Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa
File:                     3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (raw, json)
Hash identifier:          xwruyCGg4a4DpEUZcfdSd3a7y9zRV90KgcSqE6gjaBo=
Subject key identifier:   36:56:AC:98:91:84:C2:9E:2D:F7:CE:0F:4C:E8:36:27:0F:1B:BD:6F
Certificate issuer:       /CN=07DE2856EE772937B8A7AD863D63341E1041C169
Certificate serial:       7B45ACF2C344F9BBBB41B92D2A94A1EDF84FA781
Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa
Signing time:             Sun 03 May 2026 02:56:35 +0000
ROA not before:           Sun 03 May 2026 02:51:35 +0000
ROA not after:            Sun 02 May 2027 02:56:35 +0000
asID:                     152376
IP address blocks:        157.15.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl
                          rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:ac:f2:c3:44:f9:bb:bb:41:b9:2d:2a:94:a1:ed:f8:4f:a7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169
        Validity
            Not Before: May  3 02:51:35 2026 GMT
            Not After : May  2 02:56:35 2027 GMT
        Subject: CN=3656AC989184C29E2DF7CE0F4CE836270F1BBD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:38:88:00:b6:b8:e4:ba:54:71:3f:76:d6:
                    28:3e:70:51:47:b1:c5:bd:86:7c:80:7a:d7:d0:c6:
                    8d:9d:19:a5:75:34:45:69:e0:58:28:e0:a8:d5:ab:
                    41:45:bc:f1:89:7c:ce:39:82:ba:52:4d:3c:0c:9d:
                    ab:de:17:50:ff:6b:88:63:24:00:e8:df:ed:d6:98:
                    f9:cc:3f:eb:e4:5f:f4:f3:b3:dc:30:7f:a0:9f:d7:
                    b2:a5:62:83:cc:01:20:f5:e1:32:42:2a:07:6b:a6:
                    fc:05:71:8a:7e:d9:86:f7:c6:d5:17:62:64:08:bf:
                    cf:71:7b:66:dd:a1:89:98:54:57:ed:17:51:10:b7:
                    75:37:c5:c1:f8:34:a7:45:96:87:01:e8:93:55:82:
                    c2:12:df:0b:80:06:8a:71:ff:2e:34:1c:52:67:96:
                    3b:f6:b0:89:7e:b9:46:20:4f:ff:74:be:f3:ef:5d:
                    ad:d5:49:46:38:e3:c3:38:f7:4f:ea:e5:16:b1:5e:
                    96:ea:79:ba:93:f2:6f:85:9e:36:93:2c:fd:db:7b:
                    ba:27:e9:1f:72:12:0f:6f:1e:89:e1:b5:63:51:ae:
                    b1:4a:2a:3d:c8:32:4d:0a:77:bd:c2:5c:fe:1d:0b:
                    9a:8f:34:54:0c:3e:d0:89:2b:08:47:94:74:55:78:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:56:AC:98:91:84:C2:9E:2D:F7:CE:0F:4C:E8:36:27:0F:1B:BD:6F
            X509v3 Authority Key Identifier:
                keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:93:e1:9d:b3:f5:40:0b:57:9e:51:11:d0:c9:06:e5:61:32:
         eb:a6:f9:1c:20:fa:e7:93:42:7b:e8:4d:4a:d8:1b:5d:93:85:
         6d:47:32:f6:15:cc:02:69:12:a5:1e:d3:6a:41:4c:c6:4d:eb:
         b7:8a:2b:53:95:d3:bc:60:c4:46:84:9d:25:e5:c4:c2:c5:d3:
         33:9c:f5:b6:f8:84:a9:71:ba:13:92:75:38:11:b6:48:83:36:
         92:ae:9d:66:6b:75:60:02:bb:de:27:17:84:7e:c1:e8:a6:c6:
         53:81:35:c4:88:2e:f4:26:5c:bd:96:ed:1d:90:28:ac:3b:9b:
         07:d0:57:68:0f:9a:5a:96:08:d9:c7:ab:5a:27:20:7a:e2:5c:
         3f:98:93:45:6d:0e:8d:74:82:67:de:01:99:25:66:5c:15:13:
         c8:61:7f:4e:7e:91:b5:29:5a:dd:9a:ba:0c:b6:ff:c7:57:c0:
         b8:ed:6a:4f:61:3f:50:13:63:bd:ce:4b:a1:fc:cd:b6:87:af:
         8f:79:c1:ee:09:32:cb:2c:fc:5b:e8:15:13:2c:64:09:cc:f8:
         23:84:ef:2c:cd:71:f4:b1:a9:fa:b0:c2:17:8e:e8:87:00:24:
         ba:71:15:9f:06:96:d8:b3:0a:84:11:06:f9:c9:33:53:70:7d:
         52:68:32:df
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUe0Ws8sNE+bu7QbktKpSh7fhPp4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdERTI4NTZFRTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUx
MDQxQzE2OTAeFw0yNjA1MDMwMjUxMzVaFw0yNzA1MDIwMjU2MzVaMDMxMTAvBgNV
BAMTKDM2NTZBQzk4OTE4NEMyOUUyREY3Q0UwRjRDRTgzNjI3MEYxQkJENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQjiIALa45LpUcT921ig+cFFH
scW9hnyAetfQxo2dGaV1NEVp4Fgo4KjVq0FFvPGJfM45grpSTTwMnaveF1D/a4hj
JADo3+3WmPnMP+vkX/Tzs9wwf6Cf17KlYoPMASD14TJCKgdrpvwFcYp+2Yb3xtUX
YmQIv89xe2bdoYmYVFftF1EQt3U3xcH4NKdFlocB6JNVgsIS3wuABopx/y40HFJn
ljv2sIl+uUYgT/90vvPvXa3VSUY448M490/q5RaxXpbqebqT8m+FnjaTLP3be7on
6R9yEg9vHonhtWNRrrFKKj3IMk0Kd73CXP4dC5qPNFQMPtCJKwhHlHRVeLaFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNlasmJGEwp4t984PTOg2Jw8bvW8wHwYDVR0j
BBgwFoAUB94oVu53KTe4p62GPWM0HhBBwWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTU2ZWNjYjctZTkxNy00MGY1LWFjZWUtMDNkNjhiZTVmZDk3LzAvMDdERTI4NTZF
RTc3MjkzN0I4QTdBRDg2M0Q2MzM0MUUxMDQxQzE2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wN0RFMjg1NkVFNzcyOTM3QjhBN0FEODYzRDYzMzQxRTEwNDFD
MTY5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E1NmVjY2I3LWU5MTctNDBmNS1h
Y2VlLTAzZDY4YmU1ZmQ5Ny8wLzMxMzUzNzJlMzEzNTJlMzEzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ+QMA0GCSqG
SIb3DQEBCwUAA4IBAQCYk+Gds/VAC1eeURHQyQblYTLrpvkcIPrnk0J76E1K2Btd
k4VtRzL2FcwCaRKlHtNqQUzGTeu3iitTldO8YMRGhJ0l5cTCxdMznPW2+ISpcboT
knU4EbZIgzaSrp1ma3VgArveJxeEfsHopsZTgTXEiC70Jly9lu0dkCisO5sH0Fdo
D5palgjZx6taJyB64lw/mJNFbQ6NdIJn3gGZJWZcFRPIYX9OfpG1KVrdmroMtv/H
V8C47WpPYT9QE2O9zkuh/M22h6+PecHuCTLLLPxb6BUTLGQJzPgjhO8szXH0san6
sMIXjuiHACS6cRWfBpbYswqEEQb5yTNTcH1SaDLf
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:42 2026 by rpki-client