Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa
File:                     3135372e31302e302e302f32332d3233203d3e20313532303739.roa (raw, json)
Hash identifier:          L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=
Subject key identifier:   69:9A:72:53:66:9D:B7:76:31:27:87:46:38:3F:13:3D:3C:C7:EA:B0
Certificate issuer:       /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
Certificate serial:       10F45FAC6C0235621C78F7C9F86244FC4F97C211
Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa
Signing time:             Sun 03 May 2026 02:53:46 +0000
ROA not before:           Sun 03 May 2026 02:48:46 +0000
ROA not after:            Sun 02 May 2027 02:53:46 +0000
asID:                     152079
IP address blocks:        157.10.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl
                          rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f4:5f:ac:6c:02:35:62:1c:78:f7:c9:f8:62:44:fc:4f:97:c2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
        Validity
            Not Before: May  3 02:48:46 2026 GMT
            Not After : May  2 02:53:46 2027 GMT
        Subject: CN=699A7253669DB77631278746383F133D3CC7EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:e1:8e:82:02:b9:fd:35:dd:47:e2:c1:3d:
                    ba:ab:78:2e:0e:48:6e:12:f3:0e:e0:39:cc:25:e2:
                    bc:16:43:72:5e:9b:0a:f2:e9:b8:14:6d:de:d6:f7:
                    ff:43:6f:12:53:16:2d:2d:b1:d9:51:e3:fa:fa:39:
                    c7:81:00:82:d9:18:d1:58:10:7e:a1:56:de:d9:e1:
                    b6:56:88:cb:0c:a3:43:60:43:7d:37:f5:0f:9a:ca:
                    39:fa:8e:b2:60:7d:38:a3:be:c1:fa:ff:76:ba:43:
                    2b:f4:89:5f:a2:33:2b:ce:05:b5:41:f6:93:a2:33:
                    c1:e0:45:e9:29:06:c3:00:69:ca:1b:05:4d:ad:67:
                    9c:66:75:1a:65:ff:fa:8a:65:51:e1:4a:c4:8c:c1:
                    de:a8:81:70:c5:af:b9:a4:bd:5c:cd:4c:19:ee:9d:
                    4c:88:ee:91:8c:c8:27:b7:f1:63:91:03:cc:da:cf:
                    ac:49:66:01:d0:e9:0d:08:3e:23:8e:d0:12:76:37:
                    82:3e:05:aa:43:11:c3:aa:a6:58:94:5f:c9:89:73:
                    44:7b:0b:9e:3f:f6:02:49:52:83:fe:24:66:96:fe:
                    c4:bb:87:dc:c5:c3:8d:aa:c4:e0:e8:c4:20:ff:c1:
                    e7:f3:e8:ef:3a:70:37:80:e8:f5:c4:cd:9d:5b:85:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:72:53:66:9D:B7:76:31:27:87:46:38:3F:13:3D:3C:C7:EA:B0
            X509v3 Authority Key Identifier:
                keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:db:b6:dd:fa:b1:a8:f5:ec:72:0d:b2:af:e4:11:5c:23:
         0b:b2:9d:f5:44:a0:4b:14:52:32:cf:5b:8a:a9:90:c8:cb:1e:
         79:bd:46:8a:02:8e:7a:ec:43:5d:64:49:eb:78:5e:af:af:96:
         5d:77:41:16:27:91:c2:15:02:6c:d9:a1:58:54:af:9a:02:25:
         94:7e:68:a1:bc:55:7d:88:77:98:79:5c:f3:d3:25:d1:46:e5:
         d5:e5:35:d2:f7:73:85:61:31:c5:41:39:d9:be:95:0e:79:10:
         17:7e:c4:ca:e6:d8:2a:d7:18:26:86:97:ff:ba:14:66:6f:13:
         34:6b:30:a8:43:2f:4d:2d:ec:71:59:15:ef:5f:71:bf:8a:20:
         dc:c6:0b:20:31:e4:7c:56:43:c0:b7:25:77:67:3b:8f:d5:1a:
         6f:58:81:4c:e7:75:00:9b:36:0a:d4:02:03:a0:d0:9e:88:ad:
         1f:dc:39:bd:37:31:03:86:91:93:4b:d2:cf:d8:20:d0:11:e2:
         5a:fa:2f:6c:84:ea:5d:3d:df:7e:e7:7c:55:02:bd:58:c3:bd:
         ca:5f:97:24:da:cb:ee:49:64:cf:41:ae:1d:1b:80:7c:91:5a:
         be:1c:2d:3b:4d:9c:3e:61:b7:a6:11:db:e0:a4:c9:d6:c5:92:
         8c:e9:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:28 2026 by rpki-client