Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa
File:                     3135372e36362e392e302f32342d3234203d3e20313532373436.roa (raw, json)
Hash identifier:          gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=
Subject key identifier:   96:BD:3E:0D:81:E6:15:BB:B8:EE:BD:7F:61:5A:1D:1C:6C:22:7B:82
Certificate issuer:       /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
Certificate serial:       23C2EE779BC25C78ECA96DE6339C073BD8B41F39
Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa
Signing time:             Sun 03 May 2026 03:02:57 +0000
ROA not before:           Sun 03 May 2026 02:57:57 +0000
ROA not after:            Sun 02 May 2027 03:02:57 +0000
asID:                     152746
IP address blocks:        157.66.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl
                          rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c2:ee:77:9b:c2:5c:78:ec:a9:6d:e6:33:9c:07:3b:d8:b4:1f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B
        Validity
            Not Before: May  3 02:57:57 2026 GMT
            Not After : May  2 03:02:57 2027 GMT
        Subject: CN=96BD3E0D81E615BBB8EEBD7F615A1D1C6C227B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:4f:20:2d:99:09:10:c4:17:7d:26:66:52:
                    50:14:c2:97:a0:df:ce:6f:6d:a6:81:09:bf:95:88:
                    32:e4:6e:3b:e8:77:e4:fc:d6:b6:bc:86:a0:5e:76:
                    a4:4b:09:06:1c:bc:eb:dd:6e:af:c0:52:72:ba:53:
                    83:9f:66:b1:51:6b:59:e2:8d:26:08:c4:c5:25:52:
                    77:d4:7c:13:94:b6:e6:22:63:4b:48:3d:2d:1f:de:
                    31:bc:c7:83:cd:4d:43:c5:66:cf:26:bd:12:74:36:
                    ec:35:dc:ac:a0:cd:f7:e2:36:14:b0:c7:25:61:b1:
                    c1:bb:b0:02:f3:fa:ee:ad:14:b2:a8:71:50:26:63:
                    bf:f4:ab:8b:b3:78:b6:30:ef:7e:d1:97:b0:f7:75:
                    ea:e3:d3:da:fc:54:8a:d9:ba:ce:4d:97:7f:b7:f3:
                    38:6a:8c:e9:aa:06:d7:dd:c0:15:5d:19:a9:d2:b7:
                    2d:d5:e7:68:46:8a:c7:93:70:94:81:4e:87:09:04:
                    ca:2c:61:2e:5b:1d:2a:7d:10:81:94:8d:62:75:52:
                    3f:f3:46:b0:d4:c3:52:a3:87:30:e1:b1:52:18:d8:
                    61:2d:82:65:94:e9:8a:12:ce:e9:bf:7f:e2:c2:51:
                    1f:b8:e2:4c:6e:fc:77:8a:e2:3e:96:1c:83:1f:94:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BD:3E:0D:81:E6:15:BB:B8:EE:BD:7F:61:5A:1D:1C:6C:22:7B:82
            X509v3 Authority Key Identifier:
                keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:09:59:d4:09:3a:2a:13:d4:07:9d:94:86:db:2b:34:e1:
         24:85:f0:d5:66:bd:78:b0:15:09:f5:2f:cd:55:0e:71:f8:63:
         bb:37:72:fc:2a:72:02:5c:f5:ca:89:7d:38:95:e1:6c:23:62:
         0c:4b:3e:22:9d:73:03:53:a6:7f:1a:73:82:03:74:0f:81:95:
         40:1a:2d:48:0f:bd:9c:4c:99:7f:54:2b:2a:c8:c5:37:83:a9:
         9f:62:c1:22:8e:56:04:39:a1:95:89:76:77:6f:69:b5:33:b9:
         03:8a:95:fd:d7:62:da:3a:fd:bd:e4:97:78:01:46:aa:0f:2e:
         b1:02:4c:e3:f3:4c:a4:c6:bc:be:05:08:d3:ad:9e:ba:e0:f7:
         d6:4c:8a:f7:ec:98:40:1f:91:a0:e1:35:31:b7:ea:fe:80:fe:
         34:20:d4:57:dc:88:f9:92:0c:5c:eb:bf:c7:bd:d9:2f:a4:8a:
         e7:f4:ec:fc:a6:2d:cf:0f:d3:ff:7f:dd:1e:e0:ec:48:bd:cd:
         eb:89:d9:a6:63:53:77:7d:59:7b:00:31:8a:fe:3b:31:23:ce:
         74:c0:c4:78:7f:2e:bf:8d:0a:fd:a4:cc:d3:27:6a:1d:50:40:
         85:60:42:2d:37:98:95:b5:9d:3e:a6:55:0a:87:3d:4e:8c:bb:
         c5:d5:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:57 2026 by rpki-client