Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          ObIrDGEV6QzinRDK3oWe/YhJWqH6IDTcTeePolEp5m8=
Subject key identifier:   64:15:A9:C1:F7:E9:E1:3A:B9:25:AB:9D:EA:83:34:9E:30:D2:3C:8D
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       0B940BE0AAA168D9FCF194C1EDB23C4E58F5CD23
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:33 +0000
ROA not before:           Sun 03 May 2026 02:48:33 +0000
ROA not after:            Sun 02 May 2027 02:53:33 +0000
asID:                     139994
IP address blocks:        157.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:0b:e0:aa:a1:68:d9:fc:f1:94:c1:ed:b2:3c:4e:58:f5:cd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:33 2026 GMT
            Not After : May  2 02:53:33 2027 GMT
        Subject: CN=6415A9C1F7E9E13AB925AB9DEA83349E30D23C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:66:6f:e8:fb:79:c9:a6:eb:c0:d7:d7:f3:
                    28:64:76:b6:26:df:59:aa:47:4d:12:b2:b1:f1:69:
                    31:43:a6:f1:65:14:0e:dc:fc:42:46:e8:22:78:9d:
                    7f:39:a1:35:b8:54:dc:a8:1a:8f:f4:01:3e:da:30:
                    6d:64:0d:66:e6:81:ec:de:8a:0c:8f:c5:5a:ff:d1:
                    87:cc:38:c6:3b:d0:91:24:ac:a8:29:13:2d:ec:9a:
                    56:2b:0c:fe:88:96:c3:d3:ba:17:48:f6:aa:17:60:
                    f4:5e:dd:90:82:c9:9e:85:3a:ba:64:e4:00:a5:4e:
                    63:5b:b2:58:e7:ef:ec:82:04:a0:5c:c3:6b:69:ed:
                    0b:b3:90:91:90:56:11:38:d5:08:e6:59:ab:16:df:
                    22:51:38:eb:4b:7a:c3:67:94:d0:a7:42:9a:aa:eb:
                    1f:45:b5:9e:be:78:bd:08:4c:08:f8:a2:fd:7d:3f:
                    06:fc:f1:f0:9f:16:5d:36:50:48:73:4d:60:dc:f6:
                    17:fc:ea:3a:de:b7:52:64:4f:2c:e6:7c:0b:70:67:
                    c5:ec:32:e9:b8:79:97:1d:32:98:c9:9f:e2:13:d0:
                    42:25:44:7c:40:ba:fd:e5:dd:08:67:8d:f5:ff:31:
                    50:0d:5d:d3:75:2e:61:76:2a:78:97:6b:b6:a2:1e:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:A9:C1:F7:E9:E1:3A:B9:25:AB:9D:EA:83:34:9E:30:D2:3C:8D
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:62:62:d8:bc:af:88:c0:ab:37:ae:fe:82:2c:1b:6e:bc:fc:
         1c:84:b6:8b:34:fa:97:c1:26:0d:3b:17:41:93:3f:14:31:6e:
         91:b0:91:e7:dc:b0:57:f8:89:d3:bb:c1:76:07:64:79:bd:cf:
         26:eb:f2:58:19:10:6f:f6:c4:bd:4f:b0:81:3c:41:31:76:37:
         d7:2a:f0:93:ef:83:4d:7a:75:55:05:e0:be:39:68:e1:7b:f1:
         0d:99:73:fa:66:7f:8a:b5:68:2a:9b:11:b2:d6:9d:ec:55:2f:
         a9:a4:ce:11:d5:67:4f:af:fa:a8:12:4f:25:0b:88:22:04:40:
         2f:d5:ad:7d:1f:cf:47:a5:fe:36:e4:9a:63:c8:5a:66:cd:f7:
         09:73:df:d4:d8:85:03:5b:ca:e1:1c:96:3d:40:d3:ab:b8:4a:
         59:1c:34:4b:95:f9:0e:69:19:16:be:db:11:d6:86:73:eb:87:
         15:2b:76:72:b6:5f:34:fd:14:a8:a5:ff:84:9b:6c:07:6e:bb:
         4f:7c:31:6c:83:40:3c:e5:cc:fa:c9:e0:2f:f2:6b:44:80:4b:
         df:9e:5b:76:62:f7:75:26:d2:6d:d2:19:7b:dd:4f:72:7a:2b:
         ef:b5:06:5e:23:0c:bd:67:e9:ab:68:8e:52:bb:b9:4a:9a:a4:
         19:3d:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:42 2026 by rpki-client