Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa
File:                     3135372e31352e302e302f32332d3234203d3e20313532373639.roa (raw, json)
Hash identifier:          WQnLXXfXQahSkhJIevnL949Xfgw8fPIR5kTo/AbuQac=
Subject key identifier:   F2:D7:43:53:42:D4:8C:DE:2A:0B:58:2E:DB:C1:30:98:91:64:78:5A
Certificate issuer:       /CN=57E460937137B652DFB7C6EB8A5BA887C395741C
Certificate serial:       0694D26DECBD297C8196101669CA6B7222BAF271
Authority key identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa
Signing time:             Sun 03 May 2026 03:00:57 +0000
ROA not before:           Sun 03 May 2026 02:55:57 +0000
ROA not after:            Sun 02 May 2027 03:00:57 +0000
asID:                     152769
IP address blocks:        157.15.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl
                          rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:d2:6d:ec:bd:29:7c:81:96:10:16:69:ca:6b:72:22:ba:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E460937137B652DFB7C6EB8A5BA887C395741C
        Validity
            Not Before: May  3 02:55:57 2026 GMT
            Not After : May  2 03:00:57 2027 GMT
        Subject: CN=F2D7435342D48CDE2A0B582EDBC130989164785A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:57:7e:3e:77:64:a6:ae:16:e4:c6:49:bc:
                    00:1b:4e:9c:b7:78:12:b3:ea:bf:92:f7:27:9d:cd:
                    88:44:c4:26:62:e9:66:86:88:46:0e:94:b9:65:a3:
                    bc:16:e9:d0:c9:0c:56:8f:ed:c4:b7:db:32:5d:75:
                    ea:8d:31:dc:64:cf:4a:48:ac:c1:72:b0:8e:6d:34:
                    f0:ca:34:28:18:8e:0f:90:9b:8d:62:a6:74:bd:65:
                    a9:f3:9e:e7:57:76:5d:ec:8d:31:f8:a8:3d:eb:98:
                    0e:98:30:f9:53:af:67:13:0e:49:82:0b:1f:14:76:
                    30:62:cd:a2:18:69:68:d4:56:a4:63:d1:bd:97:db:
                    03:c4:7b:e6:99:1a:9a:91:79:9c:dc:00:34:9f:d5:
                    36:a5:59:e4:b4:51:77:b1:3a:b0:92:1b:f3:38:e7:
                    9c:96:fe:3c:14:0b:a3:d0:b8:58:66:15:23:75:0d:
                    d9:7a:28:cf:71:c6:8a:77:13:7b:47:33:4b:b1:19:
                    19:63:71:27:73:60:f0:7e:7b:10:70:db:b1:bc:f1:
                    34:a4:20:05:a8:7c:61:dc:da:6f:b8:cf:25:61:be:
                    d9:e1:d7:98:d8:3b:c5:9c:2d:9d:45:50:51:4b:22:
                    62:93:c9:dc:b0:96:fb:7f:77:35:7b:9e:c8:48:5e:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D7:43:53:42:D4:8C:DE:2A:0B:58:2E:DB:C1:30:98:91:64:78:5A
            X509v3 Authority Key Identifier:
                keyid:57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:60:ec:c5:ee:cc:f0:5e:d2:df:39:43:a6:7c:d8:0f:3a:04:
         5e:de:83:ca:77:9f:bf:d9:5c:04:7e:9d:af:1e:19:9e:0c:8b:
         f7:cd:c0:a9:f6:6b:30:56:d4:fa:ef:f3:2c:5d:3d:54:58:30:
         e4:56:ee:0e:b9:06:98:b0:de:fb:76:ff:0f:78:06:8e:b9:8a:
         2c:4b:7a:79:d7:d0:80:d6:01:09:96:79:98:67:d3:e7:ba:a0:
         24:83:c7:3d:06:84:4a:6e:20:68:47:98:c7:2c:20:7d:74:26:
         2c:0a:9b:17:5a:06:3d:7e:99:a7:92:d8:42:f8:5c:c6:ae:20:
         49:fc:a9:7d:7e:72:43:55:6e:f5:31:c2:8a:1a:33:68:89:c5:
         bf:41:11:8a:cb:5c:9c:b8:e9:70:c9:a8:a3:4a:7d:d3:a4:be:
         a5:5c:b4:6b:44:84:6f:17:f8:eb:b7:98:c1:6f:17:14:d5:47:
         6c:a3:f8:e7:1f:46:11:58:1d:a3:0e:16:aa:54:b3:70:cd:2d:
         a6:e1:8d:1e:ff:e4:5e:d6:af:e3:0f:77:a1:0e:9b:8e:72:ca:
         47:c3:c8:09:7a:13:92:dd:f1:6d:2d:dc:8d:20:89:98:3a:00:
         bc:9f:ef:70:99:48:02:64:03:22:63:84:9d:eb:85:17:28:1b:
         32:f4:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:17 2026 by rpki-client