Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa
File:                     3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (raw, json)
Hash identifier:          BaGODEcb9GjhGRZiHNCRqzvhrdvwdr18tYlKlyT9Rpg=
Subject key identifier:   E8:12:74:A3:15:48:AA:A7:AA:AF:A4:EA:94:BA:7F:42:A3:1B:D9:9A
Certificate issuer:       /CN=07DE2856EE772937B8A7AD863D63341E1041C169
Certificate serial:       6FA26CA18678073B831A56F9737F4F9015137962
Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa
Signing time:             Sun 03 May 2026 02:56:35 +0000
ROA not before:           Sun 03 May 2026 02:51:35 +0000
ROA not after:            Sun 02 May 2027 02:56:35 +0000
asID:                     152376
IP address blocks:        157.15.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl
                          rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a2:6c:a1:86:78:07:3b:83:1a:56:f9:73:7f:4f:90:15:13:79:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169
        Validity
            Not Before: May  3 02:51:35 2026 GMT
            Not After : May  2 02:56:35 2027 GMT
        Subject: CN=E81274A31548AAA7AAAFA4EA94BA7F42A31BD99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:90:73:4c:99:9a:cd:98:e6:56:cd:04:f9:
                    4b:b1:39:31:71:ee:b0:c8:e0:71:73:4e:28:03:9d:
                    70:10:9a:1a:9c:77:51:2f:d5:d9:71:3a:ad:80:47:
                    52:fb:43:0f:5a:12:92:16:f2:a3:16:c7:7b:92:04:
                    5b:0a:bc:b7:94:c1:b8:f5:fe:f5:9e:9a:d5:11:72:
                    57:53:69:b0:36:9d:e1:11:3b:c6:e1:e3:3f:cc:ea:
                    a8:86:cd:35:50:8d:42:6d:61:59:a6:78:b9:5f:97:
                    ed:7a:0b:b2:0a:df:7c:1f:37:0e:0c:8c:f7:f0:08:
                    9e:ba:82:ef:24:1b:64:bf:94:8a:bb:b2:a9:ea:4c:
                    11:d9:55:1e:6b:c1:06:80:00:d9:fa:30:b9:f0:6e:
                    b0:12:98:d2:76:6b:ba:3e:bd:85:53:a5:45:5b:42:
                    a7:eb:1d:72:52:f0:32:14:0b:88:b8:b2:c0:e3:93:
                    73:d2:5d:3f:99:7a:3b:c0:b7:db:4c:24:9d:bd:54:
                    03:73:1b:cc:28:44:63:92:29:60:52:46:91:fe:6b:
                    f6:62:3f:6d:90:77:54:b6:2b:16:9d:8a:cb:25:09:
                    1d:0f:71:dc:ce:e1:d2:2f:59:e0:21:25:68:da:46:
                    63:e0:35:92:93:66:2f:af:22:02:49:aa:69:0c:51:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:74:A3:15:48:AA:A7:AA:AF:A4:EA:94:BA:7F:42:A3:1B:D9:9A
            X509v3 Authority Key Identifier:
                keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:16:f6:1d:a3:dc:44:d6:0f:5d:d8:64:27:07:33:af:12:60:
         88:79:45:b3:e0:dc:ae:e9:81:04:a2:0d:e0:af:eb:12:f5:3d:
         d1:83:79:2d:a2:e2:29:52:ac:e6:b8:da:09:af:9c:88:b1:5c:
         f7:af:93:48:87:e6:25:02:99:e2:73:ea:43:bb:e2:ef:c5:f4:
         b8:38:49:36:65:15:66:1d:53:6a:a6:c8:ae:a4:93:c3:2d:d6:
         5a:a5:58:06:9f:82:54:18:ae:1d:c0:c6:1c:ba:ed:d0:2f:5a:
         7e:91:46:b3:7a:09:c4:6c:78:67:31:68:a5:a3:a6:7d:b7:5a:
         dd:39:be:3d:13:2e:ad:40:c6:78:33:20:31:73:55:e5:7c:36:
         ad:1f:63:86:5d:34:c8:df:60:97:8d:b6:d2:db:14:e5:da:e0:
         9a:11:34:14:5a:0e:81:d4:b0:72:9c:e0:cd:cd:59:e9:4f:7b:
         77:67:91:77:50:68:99:e9:68:be:5f:2f:99:1e:64:ea:7a:58:
         ec:c6:0b:a0:d5:ee:6a:a3:33:79:73:09:81:b9:80:b7:c6:aa:
         20:4f:a8:aa:5e:de:34:d4:9b:fc:2b:6f:9c:87:70:3d:78:28:
         50:86:19:11:56:dc:97:c3:1d:48:ee:22:eb:a8:68:13:11:62:
         bf:9a:07:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:34 2026 by rpki-client