Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa
File:                     3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (raw, json)
Hash identifier:          0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=
Subject key identifier:   14:0B:55:66:41:BD:55:81:FC:D6:55:49:14:B8:E2:B5:38:45:19:A4
Certificate issuer:       /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
Certificate serial:       2BFD8897B916CBDB330E0164E5853BDAF4BD842C
Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa
Signing time:             Sun 03 May 2026 03:00:18 +0000
ROA not before:           Sun 03 May 2026 02:55:18 +0000
ROA not after:            Sun 02 May 2027 03:00:18 +0000
asID:                     152765
IP address blocks:        157.66.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl
                          rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:88:97:b9:16:cb:db:33:0e:01:64:e5:85:3b:da:f4:bd:84:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
        Validity
            Not Before: May  3 02:55:18 2026 GMT
            Not After : May  2 03:00:18 2027 GMT
        Subject: CN=140B556641BD5581FCD6554914B8E2B5384519A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:e4:76:1a:b6:b8:75:30:aa:62:53:7d:b3:
                    1e:c3:ed:f2:d5:68:23:ec:34:f1:2c:c3:a9:2c:76:
                    13:98:85:71:21:4b:99:8d:84:94:58:3b:22:7b:d8:
                    f1:d6:43:49:d1:2a:63:5a:62:ac:89:e7:d5:ce:7c:
                    ea:30:44:13:ff:5f:52:86:e8:f7:f3:1e:29:f0:23:
                    86:0a:ad:96:8a:7a:51:a6:4d:c4:01:70:18:0c:80:
                    5a:0d:42:f3:ef:e0:9d:77:3f:a6:b5:d3:29:49:7d:
                    ba:ae:8b:1d:a9:39:fd:79:e9:2e:23:0e:2b:8d:b7:
                    e1:a4:f8:87:58:83:7b:f5:38:da:78:54:2e:ab:4b:
                    63:ed:df:b8:03:51:d3:d2:5c:f3:e9:82:90:32:86:
                    a7:9e:29:8a:b5:7e:58:b0:76:a3:50:51:c8:51:39:
                    86:58:11:01:ff:98:e0:7d:cd:8a:0f:c7:dd:c6:e4:
                    8a:95:74:c1:11:bf:d9:db:27:23:f1:cb:0b:7c:07:
                    3a:02:63:09:d2:a3:f8:4d:96:af:5a:c6:cd:d4:f3:
                    2a:c1:29:a6:08:31:76:76:62:bd:16:f1:b1:a9:38:
                    f3:35:48:2e:aa:74:d1:ef:f3:58:a0:56:f5:91:5d:
                    be:68:4d:ca:31:51:50:3d:7c:fa:f8:24:4b:aa:cc:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:55:66:41:BD:55:81:FC:D6:55:49:14:B8:E2:B5:38:45:19:A4
            X509v3 Authority Key Identifier:
                keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:d7:01:30:1f:35:d1:f4:98:6c:04:d2:f5:45:9d:bb:32:
         3b:6b:95:7b:05:78:83:1a:f4:1b:37:29:be:86:df:08:db:16:
         d9:18:9d:e1:3a:c5:72:79:9f:6e:4e:aa:a8:50:41:1a:a1:df:
         72:5d:12:49:95:29:c1:ce:a6:7c:6a:02:14:c4:ea:d7:d7:40:
         00:b7:4c:b7:40:49:62:aa:ca:fe:23:8a:d4:fc:05:6c:d9:98:
         5e:de:11:8e:72:af:43:8f:dd:89:b3:7a:4c:30:0d:2c:21:fb:
         e6:31:f0:8c:d0:ff:5f:60:df:e9:86:3b:dc:eb:8a:d0:7d:f6:
         7e:60:64:c8:3d:ef:2e:6a:c6:f9:1f:c9:f3:2e:b0:c9:cc:65:
         b7:5d:bf:54:a0:0d:3d:47:93:a7:29:5b:15:0f:f8:73:40:34:
         72:46:3f:45:6c:96:e7:07:f9:96:ab:13:c1:87:85:de:73:3a:
         f6:a4:fb:97:06:59:29:ca:ce:d1:14:9c:5b:6c:75:04:ce:e2:
         a3:17:80:2a:8b:29:e5:d7:ad:94:f8:1a:d6:08:00:9f:0a:08:
         c8:c2:52:ba:e4:4f:bb:0d:d5:45:cb:4d:db:bf:bb:44:0c:38:
         39:94:9e:9a:ca:42:26:b3:ad:0e:5c:6d:26:ff:31:54:c1:33:
         df:35:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:58 2026 by rpki-client