Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa
File:                     3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (raw, json)
Hash identifier:          g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=
Subject key identifier:   72:0A:E4:C5:54:34:A9:BD:E1:F4:E7:50:EF:4C:F4:E3:9D:EE:53:94
Certificate issuer:       /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
Certificate serial:       6D384F37D7CB4496DDC8471BEB66EB9DBA961004
Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa
Signing time:             Sun 03 May 2026 02:55:37 +0000
ROA not before:           Sun 03 May 2026 02:50:37 +0000
ROA not after:            Sun 02 May 2027 02:55:37 +0000
asID:                     152410
IP address blocks:        157.20.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl
                          rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:4f:37:d7:cb:44:96:dd:c8:47:1b:eb:66:eb:9d:ba:96:10:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
        Validity
            Not Before: May  3 02:50:37 2026 GMT
            Not After : May  2 02:55:37 2027 GMT
        Subject: CN=720AE4C55434A9BDE1F4E750EF4CF4E39DEE5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:b9:fe:1f:25:7d:25:45:4c:52:99:5e:72:
                    a7:e6:9c:42:15:4e:31:68:8e:f4:12:96:d2:5c:1b:
                    83:dc:f2:a3:15:d0:47:f9:9a:39:e1:aa:62:1b:92:
                    db:3f:c9:a7:12:5d:da:1b:f5:db:b8:e3:16:c3:2c:
                    d3:da:80:df:c7:c2:97:d6:fc:7a:6e:42:42:c1:eb:
                    d3:4a:76:e5:8a:7f:e4:5e:ee:50:57:79:15:be:7b:
                    44:b9:ec:c5:09:1b:a6:fe:5f:da:9e:3a:c0:42:7c:
                    ee:74:ea:1b:6d:88:d9:45:de:e5:37:91:23:31:ce:
                    61:24:c7:18:7e:6d:9e:b2:17:29:76:cf:52:6e:fd:
                    85:75:d8:77:31:23:ce:ff:75:79:92:b7:b4:0a:47:
                    c2:85:bf:34:f4:1e:5e:ab:73:5a:10:6a:b0:28:38:
                    28:ee:5c:68:06:34:c1:b1:d8:87:7a:8c:29:ec:f0:
                    de:d5:b2:2b:fc:9f:97:ea:55:19:55:27:74:96:03:
                    a7:8c:f1:81:ae:5c:e2:68:01:9b:b2:3d:b4:e7:6b:
                    9f:2b:74:30:89:5d:d2:ca:f7:80:e9:83:ba:2a:d3:
                    0f:36:f4:2f:ab:9c:51:c3:f8:9e:49:71:ab:a1:d1:
                    52:25:bf:25:ef:3f:b5:e8:49:e2:23:57:31:7f:c0:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:E4:C5:54:34:A9:BD:E1:F4:E7:50:EF:4C:F4:E3:9D:EE:53:94
            X509v3 Authority Key Identifier:
                keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:52:a3:b1:91:cd:2e:c2:30:b1:f4:bb:eb:f1:8d:ee:a3:
         cf:2e:98:88:44:26:13:34:18:93:f7:3b:62:6b:ae:e5:2a:dd:
         37:36:8b:cf:ff:9b:09:d3:82:c8:46:ad:f9:e7:dd:90:6f:80:
         d1:40:1a:a4:54:d9:eb:5e:55:54:5a:9e:9f:ba:a8:23:3e:f8:
         a5:fc:ed:a3:7d:8b:13:31:c8:bd:7e:03:3a:8b:7d:be:4c:6e:
         28:4d:43:5c:12:08:ab:49:7d:f7:5d:a9:11:d7:76:9c:98:5f:
         31:bf:0a:c2:49:04:b8:57:28:b9:f4:52:b0:0a:7d:d6:b7:fe:
         41:55:d8:73:75:a4:bc:0e:7e:ea:30:ff:43:5f:d9:84:b4:2d:
         a7:93:31:99:ae:79:bf:fe:c0:a0:50:92:fa:3d:7b:d5:6b:81:
         0e:cc:a1:76:71:01:26:23:56:22:fe:eb:00:fb:b6:52:7f:f8:
         8f:7d:d7:db:6e:c2:24:47:55:16:b8:78:e1:43:2e:c4:1e:40:
         71:9d:05:0e:04:a0:c7:df:0c:2d:fb:db:27:1d:4d:17:12:01:
         e6:4b:5c:6b:c4:0e:9b:dc:83:33:8b:dc:5d:38:b0:39:e5:cb:
         66:bc:93:35:f9:76:77:b5:11:06:57:0f:50:f8:b4:ba:53:97:
         c9:26:9d:af
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbThPN9fLRJbdyEcb62brnbqWEAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI2MTk1OTE0MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3
RTZEMUQyMTAeFw0yNjA1MDMwMjUwMzdaFw0yNzA1MDIwMjU1MzdaMDMxMTAvBgNV
BAMTKDcyMEFFNEM1NTQzNEE5QkRFMUY0RTc1MEVGNENGNEUzOURFRTUzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmbn+HyV9JUVMUplecqfmnEIV
TjFojvQSltJcG4Pc8qMV0Ef5mjnhqmIbkts/yacSXdob9du44xbDLNPagN/HwpfW
/HpuQkLB69NKduWKf+Re7lBXeRW+e0S57MUJG6b+X9qeOsBCfO506httiNlF3uU3
kSMxzmEkxxh+bZ6yFyl2z1Ju/YV12HcxI87/dXmSt7QKR8KFvzT0Hl6rc1oQarAo
OCjuXGgGNMGx2Id6jCns8N7Vsiv8n5fqVRlVJ3SWA6eM8YGuXOJoAZuyPbTna58r
dDCJXdLK94Dpg7oq0w829C+rnFHD+J5Jcauh0VIlvyXvP7XoSeIjVzF/wKFLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcgrkxVQ0qb3h9OdQ70z0453uU5QwHwYDVR0j
BBgwFoAUgmGVkUIbZ8rNpOagsWYBG35tHSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTBmNzhiZDQtYzE5Yi00ZDQwLWFhNTQtZWQ4ZDdiYzc3MmNhLzAvODI2MTk1OTE0
MjFCNjdDQUNEQTRFNkEwQjE2NjAxMUI3RTZEMUQyMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84MjYxOTU5MTQyMUI2N0NBQ0RBNEU2QTBCMTY2MDExQjdFNkQx
RDIxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2EwZjc4YmQ0LWMxOWItNGQ0MC1h
YTU0LWVkOGQ3YmM3NzJjYS8wLzMxMzUzNzJlMzIzMDJlMzEzMjM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRR+MA0GCSqG
SIb3DQEBCwUAA4IBAQA+gFKjsZHNLsIwsfS76/GN7qPPLpiIRCYTNBiT9ztia67l
Kt03NovP/5sJ04LIRq35592Qb4DRQBqkVNnrXlVUWp6fuqgjPvil/O2jfYsTMci9
fgM6i32+TG4oTUNcEgirSX33XakR13acmF8xvwrCSQS4Vyi59FKwCn3Wt/5BVdhz
daS8Dn7qMP9DX9mEtC2nkzGZrnm//sCgUJL6PXvVa4EOzKF2cQEmI1Yi/usA+7ZS
f/iPfdfbbsIkR1UWuHjhQy7EHkBxnQUOBKDH3wwt+9snHU0XEgHmS1xrxA6b3IMz
i9xdOLA55ctmvJM1+XZ3tREGVw9Q+LS6U5fJJp2v
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:58 2026 by rpki-client