Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa
File:                     3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier:          gMQgWusyiUC65OlKKV0eHqi5N3ooCMrLBVB02a5Ibb8=
Subject key identifier:   64:0E:43:70:92:91:03:88:7A:2C:FD:41:31:A7:BA:01:50:DC:75:0A
Certificate issuer:       /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial:       5E3BC90131EBD24FC740619B718F3E1C0F6A66D0
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa
Signing time:             Sun 03 May 2026 03:10:30 +0000
ROA not before:           Sun 03 May 2026 03:05:30 +0000
ROA not after:            Sun 02 May 2027 03:10:30 +0000
asID:                     38149
IP address blocks:        150.129.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
                          rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3b:c9:01:31:eb:d2:4f:c7:40:61:9b:71:8f:3e:1c:0f:6a:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
        Validity
            Not Before: May  3 03:05:30 2026 GMT
            Not After : May  2 03:10:30 2027 GMT
        Subject: CN=640E4370929103887A2CFD4131A7BA0150DC750A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:5f:bc:4d:f9:1f:9e:b9:b1:93:34:f8:6b:
                    b6:85:09:1e:0c:d2:15:3c:4e:2c:a8:5c:cc:44:9c:
                    23:ef:54:e2:60:cc:1c:f8:40:e4:49:8d:5c:3f:34:
                    4b:c1:01:4c:e0:1e:92:df:6b:3f:c2:23:dc:3e:b2:
                    5f:ab:92:4b:4b:12:cd:58:47:fb:ed:fa:ae:61:3f:
                    be:c6:87:1e:16:a9:cd:db:89:37:00:a3:83:3a:1b:
                    3e:f2:ea:b9:21:9b:64:3c:a6:e6:55:9c:e5:a8:4b:
                    9b:27:dc:0e:e7:e3:ee:90:bb:4a:81:14:3c:9e:04:
                    dc:5e:8d:a0:30:75:8e:aa:6f:0a:73:ff:0f:d4:ba:
                    ec:f7:5e:69:ae:67:75:e1:cc:ee:90:f4:6a:d1:ad:
                    71:07:0c:2b:44:c8:9c:23:cb:d9:64:dc:a4:73:eb:
                    29:b0:f9:c2:3e:ed:6a:2b:7b:41:a1:5f:8f:5c:07:
                    dd:25:ca:03:7d:45:58:83:97:01:40:2b:4c:d8:db:
                    65:a8:4d:83:2c:74:c2:ff:7a:70:0c:29:cc:0a:b4:
                    7a:a0:8d:5c:ef:3d:a7:10:cd:e6:a5:6f:b1:25:8b:
                    55:04:f3:18:4c:bd:3e:02:75:be:b4:76:97:10:39:
                    b0:0a:2c:2c:fd:0c:47:8e:2f:a9:75:6b:cc:c3:21:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:43:70:92:91:03:88:7A:2C:FD:41:31:A7:BA:01:50:DC:75:0A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3139302e302f32342d3234203d3e203338313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:61:bc:33:de:13:d5:89:21:6a:85:35:70:6e:62:6e:fd:
         58:9a:05:8d:eb:ff:57:ce:2e:ef:72:fe:f4:32:60:21:88:7b:
         94:85:ca:76:30:fc:fe:06:2d:09:da:32:e4:86:42:38:01:29:
         fb:f6:f6:dd:b6:b6:54:c3:bb:13:f9:b2:c3:c9:69:6c:b4:d9:
         b4:b6:1a:f6:79:6b:6b:06:f8:b5:94:b5:1b:e1:06:d8:5f:d2:
         71:99:53:42:2a:3e:80:af:66:a3:e4:2c:a8:f8:61:72:65:f6:
         83:97:61:23:a3:cf:0a:dc:a6:ed:82:f1:73:18:f9:6e:f3:1e:
         ea:2c:e3:e6:3e:18:8b:5a:eb:2c:50:50:95:d3:29:f6:f4:9d:
         d1:d3:d2:6f:b7:c3:ff:a9:65:ab:56:c0:af:e0:10:ec:77:26:
         11:b1:2c:99:a4:ae:8e:d1:20:a5:f1:33:e2:50:b0:92:f4:ca:
         b1:a6:a4:78:a4:db:ad:e9:1b:3e:86:07:c9:5a:8b:69:85:ca:
         8f:3c:93:2c:ba:f2:82:07:16:54:a1:fe:85:f0:8d:62:cd:9c:
         44:68:d3:34:01:b4:23:46:f5:fe:f8:11:b1:66:ae:04:60:03:
         95:5a:a5:0f:d3:86:82:e9:dc:54:59:cb:e4:a3:e4:b6:9d:90:
         cf:5b:29:44
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXjvJATHr0k/HQGGbcY8+HA9qZtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3
NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzBaFw0yNzA1MDIwMzEwMzBaMDMxMTAvBgNV
BAMTKDY0MEU0MzcwOTI5MTAzODg3QTJDRkQ0MTMxQTdCQTAxNTBEQzc1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqF+8TfkfnrmxkzT4a7aFCR4M
0hU8TiyoXMxEnCPvVOJgzBz4QORJjVw/NEvBAUzgHpLfaz/CI9w+sl+rkktLEs1Y
R/vt+q5hP77Ghx4Wqc3biTcAo4M6Gz7y6rkhm2Q8puZVnOWoS5sn3A7n4+6Qu0qB
FDyeBNxejaAwdY6qbwpz/w/Uuuz3XmmuZ3XhzO6Q9GrRrXEHDCtEyJwjy9lk3KRz
6ymw+cI+7Wore0GhX49cB90lygN9RViDlwFAK0zY22WoTYMsdML/enAMKcwKtHqg
jVzvPacQzealb7Eli1UE8xhMvT4Cdb60dpcQObAKLCz9DEeOL6l1a8zDIRRjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZA5DcJKRA4h6LP1BMae6AVDcdQowHwYDVR0j
BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4
MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB
QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAloG+MA0GCSqG
SIb3DQEBCwUAA4IBAQCpkWG8M94T1YkhaoU1cG5ibv1YmgWN6/9Xzi7vcv70MmAh
iHuUhcp2MPz+Bi0J2jLkhkI4ASn79vbdtrZUw7sT+bLDyWlstNm0thr2eWtrBvi1
lLUb4QbYX9JxmVNCKj6Ar2aj5Cyo+GFyZfaDl2Ejo88K3KbtgvFzGPlu8x7qLOPm
PhiLWussUFCV0yn29J3R09Jvt8P/qWWrVsCv4BDsdyYRsSyZpK6O0SCl8TPiULCS
9MqxpqR4pNut6Rs+hgfJWotphcqPPJMsuvKCBxZUof6F8I1izZxEaNM0AbQjRvX+
+BGxZq4EYAOVWqUP04aC6dxUWcvko+S2nZDPWylE
-----END CERTIFICATE-----
Generated at Wed May 13 05:46:43 2026 by rpki-client