Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa
File:                     3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=
Subject key identifier:   AE:8C:4D:25:0F:23:42:67:B4:9D:A1:7C:95:07:F9:EF:9C:4C:72:9B
Certificate issuer:       /CN=54C92083A9323650229F71CD77020E900DBD4472
Certificate serial:       2A5A0AC679E3312FCEFEA9F7267DC7D1FE0B1514
Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 May 2026 03:10:48 +0000
ROA not before:           Sun 03 May 2026 03:05:48 +0000
ROA not after:            Sun 02 May 2027 03:10:48 +0000
asID:                     136052
IP address blocks:        157.10.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
                          rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5a:0a:c6:79:e3:31:2f:ce:fe:a9:f7:26:7d:c7:d1:fe:0b:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472
        Validity
            Not Before: May  3 03:05:48 2026 GMT
            Not After : May  2 03:10:48 2027 GMT
        Subject: CN=AE8C4D250F234267B49DA17C9507F9EF9C4C729B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:75:2b:07:08:d5:d1:3d:bc:51:42:96:64:
                    28:dd:3d:fd:13:0f:03:ec:ef:a8:c1:2a:63:37:df:
                    2f:d9:ab:20:55:95:d0:8a:d5:69:ac:f6:6f:a5:b6:
                    06:07:b7:89:6d:33:97:23:c7:4e:e6:25:94:63:7d:
                    75:e2:2f:e7:21:68:64:c7:fa:66:eb:3e:67:df:bf:
                    75:4e:56:e8:80:78:ff:b7:bf:7f:de:1e:11:76:37:
                    e5:ce:e4:b4:c3:dc:48:5b:cc:cb:90:f4:de:5b:a6:
                    37:0a:28:9c:78:6a:28:27:7b:62:f1:28:42:a1:88:
                    4a:d4:4c:f0:8f:c4:74:d3:db:c1:21:97:a6:a3:af:
                    d5:1c:9b:04:34:f0:08:5a:a5:56:11:55:aa:64:0a:
                    8c:23:33:e8:84:44:0d:7d:c6:6c:08:d8:10:01:2b:
                    1f:fd:ff:b9:f0:f3:82:51:cb:0b:41:67:cf:ce:a7:
                    fc:f5:6a:3c:c1:bc:8d:67:e5:25:c8:41:6b:fd:0b:
                    02:9a:1f:2f:87:d5:be:46:ea:a9:c9:f7:d4:46:01:
                    1e:32:5b:56:0d:15:6e:6f:bc:d8:02:7d:55:80:ea:
                    89:07:34:c7:49:80:8b:0d:29:09:72:87:7d:ae:0b:
                    28:2b:2e:85:82:3c:8d:68:1d:bd:0b:cb:61:16:f2:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:4D:25:0F:23:42:67:B4:9D:A1:7C:95:07:F9:EF:9C:4C:72:9B
            X509v3 Authority Key Identifier:
                keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:de:81:87:51:75:01:de:d5:7b:fc:82:fb:8f:ac:ee:f5:4a:
         b4:96:45:37:14:4d:76:f8:be:b3:ad:26:99:68:5c:7d:b6:cb:
         9e:3a:5f:c2:74:c0:9e:17:09:fc:2b:bf:89:ed:54:f2:7b:2e:
         30:bb:34:bc:ab:ea:9b:a5:09:45:ca:13:55:46:60:f4:e2:74:
         47:1e:b8:96:36:f2:f1:1a:d7:94:d3:50:7b:4e:d4:be:ab:8f:
         8c:8d:e6:84:0d:4b:9b:fe:35:bd:1e:7b:26:8d:a8:83:48:e0:
         e6:be:b6:c3:c7:1f:d4:9a:7d:94:f0:95:6a:30:42:61:3b:bf:
         23:a4:02:2c:04:1f:2e:fc:43:88:ca:cf:30:83:7f:ec:0f:de:
         c1:8a:5d:3c:53:21:5f:34:08:4c:ee:f6:56:5c:cf:ac:96:c6:
         ac:d5:a0:70:6f:56:7c:93:1a:7a:fd:21:72:56:71:96:3f:a1:
         bc:75:b8:34:c1:8c:d7:ce:90:60:b4:eb:49:b9:98:3a:4f:5c:
         3d:70:da:bf:84:27:5a:ff:81:71:cc:04:d0:ad:54:42:5f:e4:
         74:6c:20:85:0f:a9:60:95:52:08:b8:61:1f:09:7c:be:12:82:
         68:14:c5:dd:3e:30:b4:c5:6d:8f:7b:b8:c0:04:ae:5b:db:d8:
         65:b8:d2:88
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKloKxnnjMS/O/qn3Jn3H0f4LFRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDOTIwODNBOTMyMzY1MDIyOUY3MUNENzcwMjBFOTAw
REJENDQ3MjAeFw0yNjA1MDMwMzA1NDhaFw0yNzA1MDIwMzEwNDhaMDMxMTAvBgNV
BAMTKEFFOEM0RDI1MEYyMzQyNjdCNDlEQTE3Qzk1MDdGOUVGOUM0QzcyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5v3UrBwjV0T28UUKWZCjdPf0T
DwPs76jBKmM33y/ZqyBVldCK1Wms9m+ltgYHt4ltM5cjx07mJZRjfXXiL+chaGTH
+mbrPmffv3VOVuiAeP+3v3/eHhF2N+XO5LTD3EhbzMuQ9N5bpjcKKJx4aigne2Lx
KEKhiErUTPCPxHTT28Ehl6ajr9UcmwQ08AhapVYRVapkCowjM+iERA19xmwI2BAB
Kx/9/7nw84JRywtBZ8/Op/z1ajzBvI1n5SXIQWv9CwKaHy+H1b5G6qnJ99RGAR4y
W1YNFW5vvNgCfVWA6okHNMdJgIsNKQlyh32uCygrLoWCPI1oHb0Ly2EW8lCzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUroxNJQ8jQme0naF8lQf575xMcpswHwYDVR0j
BBgwFoAUVMkgg6kyNlAin3HNdwIOkA29RHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDk3MGU5MzQtODc1MS00YTYxLTk5NTAtZDRmYTQ4MGNkYTQxLzAvNTRDOTIwODNB
OTMyMzY1MDIyOUY3MUNENzcwMjBFOTAwREJENDQ3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81NEM5MjA4M0E5MzIzNjUwMjI5RjcxQ0Q3NzAyMEU5MDBEQkQ0
NDcyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q5NzBlOTM0LTg3NTEtNGE2MS05
OTUwLWQ0ZmE0ODBjZGE0MS8wLzMxMzUzNzJlMzEzMDJlMzIzNTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQr8MA0GCSqG
SIb3DQEBCwUAA4IBAQDg3oGHUXUB3tV7/IL7j6zu9Uq0lkU3FE12+L6zrSaZaFx9
tsueOl/CdMCeFwn8K7+J7VTyey4wuzS8q+qbpQlFyhNVRmD04nRHHriWNvLxGteU
01B7TtS+q4+MjeaEDUub/jW9HnsmjaiDSODmvrbDxx/Umn2U8JVqMEJhO78jpAIs
BB8u/EOIys8wg3/sD97Bil08UyFfNAhM7vZWXM+slsas1aBwb1Z8kxp6/SFyVnGW
P6G8dbg0wYzXzpBgtOtJuZg6T1w9cNq/hCda/4FxzATQrVRCX+R0bCCFD6lglVII
uGEfCXy+EoJoFMXdPjC0xW2Pe7jABK5b29hluNKI
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:37 2026 by rpki-client