Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          QC2LDey380n4oVA3aR38ShTftwvOzkB7zF7rM9ML0dE=
Subject key identifier:   0C:17:FB:3D:1B:91:BE:82:A5:28:60:9D:BF:EB:30:56:39:AE:B8:BE
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       3FC199CA3F99B4EFD57CF3F3D65F8F655F51774E
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:32 +0000
ROA not before:           Sun 03 May 2026 02:48:32 +0000
ROA not after:            Sun 02 May 2027 02:53:32 +0000
asID:                     139994
IP address blocks:        157.85.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c1:99:ca:3f:99:b4:ef:d5:7c:f3:f3:d6:5f:8f:65:5f:51:77:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:32 2026 GMT
            Not After : May  2 02:53:32 2027 GMT
        Subject: CN=0C17FB3D1B91BE82A528609DBFEB305639AEB8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:9a:54:35:87:75:8b:ab:38:e4:bf:94:65:
                    7d:e4:e1:7a:ab:e5:b5:a7:c9:32:7d:6e:b5:d6:f8:
                    9a:1b:5d:1d:af:ce:13:93:8e:a3:d6:ac:2b:dd:34:
                    11:80:d8:f7:d6:a2:53:45:0e:6f:d8:ea:47:dc:99:
                    38:c2:37:ef:d9:b2:b1:5c:cb:23:5a:46:bc:46:a9:
                    4b:6e:c6:f6:3d:4d:63:65:03:63:57:0b:17:80:62:
                    1c:31:aa:c8:c9:70:27:7f:9e:30:7d:27:83:90:73:
                    16:8d:23:0b:aa:65:f7:34:11:0f:5f:19:21:23:44:
                    1e:de:9a:ec:cd:fd:8e:3a:8f:c3:a0:eb:67:ff:90:
                    13:4e:46:ff:b5:13:58:a9:bc:3e:12:18:04:23:a5:
                    71:63:19:28:3d:2e:9e:c8:12:8a:ae:54:b8:00:32:
                    3f:c5:23:4b:2f:1e:89:9c:15:fc:98:4d:3e:4e:69:
                    57:04:68:73:a2:3d:b8:e3:11:6a:b1:f8:70:08:e8:
                    31:d6:3f:e2:21:81:7f:af:c9:22:43:b6:76:be:d2:
                    71:47:ad:17:b1:cd:3f:0b:43:6b:56:ea:eb:5c:fa:
                    fa:ca:5b:f0:76:d0:51:0c:05:28:2c:8f:2c:a8:cf:
                    e6:36:6e:f9:cf:56:3c:ba:d1:b8:4a:1b:d0:be:80:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:FB:3D:1B:91:BE:82:A5:28:60:9D:BF:EB:30:56:39:AE:B8:BE
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e1:70:74:2d:fa:3d:79:96:5e:66:67:75:e3:d5:15:9b:93:
         43:a6:98:e0:27:70:9d:d3:5e:aa:6d:91:00:be:af:89:0f:b5:
         19:84:4d:4e:3d:11:03:04:2c:c9:a0:a9:ea:fb:e1:22:fa:57:
         dd:2f:bd:d8:54:51:9e:57:10:20:2c:44:2e:4e:76:dc:bf:cf:
         1c:70:58:67:b0:37:9d:12:44:41:8b:2b:47:7f:97:22:ce:ed:
         34:52:3c:1f:bd:d7:73:83:11:12:11:49:68:9d:de:a6:98:18:
         6f:6d:f2:1d:6b:6c:9b:58:53:b4:04:b3:ca:b1:18:e8:35:0c:
         8d:29:37:37:9a:12:b4:79:fa:3d:2e:2f:15:80:4e:e2:b9:d9:
         ae:24:7e:81:66:9e:fe:af:3e:d9:9b:38:04:d1:ad:14:98:6d:
         01:8c:ef:c7:ce:7c:f9:ac:42:b8:69:21:59:0d:8a:ae:f1:9e:
         c7:46:3d:85:6c:a2:3f:b4:12:f0:a3:c8:9e:19:82:0b:e6:97:
         d6:b3:8e:70:3e:9b:17:a9:78:b9:d2:40:bc:fd:d6:94:04:39:
         d5:50:59:6d:5c:8f:0b:d0:27:23:86:1c:db:e5:03:58:b1:74:
         2d:44:2f:6d:99:18:31:5b:ee:e4:9b:bd:52:3e:9e:56:05:7d:
         97:8b:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:53 2026 by rpki-client