Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa
File:                     3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (raw, json)
Hash identifier:          8PPdaCX6mIjApYArjunSo3wNOsnTma7JcAZ0c6t+SzU=
Subject key identifier:   EC:73:F2:BD:C9:AC:45:E6:1B:0E:2E:3F:82:6B:1B:B0:FB:8B:D0:8F
Certificate issuer:       /CN=A5251C27E1AF09AE2F28618250807EA4D573694B
Certificate serial:       1A4D295228C4FE0D60DB40A02E3CF910E4350B7E
Authority key identifier: A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa
Signing time:             Sun 03 May 2026 03:04:54 +0000
ROA not before:           Sun 03 May 2026 02:59:54 +0000
ROA not after:            Sun 02 May 2027 03:04:54 +0000
asID:                     152372
IP address blocks:        157.15.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl
                          rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4d:29:52:28:c4:fe:0d:60:db:40:a0:2e:3c:f9:10:e4:35:0b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5251C27E1AF09AE2F28618250807EA4D573694B
        Validity
            Not Before: May  3 02:59:54 2026 GMT
            Not After : May  2 03:04:54 2027 GMT
        Subject: CN=EC73F2BDC9AC45E61B0E2E3F826B1BB0FB8BD08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:cb:64:31:28:c3:52:14:d7:20:72:32:94:
                    8d:9d:18:75:ac:70:37:3b:0a:40:8c:f3:83:8e:c2:
                    70:07:a8:90:ea:aa:26:c1:e9:99:ab:c7:61:eb:e6:
                    ce:97:d0:31:b1:b7:17:29:f0:fc:6b:28:96:19:eb:
                    7c:88:3e:94:a2:bb:06:02:ee:d4:53:11:e1:b2:70:
                    de:82:45:03:34:27:ed:69:56:4a:2e:e7:17:f8:df:
                    8c:17:a0:ca:05:e3:22:36:28:1b:c8:6b:9d:5c:7d:
                    d1:7a:8b:a7:cc:81:c4:38:10:87:2b:5e:72:54:92:
                    f3:49:83:2f:5b:a2:92:8f:bf:31:fd:3f:69:60:0e:
                    3a:df:6b:a0:1c:6f:eb:8d:e6:2c:28:8d:c5:cd:34:
                    00:a8:96:ec:dc:0b:e5:76:ad:3c:12:df:0a:89:61:
                    1c:e4:61:72:d8:27:56:bd:a5:8a:e5:c0:09:ae:63:
                    1d:59:de:50:d3:30:37:67:01:ba:5a:d4:e4:f9:da:
                    82:ca:3d:6a:0b:d7:94:7c:2b:dd:0d:57:d4:bd:fd:
                    35:b7:55:95:52:ac:ee:35:47:3b:11:d4:59:1a:08:
                    4f:49:a2:07:b1:d8:72:9e:23:ad:91:89:00:f0:4f:
                    99:ed:8d:cf:3d:8e:e6:63:80:24:ff:60:08:89:aa:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:73:F2:BD:C9:AC:45:E6:1B:0E:2E:3F:82:6B:1B:B0:FB:8B:D0:8F
            X509v3 Authority Key Identifier:
                keyid:A5:25:1C:27:E1:AF:09:AE:2F:28:61:82:50:80:7E:A4:D5:73:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/A5251C27E1AF09AE2F28618250807EA4D573694B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A5251C27E1AF09AE2F28618250807EA4D573694B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:69:89:04:61:d6:3b:83:05:a5:bc:37:33:70:9f:bd:c7:cd:
         49:3a:80:23:1b:e8:1f:09:fa:98:71:ca:28:92:fc:4c:e5:de:
         6e:a4:12:86:2e:ce:56:77:09:9b:fd:98:86:f0:64:42:8b:ce:
         2d:eb:92:dd:4e:cd:b2:1c:74:6a:cc:df:35:8a:21:be:c1:2e:
         b6:6c:6a:e3:ff:fe:30:ad:b1:3d:e1:da:82:96:78:cb:45:56:
         29:56:31:ef:a8:df:5e:64:9d:10:c6:ed:74:3c:7a:60:de:95:
         c5:f2:a2:06:6f:45:2c:1d:3e:12:42:36:4f:1e:8d:6f:d5:79:
         c7:e3:3a:11:02:3e:32:21:a7:c4:30:8f:db:dc:6a:5c:2f:ba:
         b7:f7:bc:9b:c9:c0:68:5b:18:aa:d0:d2:d9:a6:ab:b1:08:fa:
         ae:ce:aa:a8:c3:cd:89:d9:a7:e0:90:f9:be:1b:97:41:82:2b:
         68:d0:7e:7d:e9:6f:2c:b5:bc:ef:7e:c0:0f:08:8d:bc:9f:63:
         8b:6b:ef:b7:db:3e:66:ff:81:5c:51:93:55:d2:a5:b0:a1:e5:
         ab:e6:60:ab:a0:f8:0d:96:2d:b6:55:d9:07:cf:61:6d:08:d8:
         8d:8a:9e:01:61:1f:09:95:e5:f6:ef:3b:de:ec:2b:18:95:b6:
         ec:9a:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:52 2026 by rpki-client