Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa
File:                     3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (raw, json)
Hash identifier:          1O/1u/y7bw8tPk+iQAFMKxGZw0TRRYTTjU36vawpg/M=
Subject key identifier:   98:92:D6:95:0F:8A:3F:FE:10:C3:24:E7:1C:76:B4:D7:55:1F:88:48
Certificate issuer:       /CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
Certificate serial:       12F285B714117256DC9993C9A362128958BB25B8
Authority key identifier: E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa
Signing time:             Sun 03 May 2026 02:58:54 +0000
ROA not before:           Sun 03 May 2026 02:53:54 +0000
ROA not after:            Sun 02 May 2027 02:58:54 +0000
asID:                     23756
IP address blocks:        150.107.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl
                          rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f2:85:b7:14:11:72:56:dc:99:93:c9:a3:62:12:89:58:bb:25:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E66029B9A162C470EEC1DFA42227448C5628C7C0
        Validity
            Not Before: May  3 02:53:54 2026 GMT
            Not After : May  2 02:58:54 2027 GMT
        Subject: CN=9892D6950F8A3FFE10C324E71C76B4D7551F8848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:0e:52:a1:6c:33:3d:29:91:05:29:55:bf:
                    75:85:19:8a:8f:a2:e2:67:8c:79:b0:0c:76:dd:02:
                    00:a1:2c:36:d8:d7:1f:de:34:f7:b3:65:d5:ff:44:
                    02:37:fc:cc:94:15:d4:09:83:87:46:f7:f7:0f:d0:
                    7d:24:9a:52:fd:2d:38:1d:de:32:c3:19:ad:1e:e0:
                    f4:d2:33:9f:5d:bb:4a:69:1a:e6:35:f2:86:99:da:
                    ab:3d:25:bc:ae:f7:39:25:40:83:d8:2d:b5:01:aa:
                    7b:2b:3f:44:96:fb:b2:40:51:54:a1:ee:a3:bc:95:
                    6c:91:dc:48:a0:ad:3c:ed:aa:3d:92:26:57:46:68:
                    12:66:2f:48:7a:ab:56:e7:61:67:12:5b:c9:59:fe:
                    54:c1:82:80:52:81:0d:f8:a4:d6:b6:a2:b1:8a:ae:
                    bc:e0:e7:f7:97:44:61:b7:25:3a:9b:e9:5d:35:24:
                    77:17:3a:cb:d4:96:14:38:e5:6b:b2:15:c2:15:a8:
                    f9:0b:0c:67:a4:c1:43:db:83:d7:46:ed:e2:00:5a:
                    10:04:5a:cd:b6:97:e3:2e:17:24:de:c0:4b:38:a2:
                    fe:fe:3d:db:27:2a:72:d0:1c:d4:08:63:8d:75:27:
                    ad:94:f7:3f:bd:3b:75:3b:51:f3:b2:48:dc:6d:e1:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:D6:95:0F:8A:3F:FE:10:C3:24:E7:1C:76:B4:D7:55:1F:88:48
            X509v3 Authority Key Identifier:
                keyid:E6:60:29:B9:A1:62:C4:70:EE:C1:DF:A4:22:27:44:8C:56:28:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/E66029B9A162C470EEC1DFA42227448C5628C7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E66029B9A162C470EEC1DFA42227448C5628C7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:59:c7:8b:4d:31:a8:7b:32:81:b1:e0:a5:37:35:08:f3:
         e7:db:2e:af:52:2f:ea:73:3a:40:83:d5:db:f8:37:37:84:f3:
         b7:ac:f6:43:68:3f:c0:96:b9:8f:97:0a:4e:bb:92:36:f6:10:
         f7:1c:64:55:81:4b:1d:c5:3d:7c:7a:f7:90:36:95:a7:e2:1e:
         02:a9:5f:bb:26:89:0d:07:ad:ab:52:98:44:ad:bd:f5:d9:54:
         3c:46:f4:5e:d0:49:bb:85:91:03:8c:fa:9f:1f:f4:59:3b:f6:
         17:7d:35:c9:38:2b:c7:66:78:41:25:23:4b:5d:47:aa:2a:70:
         ec:aa:87:30:63:24:72:1a:13:5a:b0:fa:80:e2:fa:8a:b8:49:
         7c:7e:59:57:f9:6e:f3:32:3e:db:64:cf:da:50:21:57:81:54:
         3c:7e:35:21:1c:a6:6a:d7:a7:05:b4:17:c5:91:0d:2e:34:09:
         57:77:bd:5c:5d:33:b9:31:78:bb:30:28:9a:28:be:ec:7b:65:
         ce:57:5c:bd:53:ac:7c:f5:e4:09:44:66:98:64:e2:a1:da:23:
         df:d0:f6:b7:0f:3a:b1:c4:e4:0a:51:f6:58:18:8f:3c:44:56:
         32:f4:25:52:5b:cb:25:d7:a4:ee:6c:3f:cc:a1:73:f2:e5:76:
         68:ca:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:40 2026 by rpki-client