Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa
File:                     3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (raw, json)
Hash identifier:          8kSvXezcYEeTv4auRNNy4r2sFerV1LWNU23uvmXlnSM=
Subject key identifier:   27:B0:56:A1:5D:59:16:BF:4C:48:C1:D6:2D:FA:59:C2:9D:38:54:99
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       696A83782301CE47DC452F1FC45BE7140FA2F55C
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa
Signing time:             Sun 03 May 2026 03:10:31 +0000
ROA not before:           Sun 03 May 2026 03:05:31 +0000
ROA not after:            Sun 02 May 2027 03:10:31 +0000
asID:                     38149
IP address blocks:        150.129.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6a:83:78:23:01:ce:47:dc:45:2f:1f:c4:5b:e7:14:0f:a2:f5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May  3 03:05:31 2026 GMT
            Not After : May  2 03:10:31 2027 GMT
        Subject: CN=27B056A15D5916BF4C48C1D62DFA59C29D385499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:c2:39:e3:e2:3e:e7:67:88:18:c5:c8:50:
                    d0:95:50:e5:9d:70:bb:b1:8a:47:5a:ce:f5:fc:98:
                    78:44:40:2f:90:df:71:ad:f1:4b:59:33:2d:d9:b5:
                    1c:f5:12:bb:77:bd:70:d2:62:6e:8b:09:07:91:d4:
                    62:1b:a8:cf:0d:22:09:17:78:75:f0:14:e9:ea:ea:
                    01:60:fd:e6:87:64:e0:75:fc:68:e7:e2:35:f8:8c:
                    74:e9:d1:44:d0:b2:31:49:08:8e:07:04:62:f2:83:
                    31:ca:8a:23:c5:f9:fa:cd:d4:f6:a3:70:96:37:65:
                    37:94:43:98:78:fb:95:ca:71:ee:13:4e:bc:0b:77:
                    f6:15:55:6b:80:f2:5b:99:9a:ab:ee:34:13:84:a2:
                    db:70:33:4e:a7:49:52:a2:1b:bb:b8:cf:8e:a1:85:
                    62:a6:1c:9b:b9:63:d8:dc:7f:19:6e:bb:45:ed:22:
                    63:fe:51:ff:83:97:d0:b3:15:d1:6e:72:bf:af:c6:
                    90:b6:f2:f3:16:3f:91:23:8e:37:68:a3:06:73:14:
                    9a:7f:ac:fb:4b:4b:79:1b:da:a7:30:91:53:a5:3e:
                    32:b8:fd:14:6c:e8:4e:84:71:69:d0:5d:10:a3:7d:
                    d9:ea:41:14:82:71:13:e1:33:04:86:89:85:24:71:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:56:A1:5D:59:16:BF:4C:48:C1:D6:2D:FA:59:C2:9D:38:54:99
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:15:03:3c:d1:e2:41:c6:f7:7b:36:07:1a:7f:cb:1a:e1:
         43:0e:cb:1a:3f:ec:5b:6d:4e:49:ad:c3:1d:f8:7c:f5:24:3f:
         13:53:8b:f2:ff:68:94:7a:5f:13:c2:a7:99:23:0b:52:00:a5:
         19:fb:d2:0f:80:c0:21:26:9b:16:04:bd:8a:8a:72:fd:88:d5:
         73:c6:3d:c0:9a:39:d9:45:10:b4:95:25:e3:1d:b7:7a:6b:af:
         3e:86:67:d6:12:cd:bd:e8:80:40:52:48:bd:a9:cc:76:dd:16:
         f0:01:ae:6a:ca:3e:54:d6:3f:87:5d:27:b9:89:78:14:0f:25:
         f3:38:0a:c2:90:7b:22:f3:62:16:9e:13:57:28:0b:8b:5a:8a:
         f9:c5:54:e9:b7:32:6d:50:ae:fc:d4:30:8a:ca:ac:07:a1:95:
         38:53:a1:77:8b:79:86:9e:60:e0:ef:ec:c5:e9:f2:8e:b8:c3:
         e0:7f:fa:ce:b9:53:21:f3:c4:9b:00:fd:f2:7d:e1:3d:e7:fb:
         f8:e1:23:9d:80:c3:d4:7f:5e:c5:44:65:ae:7e:e6:d6:5c:e0:
         a4:ee:f2:d7:1a:ef:f1:5e:3d:d0:ae:42:49:4d:c1:53:5b:91:
         bf:0b:0f:65:73:28:c2:2a:55:94:3c:16:9d:93:2a:48:05:9b:
         88:cd:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:06 2026 by rpki-client