Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
File:                     3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (raw, json)
Hash identifier:          NQj0jBui5SdBCaBtC25o6ECq/13rF1K5IZvhOhcCy5E=
Subject key identifier:   2A:58:66:6B:FE:94:FE:73:4B:87:C5:01:5C:05:0D:DA:AC:AD:4D:90
Certificate issuer:       /CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Certificate serial:       4878EB005F79D1BAD95794736A65DA5A0E89A0CC
Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
Signing time:             Sun 03 May 2026 02:55:10 +0000
ROA not before:           Sun 03 May 2026 02:50:10 +0000
ROA not after:            Sun 02 May 2027 02:55:10 +0000
asID:                     152391
IP address blocks:        157.15.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
                          rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:eb:00:5f:79:d1:ba:d9:57:94:73:6a:65:da:5a:0e:89:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
        Validity
            Not Before: May  3 02:50:10 2026 GMT
            Not After : May  2 02:55:10 2027 GMT
        Subject: CN=2A58666BFE94FE734B87C5015C050DDAACAD4D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:d8:e3:19:f0:fe:08:9c:31:c6:ae:2c:66:
                    98:1d:e0:26:ac:25:d6:6f:cf:66:42:78:48:a4:97:
                    38:e3:61:63:6e:57:a8:69:e7:5b:68:15:a7:ed:b2:
                    82:4f:e2:0c:2f:1c:b9:53:97:0c:b1:16:73:fe:d9:
                    f1:6e:3a:e7:c3:7b:17:0d:ec:eb:51:41:fe:9e:e0:
                    61:49:36:4e:94:5a:67:b4:fb:0c:3e:cc:ad:8a:31:
                    22:d4:e4:39:89:b8:3f:31:9d:07:f7:e0:8a:4c:41:
                    c6:b3:05:a1:26:4a:a0:4b:cd:fc:25:0e:98:53:6f:
                    f3:10:a9:2f:09:aa:19:ed:53:ec:23:92:03:d1:2c:
                    17:07:6f:8a:d3:62:67:48:eb:a8:31:1b:32:aa:6e:
                    a4:23:6b:2d:3b:74:5d:10:4e:a7:b7:46:5e:77:d9:
                    eb:65:32:a1:f7:95:93:26:ca:37:0b:36:9e:0c:5c:
                    89:a2:f0:46:13:41:1a:d0:88:d6:11:64:aa:03:de:
                    43:5d:39:4d:80:a7:ac:aa:d5:fb:a1:e7:10:bf:2e:
                    9a:58:d3:a1:23:92:be:99:9c:98:0f:2a:4b:7a:74:
                    b4:04:6b:12:27:4a:a3:de:33:1b:50:0a:ea:91:bb:
                    2c:6e:9b:fa:69:1f:2c:1b:4a:20:e7:99:20:3a:f1:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:58:66:6B:FE:94:FE:73:4B:87:C5:01:5C:05:0D:DA:AC:AD:4D:90
            X509v3 Authority Key Identifier:
                keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:43:7e:90:12:78:8e:5d:b5:d1:b8:06:62:a4:6e:13:8f:1d:
         bf:96:51:15:53:97:d1:64:cf:64:9f:46:f5:42:a6:84:3e:7b:
         80:6e:41:07:4b:90:31:94:a2:f8:b4:ac:90:5f:f6:cc:d8:82:
         56:2b:51:69:5d:c0:32:ee:d9:16:71:c8:94:03:ba:35:0a:60:
         28:05:10:d1:e7:be:13:3a:82:72:32:19:b6:71:78:86:f0:66:
         c3:49:cd:43:d0:19:3b:e7:61:0f:03:61:28:67:07:eb:3a:83:
         03:72:32:c7:07:66:c4:15:1b:a8:36:a3:6a:99:10:08:37:42:
         6b:99:04:7f:01:44:c2:ca:4d:e3:39:e6:57:e0:4d:8d:80:25:
         b4:4a:27:1b:1c:ec:cc:a4:f9:ac:23:c0:bb:32:dc:19:e9:0d:
         c3:7b:c2:a2:cc:72:a0:b2:ac:50:c9:15:b9:bf:d7:73:e7:d6:
         90:e8:ac:91:a2:5f:6f:8e:af:e9:7a:e8:8e:54:5f:1a:f5:d8:
         d7:8e:bc:3a:40:4e:62:f7:f7:dd:b0:7f:18:b3:fe:20:6f:67:
         34:e6:df:af:5a:bd:f0:13:48:8d:54:6f:e5:c9:bb:53:89:37:
         72:2c:bd:bb:fe:62:fc:92:5b:24:57:9c:ee:77:f9:0f:1f:4b:
         c2:37:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:28 2026 by rpki-client