Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa
File:                     3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (raw, json)
Hash identifier:          R6QK9+MoLmzsMre1Y9YXqP/L5rUmbxfvyX6TdZV81Yk=
Subject key identifier:   F0:7C:91:83:4A:4A:7E:8B:5A:1A:11:0F:CB:5D:DE:90:8B:99:14:2D
Certificate issuer:       /CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
Certificate serial:       7295D19999ADFAE0414A5E1F70082F36A7792D84
Authority key identifier: C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa
Signing time:             Sun 03 May 2026 03:02:07 +0000
ROA not before:           Sun 03 May 2026 02:57:07 +0000
ROA not after:            Sun 02 May 2027 03:02:07 +0000
asID:                     152349
IP address blocks:        157.10.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl
                          rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:95:d1:99:99:ad:fa:e0:41:4a:5e:1f:70:08:2f:36:a7:79:2d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC
        Validity
            Not Before: May  3 02:57:07 2026 GMT
            Not After : May  2 03:02:07 2027 GMT
        Subject: CN=F07C91834A4A7E8B5A1A110FCB5DDE908B99142D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:9a:67:9a:a3:70:c4:1e:1a:fc:7d:9d:24:
                    57:1d:cc:b7:9b:83:b1:3b:42:ba:2d:79:66:50:9d:
                    c4:a6:44:56:88:ec:0a:79:2e:35:bf:54:04:4e:73:
                    21:cf:00:ea:0f:df:df:ce:f6:a8:24:21:88:ce:e3:
                    1a:11:1f:b6:57:cc:fc:2c:a4:6a:b0:d1:3d:02:fc:
                    d6:fe:db:fb:1d:07:34:55:b7:52:54:c0:55:0b:20:
                    bd:3f:63:ef:8b:30:d0:a2:d5:95:da:89:ac:38:c6:
                    da:46:dd:ea:98:ed:7e:95:88:8c:12:33:b3:7d:41:
                    8f:23:d7:ee:d4:83:9c:b3:9d:f1:e4:33:ad:bd:f9:
                    30:f1:d3:e4:d2:d0:ca:13:cb:01:bb:58:4b:01:50:
                    8c:6e:5e:a4:d9:2f:b5:57:52:4e:42:3c:e3:58:85:
                    4c:73:e2:69:38:5e:66:ab:7d:53:0f:53:b9:b2:e9:
                    00:79:0e:b5:3c:5c:88:61:f5:2b:97:4e:f5:1a:c4:
                    2e:c0:a5:c2:a3:8a:78:16:62:c6:38:3d:98:c7:19:
                    76:34:2f:67:9b:6c:6c:ce:13:87:9c:8b:b2:3b:0f:
                    39:a6:3e:14:33:d2:a8:9b:dd:8f:02:e4:7a:8e:ce:
                    f8:64:92:2d:82:f2:de:88:e6:81:db:d5:01:41:a5:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7C:91:83:4A:4A:7E:8B:5A:1A:11:0F:CB:5D:DE:90:8B:99:14:2D
            X509v3 Authority Key Identifier:
                keyid:C2:04:09:5D:0D:FA:29:CA:02:22:F4:C1:BE:5E:6A:9C:7F:E5:B5:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C204095D0DFA29CA0222F4C1BE5E6A9C7FE5B5CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6a:83:c5:6d:fb:0e:99:db:e7:69:14:9a:15:dd:bc:36:9f:
         b4:08:4c:e7:fb:34:b7:b0:0f:99:04:df:fa:57:42:d7:0a:ce:
         6b:ca:33:2e:cb:2c:1d:2a:0a:82:97:d4:20:f5:b5:98:6e:a8:
         e1:b3:1b:96:88:4f:cb:15:d5:b0:a3:ff:e9:e0:39:30:c3:6c:
         b7:6a:73:e0:0f:71:17:3a:42:2b:9a:7d:45:40:4b:71:ca:8c:
         45:d4:fb:47:1f:e8:63:cd:d0:b8:18:75:48:a0:ab:fe:b3:58:
         c4:1d:b2:c9:15:5c:52:e5:ce:3e:27:d4:5a:25:bb:6e:90:87:
         f2:5c:e8:6a:88:eb:5c:a8:0a:ea:ff:50:f1:a2:07:0c:12:0c:
         12:ca:7e:1c:b8:f1:91:bd:b2:63:94:86:48:a0:d7:03:d8:88:
         21:a1:6c:5e:66:c4:cd:0a:9d:4e:1b:53:b5:49:14:6f:1e:e6:
         71:9f:35:f3:c1:1e:18:93:57:b3:3a:16:d4:25:06:5e:73:9c:
         1a:39:4e:c2:33:b9:bf:9f:7c:71:eb:ae:d7:1c:0e:47:12:1f:
         c2:27:d9:48:eb:17:77:77:ab:c6:1a:43:94:c6:e0:36:05:ac:
         3c:72:5e:3a:a9:29:46:70:82:8d:88:13:35:d0:e6:d3:69:6a:
         b9:1b:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:00 2026 by rpki-client