Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          4IlDGU84GbqCCVvDzRSkdm0aUkGzv5fEvX6iGVv0YxM=
Subject key identifier:   E8:F0:79:BB:CC:FA:AD:5C:F2:83:62:FB:60:30:5C:BE:F2:87:A2:32
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       318F1D64EFABBC94E467535EAFA3886076205ECB
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:36 +0000
ROA not before:           Sun 03 May 2026 02:48:36 +0000
ROA not after:            Sun 02 May 2027 02:53:36 +0000
asID:                     139994
IP address blocks:        157.85.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8f:1d:64:ef:ab:bc:94:e4:67:53:5e:af:a3:88:60:76:20:5e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:36 2026 GMT
            Not After : May  2 02:53:36 2027 GMT
        Subject: CN=E8F079BBCCFAAD5CF28362FB60305CBEF287A232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:2e:de:4f:f2:93:5f:e7:0e:2e:96:91:e0:
                    20:fb:73:77:fc:8f:83:25:c6:9c:7c:fc:58:73:b1:
                    e1:8c:8a:64:5e:02:84:1e:f6:63:85:f1:c4:8b:18:
                    4b:db:60:c1:a8:16:2f:5c:d0:90:27:a9:fc:52:52:
                    92:19:15:14:76:9e:4c:f6:29:92:21:5d:b0:50:8e:
                    c1:7c:eb:be:b8:91:d3:cb:1c:12:14:7a:85:5b:26:
                    b4:e0:ae:86:72:d0:04:88:b9:ad:ae:79:0a:47:f8:
                    b6:71:03:08:87:a3:89:66:fc:31:d9:e6:2b:b8:0f:
                    e2:31:eb:86:6f:ba:40:6a:e3:cc:21:3f:63:8d:71:
                    60:c6:d9:88:4c:e3:62:f2:c2:0a:1c:d3:ca:6b:79:
                    30:c4:16:69:2e:b0:e4:1a:45:ec:2c:41:44:e5:00:
                    74:57:87:23:41:63:87:55:a9:85:2f:b7:56:25:21:
                    b3:15:c4:04:e5:52:4f:57:de:1d:41:ad:47:84:ad:
                    9d:fd:54:23:f6:97:a4:d4:ef:d4:8b:8e:02:a7:7b:
                    93:0a:ba:a2:89:9f:1e:d2:05:34:27:f8:35:9a:50:
                    5d:de:9b:7d:fd:47:49:2f:d9:09:41:28:bb:4a:d1:
                    31:ba:b8:c6:a6:1d:31:18:5b:27:48:87:52:a2:7b:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:79:BB:CC:FA:AD:5C:F2:83:62:FB:60:30:5C:BE:F2:87:A2:32
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:f4:0b:69:a0:04:c3:86:cc:7d:c3:6a:01:30:f9:7b:45:
         eb:6d:10:61:a7:63:10:75:a7:cd:b6:10:1a:1a:4b:72:17:99:
         9f:cf:04:df:ae:6c:96:02:b4:31:9d:bb:79:09:c1:70:84:ba:
         b8:8f:1b:2d:23:45:a1:f8:c8:a2:58:d6:15:8d:cf:77:f5:f6:
         55:df:3b:c9:22:f4:e8:8f:a8:9b:62:90:7d:16:1d:c7:4b:72:
         65:15:ea:a8:98:4a:9e:a7:8c:8c:91:f7:e9:0c:8a:76:0a:a4:
         45:2f:a8:df:1a:c9:9e:01:06:2c:7b:d6:45:00:cd:93:74:59:
         6d:ae:12:11:6e:9e:68:51:39:b4:fc:2f:44:ba:7a:ef:04:53:
         dc:02:da:98:4d:f1:22:57:6d:59:2c:87:b8:be:2c:b7:ec:3a:
         b6:ca:5e:a5:a3:14:52:23:f4:d1:22:8d:f2:c2:ec:06:d2:0b:
         72:51:1e:21:14:1c:c6:9b:2c:d4:42:a9:fb:08:c2:61:24:18:
         c7:4d:71:83:87:48:d5:25:87:1d:9f:89:a1:80:58:a5:4b:9c:
         2d:df:75:3c:30:77:d6:0f:34:a3:f8:5c:24:4b:a1:9a:b1:17:
         0e:79:3a:14:8f:77:6f:ba:c4:96:b0:c2:91:93:29:55:37:b6:
         33:2f:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:56 2026 by rpki-client