Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          x3PB6S1mFL4hqiGfXLCAabZ5vODEyZGuJJoVUn+N1YM=
Subject key identifier:   02:8C:B0:4D:C9:A5:DC:8D:53:83:C6:59:FF:51:18:58:2D:B2:9C:2F
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       7777AE72E279FA9D7ED9A22010093C0D839632D1
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:32 +0000
ROA not before:           Sun 03 May 2026 02:48:32 +0000
ROA not after:            Sun 02 May 2027 02:53:32 +0000
asID:                     139994
IP address blocks:        157.85.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:77:ae:72:e2:79:fa:9d:7e:d9:a2:20:10:09:3c:0d:83:96:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:32 2026 GMT
            Not After : May  2 02:53:32 2027 GMT
        Subject: CN=028CB04DC9A5DC8D5383C659FF5118582DB29C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:4b:43:98:74:bc:49:45:4f:9b:27:1c:6e:
                    29:cc:c4:96:50:40:48:76:d3:4b:63:65:7a:33:46:
                    e5:2e:8d:22:65:3c:48:0c:7c:f5:bb:2d:a0:30:fe:
                    b3:b2:24:87:c4:a8:e9:78:5d:45:82:4a:f1:cb:a1:
                    30:0b:f8:7f:be:b8:c1:ce:7b:23:b8:b2:9c:27:cb:
                    8f:52:a1:f9:22:d4:fc:19:8a:47:c3:70:e4:cf:94:
                    e1:c7:4a:9c:90:69:18:6b:9a:b3:c7:b5:70:67:a4:
                    00:25:72:ca:ba:b5:2a:2f:96:f4:fa:38:9f:d9:57:
                    52:f0:39:30:f3:a0:19:f1:56:be:54:aa:72:0b:73:
                    ad:3b:58:35:fb:5e:6c:8b:da:b8:a6:d1:43:bb:cc:
                    c1:86:34:7e:43:47:3e:f5:f0:15:ac:2a:c8:ae:b9:
                    94:e8:c2:ab:48:88:94:b7:45:b5:5e:d6:aa:35:eb:
                    41:03:f3:3f:c6:40:e0:27:9d:48:01:ea:16:b2:da:
                    85:57:79:06:2d:c9:c6:48:45:38:c8:ca:63:d2:3b:
                    b3:e1:4f:3f:19:31:67:89:67:ba:22:11:1d:2d:ce:
                    c0:10:93:f6:fa:1b:b5:15:5b:cc:2d:f0:52:79:5d:
                    b4:30:5e:8c:89:35:76:c2:84:65:8a:97:f0:e9:ae:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8C:B0:4D:C9:A5:DC:8D:53:83:C6:59:FF:51:18:58:2D:B2:9C:2F
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:32:8e:06:ba:8b:b3:d6:d8:4c:d5:8f:81:7e:91:44:e1:ad:
         c9:1e:55:de:de:ad:7d:31:96:20:e0:71:d5:cd:0b:2f:65:b9:
         5c:ed:1c:91:17:8c:6f:fb:41:c5:92:e5:be:5c:ef:05:eb:93:
         3e:58:0e:9b:39:35:8a:a7:65:61:2d:53:52:34:3d:ec:38:1e:
         91:c2:61:46:f4:1d:ce:14:8b:ed:fd:e0:f9:05:a6:e4:8a:ba:
         75:68:53:24:d2:40:96:aa:06:96:35:ac:b1:e1:dd:08:9e:df:
         75:c6:3f:8a:2e:b3:68:62:65:80:e7:5c:0b:d1:d1:8a:fb:f5:
         25:1f:22:5b:2d:16:c9:a0:85:2f:fe:5b:b9:83:c4:23:45:6d:
         9b:88:bf:7b:c8:e5:2f:96:39:05:0b:62:5a:85:16:87:a9:f8:
         cd:56:77:54:fd:69:7a:b0:61:9c:71:60:73:27:d3:ef:a9:b8:
         b5:86:1f:f8:76:3c:23:9e:8a:6e:df:95:91:4a:62:4d:52:0e:
         29:79:b1:ec:a3:1b:11:bd:89:c2:72:9b:6e:1b:81:1c:30:14:
         2c:33:43:ca:e0:7a:7e:84:45:30:30:32:9e:94:49:3f:dd:5d:
         d8:8b:22:30:0f:7b:56:76:ab:00:e1:c2:dc:44:2f:b1:a7:76:
         cd:cd:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:14 2026 by rpki-client