Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          FEzlU6iDtAm5VxYS/x9DfVZeXu3tAhzM99suK39xKu8=
Subject key identifier:   E1:69:50:6F:34:9C:83:AC:DE:4B:7A:70:9C:3E:98:4B:2E:1E:1B:0D
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       04C8331054F857BB6D4E1E6340DEBB55D1698599
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:32 +0000
ROA not before:           Sun 03 May 2026 02:48:32 +0000
ROA not after:            Sun 02 May 2027 02:53:32 +0000
asID:                     139994
IP address blocks:        157.85.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c8:33:10:54:f8:57:bb:6d:4e:1e:63:40:de:bb:55:d1:69:85:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:32 2026 GMT
            Not After : May  2 02:53:32 2027 GMT
        Subject: CN=E169506F349C83ACDE4B7A709C3E984B2E1E1B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:d2:21:4e:23:b0:66:58:b5:8b:d3:ed:02:
                    a1:62:eb:90:0a:d3:89:1a:20:e0:81:a4:31:4a:6a:
                    f1:6e:39:e5:6c:17:32:0c:4d:d1:8a:19:f5:ee:43:
                    b2:68:e5:9b:09:37:a6:2d:64:6a:5b:60:a4:20:85:
                    18:a8:6d:73:6a:9f:8b:e2:42:a6:82:a0:20:fe:f7:
                    ba:0c:5c:3b:dc:77:4f:81:29:4d:ef:42:33:88:11:
                    24:d8:b0:cc:ab:3f:12:06:97:4d:12:96:9b:54:5c:
                    a1:84:1a:92:ba:a0:4b:c5:70:37:86:7d:27:47:8c:
                    20:1b:cd:f8:96:2c:e0:2a:aa:7e:1b:bd:04:98:60:
                    90:3d:7a:ba:54:bb:6e:9b:1d:db:8f:b2:5a:93:f8:
                    11:44:b1:55:90:0e:28:a9:b7:e9:7a:ae:c0:c4:fe:
                    f2:f9:d9:5d:20:a1:5c:84:0e:f6:c6:08:bf:7a:9a:
                    23:aa:67:50:76:21:5f:3d:a7:34:9f:3d:8d:3a:66:
                    2b:c9:36:60:af:ab:30:12:72:8a:c4:03:9f:4a:c2:
                    be:f4:ca:76:36:75:a2:3c:78:71:7c:7c:d3:c2:ad:
                    25:38:41:39:a0:96:8e:ea:ea:1d:a2:41:c8:63:06:
                    77:a3:6d:0c:93:79:15:3f:fd:51:1a:22:f8:8e:29:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:50:6F:34:9C:83:AC:DE:4B:7A:70:9C:3E:98:4B:2E:1E:1B:0D
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:04:3b:53:aa:02:d6:b6:e3:51:79:a3:5a:e1:cf:6e:3d:2f:
         be:df:5b:ce:3b:25:44:0b:5f:3f:b7:b4:9b:b4:04:87:4d:2e:
         16:bd:4d:21:65:89:f2:9e:35:62:fd:d6:dc:bc:ad:99:6f:58:
         b9:bc:ea:7a:6f:5f:72:06:20:93:3a:db:14:a7:cb:33:66:e4:
         a2:02:96:2a:80:dd:1a:31:92:a7:ca:ac:0d:71:aa:84:48:54:
         87:ca:0b:4a:e4:23:61:18:61:65:59:a9:10:ce:98:f9:6b:df:
         d8:0b:46:7e:c3:f0:8c:95:c6:62:cc:c7:7b:b1:ad:e1:c6:b8:
         8c:69:08:4f:ad:37:fd:c6:fe:f1:49:e1:d1:5a:36:1c:4b:81:
         80:65:49:ae:66:bc:e4:92:e8:00:4d:a0:eb:ca:9c:e4:c8:0a:
         66:7d:f8:2a:2d:d8:7e:cc:56:3c:7f:18:21:b3:f1:d3:19:f3:
         4e:23:8b:76:d6:63:fa:a1:e4:8d:2b:a2:fc:31:10:97:5c:50:
         52:b3:ef:15:a8:ae:19:13:c9:43:1e:67:91:6a:20:cb:c3:c2:
         e8:32:5e:a6:d9:89:80:01:c2:2a:29:92:c2:9d:5a:dc:c1:13:
         b6:50:77:f6:f5:45:fc:12:42:33:96:32:59:70:f4:fc:05:a6:
         c0:4d:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:20 2026 by rpki-client