Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          KPBtds8dAYc4SnJacxB7UmIZ8uX1YODx1/1ytFzQRxg=
Subject key identifier:   92:FE:CB:44:CC:02:9B:0A:AB:2A:7B:74:D7:50:6A:2E:70:CA:81:DF
Certificate issuer:       /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial:       1DC0395B4AB1ADBAF295B7704860DC083939A6A7
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 03 May 2026 02:53:34 +0000
ROA not before:           Sun 03 May 2026 02:48:34 +0000
ROA not after:            Sun 02 May 2027 02:53:34 +0000
asID:                     139994
IP address blocks:        157.85.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
                          rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c0:39:5b:4a:b1:ad:ba:f2:95:b7:70:48:60:dc:08:39:39:a6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
        Validity
            Not Before: May  3 02:48:34 2026 GMT
            Not After : May  2 02:53:34 2027 GMT
        Subject: CN=92FECB44CC029B0AAB2A7B74D7506A2E70CA81DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:b0:02:d4:9f:84:f8:15:8b:ae:bf:a3:b1:
                    ee:98:f7:60:e4:43:9e:c1:8e:7a:91:75:67:07:9d:
                    88:f7:47:28:1a:38:5c:43:72:19:25:f2:48:f3:74:
                    a6:bc:0c:19:44:09:48:79:1c:6b:3c:8c:33:12:f0:
                    43:75:1d:63:3b:98:4f:eb:28:42:28:87:89:ee:3a:
                    cc:6d:09:c2:f8:ca:c7:97:09:0f:e4:c5:cd:42:e8:
                    7f:ed:16:fd:15:d3:98:6d:20:72:e9:b6:2e:6a:79:
                    61:f2:3f:fd:39:c8:e0:db:61:75:8b:13:26:80:b7:
                    f8:50:48:8a:81:b9:6b:c6:a3:fa:fd:da:a8:84:0b:
                    14:ef:6e:1f:b6:ca:d0:a6:3d:e6:71:a6:29:f6:c1:
                    91:15:b0:f9:3f:02:98:b0:bc:23:c9:d3:64:71:ff:
                    3f:2e:53:ac:a2:1b:45:42:48:3e:b6:c4:b7:21:b8:
                    1c:a1:2c:2f:c0:4b:54:f6:91:5a:f4:51:0f:ea:bd:
                    b6:ff:f4:3f:c1:22:b7:cf:dd:31:72:68:ab:9b:f5:
                    b6:31:7a:0b:bc:9f:25:19:24:7a:eb:aa:22:1c:62:
                    1c:a5:96:5a:9d:bf:15:96:c9:bc:24:00:7e:51:9b:
                    52:d0:0c:8f:c1:41:76:9f:d4:a0:d3:02:1d:f9:3b:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FE:CB:44:CC:02:9B:0A:AB:2A:7B:74:D7:50:6A:2E:70:CA:81:DF
            X509v3 Authority Key Identifier:
                keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:0e:e6:c7:57:8b:e2:23:26:70:13:a7:1a:d8:f4:78:2f:
         0b:99:62:65:37:ad:fc:3e:07:49:45:cc:ca:16:e9:88:a4:89:
         1c:af:fa:c3:44:ec:a9:b5:97:a3:f5:e6:ed:73:50:dc:1f:4a:
         de:4d:46:9f:5f:2c:73:58:2a:4e:04:45:a1:ef:d5:7e:7f:39:
         13:c4:4d:b3:99:47:ae:49:d1:e4:9e:6f:bc:c2:67:b4:26:21:
         b2:5b:2f:b5:f3:1f:a6:25:10:5a:41:57:de:62:ab:ad:cf:fc:
         21:42:7e:fc:7e:fc:b1:86:13:f7:21:33:0a:31:80:65:87:48:
         89:c0:38:8e:75:d9:72:bd:77:74:a2:53:05:18:2b:ed:cd:8d:
         87:bb:6c:9a:ed:c5:c5:77:61:7c:ab:c4:71:9a:38:96:a1:75:
         e5:c9:a7:ef:f3:da:86:df:c3:e8:e0:4d:ce:5a:0c:3f:22:90:
         5b:3c:75:d6:0c:cd:2c:ab:9a:7d:3a:7f:03:eb:7c:89:20:ab:
         04:d7:52:c0:72:d7:2b:79:be:94:64:a8:1f:59:73:e3:19:05:
         02:96:18:54:9c:bd:71:45:fe:eb:27:b5:69:bc:27:43:b5:61:
         2d:50:ff:98:17:a7:52:9a:a2:7e:0b:07:5e:f9:0a:a2:94:a3:
         f8:1c:13:57
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHcA5W0qxrbrylbdwSGDcCDk5pqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxNTUzMTkwRDc5NjM5QUM4QjczMTc1OUJDQUY5M0E5
QkE3NTM5MDAeFw0yNjA1MDMwMjQ4MzRaFw0yNzA1MDIwMjUzMzRaMDMxMTAvBgNV
BAMTKDkyRkVDQjQ0Q0MwMjlCMEFBQjJBN0I3NEQ3NTA2QTJFNzBDQTgxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0rAC1J+E+BWLrr+jse6Y92Dk
Q57BjnqRdWcHnYj3RygaOFxDchkl8kjzdKa8DBlECUh5HGs8jDMS8EN1HWM7mE/r
KEIoh4nuOsxtCcL4yseXCQ/kxc1C6H/tFv0V05htIHLpti5qeWHyP/05yODbYXWL
EyaAt/hQSIqBuWvGo/r92qiECxTvbh+2ytCmPeZxpin2wZEVsPk/ApiwvCPJ02Rx
/z8uU6yiG0VCSD62xLchuByhLC/AS1T2kVr0UQ/qvbb/9D/BIrfP3TFyaKub9bYx
egu8nyUZJHrrqiIcYhylllqdvxWWybwkAH5Rm1LQDI/BQXaf1KDTAh35O7EtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkv7LRMwCmwqrKnt011BqLnDKgd8wHwYDVR0j
BBgwFoAU5RVTGQ15Y5rItzF1m8r5OpunU5AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OThlNDYxMGEtYTc5NC00MDU5LTk3ZDktZjJjNjlkYTU0YzhiLzAvRTUxNTUzMTkw
RDc5NjM5QUM4QjczMTc1OUJDQUY5M0E5QkE3NTM5MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FNTE1NTMxOTBENzk2MzlBQzhCNzMxNzU5QkNBRjkzQTlCQTc1
MzkwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05
N2Q5LWYyYzY5ZGE1NGM4Yi8wLzMxMzUzNzJlMzgzNTJlMzIzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXdMA0GCSqG
SIb3DQEBCwUAA4IBAQCeRg7mx1eL4iMmcBOnGtj0eC8LmWJlN638PgdJRczKFumI
pIkcr/rDROyptZej9ebtc1DcH0reTUafXyxzWCpOBEWh79V+fzkTxE2zmUeuSdHk
nm+8wme0JiGyWy+18x+mJRBaQVfeYqutz/whQn78fvyxhhP3ITMKMYBlh0iJwDiO
ddlyvXd0olMFGCvtzY2Hu2ya7cXFd2F8q8RxmjiWoXXlyafv89qG38Po4E3OWgw/
IpBbPHXWDM0sq5p9On8D63yJIKsE11LActcreb6UZKgfWXPjGQUClhhUnL1xRf7r
J7VpvCdDtWEtUP+YF6dSmqJ+Cwde+QqilKP4HBNX
-----END CERTIFICATE-----
Generated at Wed May 13 09:57:50 2026 by rpki-client