Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa
File:                     3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (raw, json)
Hash identifier:          BjELFCipYQ5Q+BtKi2neiDtQ5aM5iD6aEteAOOyN4vE=
Subject key identifier:   91:6A:D7:A7:88:06:B9:39:80:42:0A:8D:A4:07:27:F2:D5:86:50:DC
Certificate issuer:       /CN=07DE2856EE772937B8A7AD863D63341E1041C169
Certificate serial:       26CF2D2C6A672AA5304233029C5741B734BF2D71
Authority key identifier: 07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa
Signing time:             Sun 03 May 2026 02:56:34 +0000
ROA not before:           Sun 03 May 2026 02:51:34 +0000
ROA not after:            Sun 02 May 2027 02:56:34 +0000
asID:                     152376
IP address blocks:        157.15.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl
                          rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cf:2d:2c:6a:67:2a:a5:30:42:33:02:9c:57:41:b7:34:bf:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07DE2856EE772937B8A7AD863D63341E1041C169
        Validity
            Not Before: May  3 02:51:34 2026 GMT
            Not After : May  2 02:56:34 2027 GMT
        Subject: CN=916AD7A78806B93980420A8DA40727F2D58650DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:25:74:80:62:38:89:90:bb:24:56:21:a3:74:
                    52:2f:dd:4a:e6:89:59:e2:d3:81:87:89:41:ae:05:
                    85:83:2a:c2:bd:9e:6d:af:d3:df:fa:03:1e:65:68:
                    2c:91:62:d7:7d:5d:73:59:2a:0b:2a:89:4f:86:c9:
                    58:41:08:bf:1b:49:c8:2f:8c:c3:c3:77:6d:c0:69:
                    7d:81:8f:d4:ee:6d:ce:63:38:74:7e:d2:49:73:6b:
                    63:44:b0:bc:bf:f7:81:1c:fa:ca:52:e7:20:90:10:
                    68:b9:91:31:a2:6e:d6:7e:26:c1:ec:93:67:70:bb:
                    6c:a9:e7:07:66:83:24:97:fd:30:c8:13:5d:86:3d:
                    cf:68:7f:39:56:65:a4:21:de:b3:70:52:5c:39:9c:
                    14:90:b7:07:1f:8c:fd:56:8f:b6:5c:e8:63:fc:97:
                    d6:67:10:c8:37:c2:3e:9c:74:56:3e:7b:54:d2:50:
                    a7:18:d5:1e:b7:81:78:b2:17:6c:ed:d5:5e:31:bd:
                    df:1e:31:47:34:33:78:9d:45:c0:ff:c0:58:6a:5f:
                    da:47:ea:b4:fc:31:20:a9:4d:fe:b1:de:b2:3c:5f:
                    63:45:db:11:48:43:b5:a3:2a:d7:1d:aa:c2:ab:66:
                    f9:3e:b8:59:49:40:b2:bd:8c:41:ba:4a:2c:f7:2f:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:D7:A7:88:06:B9:39:80:42:0A:8D:A4:07:27:F2:D5:86:50:DC
            X509v3 Authority Key Identifier:
                keyid:07:DE:28:56:EE:77:29:37:B8:A7:AD:86:3D:63:34:1E:10:41:C1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/07DE2856EE772937B8A7AD863D63341E1041C169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/07DE2856EE772937B8A7AD863D63341E1041C169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:37:fc:17:81:d2:17:37:e6:47:8c:c0:1b:8e:ac:f0:cf:
         3f:ed:ee:15:15:4b:9b:af:a4:59:dd:63:9d:7c:29:48:fb:ef:
         b6:95:ab:d9:95:84:1d:a4:54:df:ab:1f:a5:31:46:1b:4d:61:
         38:55:10:ee:0c:28:04:b2:f4:15:98:48:70:2b:fb:d0:c4:77:
         61:bd:06:90:a8:53:6b:ad:34:35:07:18:25:92:0a:4c:8d:69:
         44:6b:c7:c0:41:75:47:cf:48:fa:f1:e6:7f:3d:dd:c6:9a:1c:
         20:3f:85:54:28:93:04:8d:28:b0:76:a5:5a:8b:d4:16:7b:a0:
         9f:f7:63:e9:d3:e0:68:49:da:50:0d:72:c6:4a:23:aa:e6:a6:
         e0:37:94:50:4f:73:79:54:f8:62:b5:f7:67:76:f9:3f:e9:8b:
         b7:68:f8:4d:be:a8:da:d8:e2:9c:d3:4c:9c:5b:57:30:6a:e8:
         48:48:bf:17:da:62:7c:c0:39:0a:e6:ab:a9:40:f1:96:c9:50:
         df:66:c1:98:22:9c:53:bd:56:ca:88:97:3f:d1:40:86:3f:1e:
         ad:af:ba:90:fa:f0:db:f1:0e:69:3f:b1:d9:4c:60:01:70:23:
         81:5f:ef:42:c2:74:8e:a9:86:5a:98:ec:65:a9:a9:1a:6a:34:
         de:25:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:57 2026 by rpki-client