Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa
File:                     3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          ZTERNrEsbV80dDwK10sWFEmeJQ8HlTFr+MKU+H7T3+0=
Subject key identifier:   AB:C6:FB:53:7A:95:D2:72:A8:D2:01:8C:03:EA:C5:8B:CE:D9:C4:2F
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       2BEDE389DFBE6D8F9B9AB0F7E0077841F53BB41C
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:49 +0000
ROA not before:           Sun 03 May 2026 02:58:49 +0000
ROA not after:            Sun 02 May 2027 03:03:49 +0000
asID:                     18059
IP address blocks:        150.107.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ed:e3:89:df:be:6d:8f:9b:9a:b0:f7:e0:07:78:41:f5:3b:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:49 2026 GMT
            Not After : May  2 03:03:49 2027 GMT
        Subject: CN=ABC6FB537A95D272A8D2018C03EAC58BCED9C42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:4b:06:d7:6c:b3:66:ef:a9:61:9c:3c:1f:
                    7b:73:15:fe:a3:4b:6f:cd:ad:ac:92:1f:ed:b2:95:
                    31:94:d0:55:b2:73:79:7e:a4:03:04:fd:45:96:ae:
                    c8:e8:46:9a:27:95:ad:a9:2e:99:17:19:2f:a8:4d:
                    08:2f:6e:8b:fc:70:b6:20:e9:28:a4:02:d8:55:22:
                    4f:43:99:ee:6a:42:d6:b0:0d:ac:30:52:3a:8f:89:
                    02:63:31:7a:b1:a6:95:11:55:fe:9f:ab:27:51:ba:
                    a5:c2:5b:1f:c9:ac:98:65:e7:7d:c6:fd:ad:2a:71:
                    41:62:0c:dd:3b:e4:b6:59:84:a3:41:17:d0:58:d9:
                    d6:ab:2a:c1:80:1f:e9:ae:b2:fb:38:24:17:d6:79:
                    b1:ac:c6:78:5d:a9:31:67:15:f2:14:5c:a8:23:b1:
                    92:3f:e6:93:d9:5b:15:60:5c:19:bb:5d:17:70:6c:
                    45:34:95:64:68:f7:b1:b8:1f:75:0a:d2:99:77:ac:
                    0f:8f:30:1b:3f:42:fa:c9:e8:c6:a1:6a:82:1a:c9:
                    87:a6:e6:83:67:e5:58:b5:2e:fe:0b:be:ce:79:ef:
                    64:24:a3:fd:64:89:d6:f1:c9:19:a5:1c:99:4e:6b:
                    cf:ac:4c:8b:4c:57:b5:a6:e7:25:c7:b0:79:c1:1f:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:FB:53:7A:95:D2:72:A8:D2:01:8C:03:EA:C5:8B:CE:D9:C4:2F
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:e4:43:b6:1d:04:7d:c7:a1:3b:c5:9a:50:0c:19:4d:4d:
         5a:cc:81:89:e0:74:b6:83:fc:80:79:d7:7d:43:30:f4:fa:a4:
         da:d7:a8:76:92:62:48:02:d7:94:19:84:26:46:5e:6a:40:dc:
         dd:40:d0:3c:bc:3a:fe:ee:ff:35:c2:89:b8:1a:5d:14:8c:c9:
         78:e2:67:e7:7d:86:7d:51:8a:ca:2a:70:e7:71:7a:df:0c:7e:
         f1:ed:d2:7c:e5:02:1a:e2:0d:8c:80:00:f4:28:b9:c8:65:d0:
         34:96:39:f5:78:7c:69:d7:d4:ae:1b:82:a7:b2:2d:97:5a:a1:
         8f:eb:9b:85:dc:f5:bb:d4:39:06:6b:e2:fa:13:75:ea:41:d8:
         5d:0c:ed:0a:57:4b:d8:94:2d:a7:b4:50:4d:3c:1f:e6:2c:04:
         a7:3b:cb:4c:c3:fd:58:58:01:0f:e3:cd:61:57:1e:0c:2e:49:
         c2:11:67:77:4d:df:ec:b4:57:f2:b8:37:c1:cb:8d:f7:68:02:
         27:8b:c7:d5:1c:89:e3:4d:35:99:69:4b:4b:5b:2d:16:83:03:
         73:21:a9:45:95:87:9f:3b:18:76:73:9f:e1:91:ba:3a:cf:b2:
         c7:92:20:a9:04:7e:b7:ac:91:31:1b:47:f8:9b:f6:fc:0d:78:
         4c:03:d0:80
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK+3jid++bY+bmrD34Ad4QfU7tBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0
MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDlaFw0yNzA1MDIwMzAzNDlaMDMxMTAvBgNV
BAMTKEFCQzZGQjUzN0E5NUQyNzJBOEQyMDE4QzAzRUFDNThCQ0VEOUM0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0EsG12yzZu+pYZw8H3tzFf6j
S2/NraySH+2ylTGU0FWyc3l+pAME/UWWrsjoRponla2pLpkXGS+oTQgvbov8cLYg
6SikAthVIk9Dme5qQtawDawwUjqPiQJjMXqxppURVf6fqydRuqXCWx/JrJhl533G
/a0qcUFiDN075LZZhKNBF9BY2darKsGAH+musvs4JBfWebGsxnhdqTFnFfIUXKgj
sZI/5pPZWxVgXBm7XRdwbEU0lWRo97G4H3UK0pl3rA+PMBs/QvrJ6MahaoIayYem
5oNn5Vi1Lv4Lvs5572Qko/1kidbxyRmlHJlOa8+sTItMV7Wm5yXHsHnBH37lAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUq8b7U3qV0nKo0gGMA+rFi87ZxC8wHwYDVR0j
BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0
N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx
NTA3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMxMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmtuMA0GCSqG
SIb3DQEBCwUAA4IBAQBRTORDth0EfcehO8WaUAwZTU1azIGJ4HS2g/yAedd9QzD0
+qTa16h2kmJIAteUGYQmRl5qQNzdQNA8vDr+7v81wom4Gl0UjMl44mfnfYZ9UYrK
KnDncXrfDH7x7dJ85QIa4g2MgAD0KLnIZdA0ljn1eHxp19SuG4Knsi2XWqGP65uF
3PW71DkGa+L6E3XqQdhdDO0KV0vYlC2ntFBNPB/mLASnO8tMw/1YWAEP481hVx4M
LknCEWd3Td/stFfyuDfBy433aAIni8fVHInjTTWZaUtLWy0WgwNzIalFlYefOxh2
c5/hkbo6z7LHkiCpBH63rJExG0f4m/b8DXhMA9CA
-----END CERTIFICATE-----
Generated at Wed May 13 07:59:41 2026 by rpki-client