Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          Hje9hVkqq6yIKosGAXlY2yF2ItW4gETtApNe4b6AB20=
Subject key identifier:   55:44:95:36:D6:0F:3C:A9:5B:73:46:2E:F5:94:1A:9E:6E:5F:0A:C6
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       0D3BA88BE92628DF2B66EA8B4EB6848E390BDF40
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:35 +0000
ROA not before:           Sun 03 May 2026 02:48:35 +0000
ROA not after:            Sun 02 May 2027 02:53:35 +0000
asID:                     139994
IP address blocks:        157.85.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:a8:8b:e9:26:28:df:2b:66:ea:8b:4e:b6:84:8e:39:0b:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:35 2026 GMT
            Not After : May  2 02:53:35 2027 GMT
        Subject: CN=55449536D60F3CA95B73462EF5941A9E6E5F0AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:01:22:b5:9d:d3:9f:47:42:e3:2e:8a:28:c6:
                    c3:de:15:d3:a0:82:2e:2a:85:98:a4:07:c2:de:1c:
                    60:ac:6a:d5:41:3a:4c:57:ae:a1:25:79:f6:e6:30:
                    d6:b2:cb:1d:b7:fc:16:50:07:33:7a:f4:78:ed:85:
                    8c:92:fe:de:78:6f:22:e8:68:c4:36:1a:10:eb:6b:
                    2c:d4:ed:ed:56:54:4c:d2:04:ad:bd:8b:37:37:d5:
                    40:b7:f3:2e:80:5e:50:89:ee:74:15:fe:f9:cb:cc:
                    3b:88:b2:66:7e:da:71:81:e8:96:60:82:7d:1c:d5:
                    95:d4:25:52:5e:55:55:3d:80:b0:ed:cb:85:0a:21:
                    cc:8c:28:2e:60:16:4e:6c:df:ae:b8:14:7d:b8:d4:
                    b9:1a:b6:fd:b0:b9:4b:6d:18:36:df:b9:eb:09:d6:
                    cf:c6:3e:86:0e:7e:ae:08:b9:82:c1:50:9f:bf:75:
                    0e:b7:48:a2:0a:b4:e6:b0:58:70:50:1d:b2:12:6f:
                    35:a7:c0:a4:7d:45:16:83:f3:7d:a1:5a:f4:17:7e:
                    8f:8e:36:53:12:df:40:89:dd:57:8d:66:f7:33:f8:
                    cc:f6:a4:49:30:78:b0:58:48:f3:dc:8f:eb:40:48:
                    02:da:87:54:32:6f:e8:bf:4c:91:99:c9:e4:a3:f7:
                    37:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:95:36:D6:0F:3C:A9:5B:73:46:2E:F5:94:1A:9E:6E:5F:0A:C6
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:e5:78:3b:b9:13:e1:a4:7c:7d:84:87:6f:6f:ca:f7:6d:
         8e:ae:f3:dd:86:bd:43:de:86:b0:63:d8:61:25:41:51:df:8d:
         ce:60:e3:9c:16:3c:88:bb:d7:0d:51:35:89:33:3f:d0:93:f1:
         3e:a6:f4:a3:44:6e:99:63:53:1a:b0:f0:87:e6:49:a7:3c:11:
         6a:f3:d5:3e:76:b5:69:33:93:1b:22:b4:15:ea:8a:58:ef:26:
         c4:3b:ff:82:bf:11:8e:be:25:32:19:2b:c1:f5:8e:70:69:d2:
         41:b6:6c:a0:62:f9:2a:cd:51:58:b4:46:1d:a5:56:b1:b7:03:
         08:57:f1:84:e6:f1:51:dc:ce:12:dc:8d:0a:61:a9:a2:9a:5d:
         b1:e1:8b:df:18:8f:78:8a:1f:e7:0f:ec:a0:58:03:e5:54:e0:
         02:fc:ac:1f:4f:53:b7:54:8f:3a:9b:87:c9:76:61:bd:b8:90:
         c4:21:1d:c0:ea:e7:6e:71:71:bd:ac:d2:1a:5d:84:42:6c:36:
         56:e0:59:8a:c2:17:5b:04:51:e4:70:13:ff:4e:43:89:d8:ee:
         d9:04:e6:8c:7f:15:41:c9:16:7e:55:eb:f0:ec:06:66:2a:a0:
         64:df:5a:b1:d2:3b:13:06:e9:00:41:b6:79:48:39:17:dc:1c:
         cc:96:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:25 2026 by rpki-client