d1:7e:ce:fc:da:80:68:
         c9:e7:a1:cb:1d:7c:76:05:b3:19:da:f8:5a:1a:9b:13:2e:62:
         cf:cf:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:20 2026 by rpki-client