Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa
File:                     3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (raw, json)
Hash identifier:          M2ft8YBsrZNHxT1qFC2d2ksNAchdYmEdnx+ruXyh3Bc=
Subject key identifier:   62:79:76:97:EE:B9:8C:D9:8C:F6:A1:56:67:33:73:AB:A6:F6:3C:67
Certificate issuer:       /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial:       68D4EA8F2653139A0925AB065B5BA42D579F426C
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa
Signing time:             Sun 03 May 2026 03:10:18 +0000
ROA not before:           Sun 03 May 2026 03:05:18 +0000
ROA not after:            Sun 02 May 2027 03:10:18 +0000
asID:                     152758
IP address blocks:        157.66.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
                          rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:ea:8f:26:53:13:9a:09:25:ab:06:5b:5b:a4:2d:57:9f:42:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
        Validity
            Not Before: May  3 03:05:18 2026 GMT
            Not After : May  2 03:10:18 2027 GMT
        Subject: CN=62797697EEB98CD98CF6A156673373ABA6F63C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:fe:e0:92:be:8c:4d:ca:59:18:20:85:fc:
                    89:5a:42:82:6a:88:5a:bb:27:32:09:33:35:1c:b2:
                    22:45:5e:de:33:9a:37:92:fb:70:a2:5d:be:de:28:
                    d7:85:0b:63:0c:a7:a4:7f:a9:6e:04:fd:f3:02:ff:
                    8b:de:f8:eb:0e:7d:84:2e:bc:4c:d6:26:f3:0b:15:
                    a0:f9:f9:5d:4f:c7:d1:32:13:2c:0a:88:3a:e9:06:
                    ea:3e:44:7e:f5:23:39:99:f1:f4:8c:f0:0e:cc:8f:
                    6c:b4:ba:e7:db:c6:b5:89:cf:b3:24:c0:e9:d6:37:
                    a1:da:38:a8:c1:90:02:67:47:5f:4c:c0:08:61:54:
                    37:42:f1:b8:7d:b7:7c:f6:85:44:0a:8b:79:d5:32:
                    cc:cd:09:28:f6:7a:b9:b2:60:26:fe:3e:01:b9:0a:
                    b2:d3:ae:4c:03:79:6f:11:2d:02:33:2b:6c:3b:81:
                    e4:f4:1a:06:84:0e:f5:e5:79:44:cb:5b:9c:6c:c8:
                    43:fd:b7:8f:cd:cd:57:e7:25:18:b8:93:b2:61:90:
                    c5:c4:fc:2b:7f:ec:b3:e7:b6:fe:7c:05:ac:97:4d:
                    40:2e:3d:28:ce:e7:b7:6c:46:49:3f:81:02:38:d8:
                    24:65:9b:72:8b:29:62:3d:71:3f:88:92:23:56:cb:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:76:97:EE:B9:8C:D9:8C:F6:A1:56:67:33:73:AB:A6:F6:3C:67
            X509v3 Authority Key Identifier:
                keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:cc:ec:0b:78:3d:80:62:66:14:e1:5e:58:f0:1a:c4:53:
         72:d0:12:9e:8e:f3:17:44:9c:bc:aa:81:fb:ea:f4:c3:f7:b9:
         90:7b:61:4f:d9:fb:50:2d:ef:d2:26:14:cb:21:cf:c5:16:a6:
         65:33:6c:0b:b1:88:96:b9:fb:fb:a6:ce:a6:e2:03:36:fa:dc:
         28:3e:2a:c2:d1:b0:ca:5f:73:21:86:4d:f2:c4:5b:29:b0:6c:
         d9:89:6c:93:89:11:06:f2:68:28:e0:8e:72:74:6b:97:04:55:
         a0:40:de:d5:83:e8:91:d0:9c:fc:45:3e:69:cf:3c:62:2e:d8:
         95:6e:d1:6f:86:e1:ce:b3:92:b9:e4:3a:5e:d7:37:d5:f4:4b:
         1a:d3:b3:fa:62:68:71:55:4c:ee:2b:35:af:b9:87:63:f1:64:
         bd:d6:95:a6:62:18:59:55:d4:2d:cc:67:31:29:2c:b0:f5:12:
         5c:58:c3:d7:71:62:7a:a2:8a:55:e3:63:d2:48:62:8a:57:81:
         64:64:15:bf:52:ff:e0:ad:26:f9:ef:73:47:ce:ec:c4:8e:1f:
         ed:3b:3f:73:06:10:8f:45:6f:2b:05:f2:01:d6:fc:96:51:b9:
         90:53:e2:9a:56:e2:57:44:81:da:b1:1a:32:6d:2b:70:ea:78:
         21:e2:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:48 2026 by rpki-client