Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          rFWGloqg9wMb59JTrx7Hv08CQL/tPtLs/ggDburT3qA=
Subject key identifier:   1B:93:EA:05:5E:D4:47:03:4A:61:46:9C:BA:70:28:64:9B:BF:E8:3A
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       3B9482727D9AC28F9D3BF791EF53EE6C1315D404
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:36 +0000
ROA not before:           Sun 03 May 2026 02:48:36 +0000
ROA not after:            Sun 02 May 2027 02:53:36 +0000
asID:                     139994
IP address blocks:        157.85.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:82:72:7d:9a:c2:8f:9d:3b:f7:91:ef:53:ee:6c:13:15:d4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:36 2026 GMT
            Not After : May  2 02:53:36 2027 GMT
        Subject: CN=1B93EA055ED447034A61469CBA7028649BBFE83A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:1c:59:5a:ed:ba:98:c1:48:cb:d7:b4:13:
                    60:65:45:f7:d8:8a:03:b1:4d:51:bc:52:93:fe:ca:
                    30:99:6f:ad:4f:3a:64:0d:72:77:66:ec:e4:ea:57:
                    01:50:f9:2b:fd:5b:ba:6a:60:46:f6:e4:6f:a2:e2:
                    fc:d3:1f:0e:6d:1a:e0:5b:cf:77:d1:67:19:03:7f:
                    06:f9:30:63:ee:e0:fc:14:8c:70:19:c5:32:04:aa:
                    bd:ec:44:bc:04:ca:84:2e:c5:8d:fa:e1:4a:a7:09:
                    94:85:80:35:7c:6e:b0:d8:3d:5d:82:5a:88:86:29:
                    1b:ec:91:76:4a:95:a5:fa:dc:40:f7:f5:2c:e3:1f:
                    7c:49:44:45:8b:06:3d:e4:ec:58:1c:5f:e9:4f:b9:
                    da:1c:60:d4:dd:93:66:57:3e:f5:f1:f1:29:24:f6:
                    09:e7:1b:e4:64:85:d2:5b:43:5b:f7:6c:92:48:65:
                    b8:43:a7:9c:fa:81:30:2d:af:c3:da:05:7f:c5:65:
                    16:9b:ad:95:89:d8:1f:b6:8b:b4:24:27:0b:05:40:
                    e1:60:6b:b5:51:73:d8:1c:87:cf:ad:fa:07:ee:a0:
                    a1:12:9e:4e:cf:c8:f4:88:dc:6e:48:6a:04:76:89:
                    ad:71:ed:72:c5:23:a5:3a:2c:68:29:bc:36:0b:5e:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:93:EA:05:5E:D4:47:03:4A:61:46:9C:BA:70:28:64:9B:BF:E8:3A
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:02:36:e0:4d:a3:67:c9:bb:81:e9:b7:0e:be:70:88:60:
         aa:8b:d8:85:77:f1:19:cc:f0:c1:51:83:6d:b1:cb:7a:59:da:
         54:aa:00:34:a7:9d:9d:fc:92:d7:d5:db:08:ed:c7:e4:24:5b:
         a7:2a:17:97:26:bd:27:5a:f8:b4:17:93:3b:8d:4e:7e:e5:b2:
         37:42:ba:1f:46:c2:3e:d0:96:f4:8b:3f:6c:a9:99:3d:35:27:
         8b:30:e9:20:ee:97:2c:02:aa:2f:f5:4e:c9:54:0c:49:fa:75:
         e7:bd:89:f1:b2:9e:1a:6e:12:0e:6c:f9:9e:11:31:fd:1e:f4:
         48:83:55:4a:94:00:ef:80:ae:dd:c3:4b:4e:b6:bf:84:2b:96:
         e3:ad:0a:32:95:88:8d:9c:3b:12:95:59:1a:5f:9c:f9:a4:23:
         4a:f8:7c:25:d8:a2:da:42:8f:e9:42:a7:fa:f4:03:ef:77:09:
         f6:b3:ea:c2:10:70:f0:9e:e1:0b:ca:96:f8:b9:8b:6b:d2:31:
         bb:51:d9:c5:52:9c:fe:42:00:9c:e9:5f:80:06:22:d2:7a:91:
         8b:a1:42:82:b7:43:20:24:87:ae:88:0b:58:72:5b:12:e7:03:
         97:2b:69:34:f1:cb:ed:71:87:fc:b9:38:c4:f1:d6:1e:e0:38:
         c3:0f:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:49 2026 by rpki-client