Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa
File:                     3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (raw, json)
Hash identifier:          wbDwlUlyFrGZQKl0gY5JTi07kDW91OicmcdUSy58sFE=
Subject key identifier:   39:C0:D4:58:E8:08:EB:93:47:F8:06:15:28:CB:6D:B8:9D:86:4C:46
Certificate issuer:       /CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
Certificate serial:       7B436763BE600501F875AB9300580DC60563805E
Authority key identifier: 19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa
Signing time:             Sun 03 May 2026 02:53:27 +0000
ROA not before:           Sun 03 May 2026 02:48:27 +0000
ROA not after:            Sun 02 May 2027 02:53:27 +0000
asID:                     45287
IP address blocks:        150.129.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl
                          rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:67:63:be:60:05:01:f8:75:ab:93:00:58:0d:c6:05:63:80:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F593FB6094A53D2F567FA23EBD00CEE6BD7F63
        Validity
            Not Before: May  3 02:48:27 2026 GMT
            Not After : May  2 02:53:27 2027 GMT
        Subject: CN=39C0D458E808EB9347F8061528CB6DB89D864C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:b5:c5:2e:11:7f:25:ff:4e:e2:8b:ab:43:
                    17:64:af:73:ef:5c:e3:fd:6a:fd:70:16:ca:e2:9c:
                    d7:d0:96:d9:ab:90:f8:12:35:15:02:ca:1a:b5:64:
                    81:62:95:4b:8d:79:94:3e:86:b1:cc:85:03:12:87:
                    ec:28:2f:9e:9b:50:6e:ec:58:89:73:73:64:c8:34:
                    3e:02:34:d7:54:f3:d1:6c:42:4f:b2:4d:e0:73:20:
                    e5:4c:2f:50:bd:dc:d7:25:b5:17:44:a9:1e:6a:e6:
                    96:96:2b:c1:2d:0b:54:74:35:5b:a4:dd:30:f2:b3:
                    df:17:42:18:2f:9d:27:f5:40:34:c9:da:2a:24:3d:
                    ca:7d:a4:24:63:e7:19:53:16:1d:73:99:2d:49:12:
                    3a:02:51:d0:ef:65:54:22:b6:2b:79:84:8c:bf:d2:
                    9e:69:9c:8a:f5:bb:ab:08:6f:1e:f2:65:f1:5a:cf:
                    32:45:1d:57:a0:b8:d7:e3:ac:ce:e0:db:b1:ed:83:
                    b7:a7:92:6b:20:85:33:6f:19:91:80:83:f2:77:b2:
                    a2:93:8a:10:fb:86:26:5c:a8:ca:1a:97:1f:d8:5b:
                    a6:3d:80:cf:0a:bc:45:34:30:94:9b:a6:fa:28:0a:
                    f5:d2:8f:36:5b:cc:5a:03:8f:a3:c5:19:c4:4f:d9:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C0:D4:58:E8:08:EB:93:47:F8:06:15:28:CB:6D:B8:9D:86:4C:46
            X509v3 Authority Key Identifier:
                keyid:19:F5:93:FB:60:94:A5:3D:2F:56:7F:A2:3E:BD:00:CE:E6:BD:7F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19F593FB6094A53D2F567FA23EBD00CEE6BD7F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3135302e3132392e35362e302f32322d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:8a:af:49:f8:a5:23:f2:f8:8f:f3:5c:f1:ff:a1:aa:19:08:
         2d:58:20:6e:be:5c:61:81:b3:0e:db:18:06:16:aa:3d:4e:23:
         94:4d:22:17:a2:20:05:0d:13:df:6f:9a:51:80:bd:01:97:e7:
         a6:89:5a:85:8a:70:d9:ec:24:ea:df:41:a5:9d:1e:68:d4:90:
         9c:19:4b:ed:d9:a4:3d:ca:d5:9c:5b:c9:2a:df:b6:66:3c:c6:
         77:a6:45:ae:a2:24:73:19:75:ec:c7:71:a3:85:cb:58:0b:4b:
         88:e9:bb:e9:38:0c:c6:1f:af:9f:c6:4a:25:d7:e6:9a:24:31:
         5f:b3:d9:85:dd:c9:dd:e3:c8:59:ce:e7:57:cc:b0:07:32:13:
         10:c2:a5:10:15:55:92:07:32:67:c3:ae:df:85:a6:41:7e:48:
         cf:de:ac:a7:d7:c6:8d:fc:64:4e:0f:43:47:88:ed:14:1a:7c:
         20:f1:f9:17:e1:01:a1:63:72:47:b2:46:82:02:6c:ed:31:7f:
         3a:2e:fb:d3:0e:52:6d:cb:13:50:5f:66:85:d5:93:6a:4e:6b:
         f6:55:e4:7b:9e:3d:47:9b:16:7d:c9:53:b3:6e:c7:22:59:8e:
         0b:bf:78:be:10:f5:06:1b:81:73:c7:73:f5:00:27:e4:a4:3b:
         ea:72:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:08 2026 by rpki-client