Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/3139382e31352e31362e302f32342d3234203d3e20313432363339.roa
File:                     3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (raw, json)
Hash identifier:          0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=
Subject key identifier:   4A:54:C4:D7:4F:CF:4C:63:0C:60:D6:A4:3F:DD:37:D7:C6:94:03:17
Certificate issuer:       /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Certificate serial:       10D616251726E5200BB7B98AAA0D8B50EDEF1983
Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/3139382e31352e31362e302f32342d3234203d3e20313432363339.roa
Signing time:             Sun 03 May 2026 03:10:58 +0000
ROA not before:           Sun 03 May 2026 03:05:58 +0000
ROA not after:            Sun 02 May 2027 03:10:58 +0000
asID:                     142639
IP address blocks:        198.15.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
                          rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d6:16:25:17:26:e5:20:0b:b7:b9:8a:aa:0d:8b:50:ed:ef:19:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
        Validity
            Not Before: May  3 03:05:58 2026 GMT
            Not After : May  2 03:10:58 2027 GMT
        Subject: CN=4A54C4D74FCF4C630C60D6A43FDD37D7C6940317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:37:46:36:2f:ef:80:cb:1d:34:99:f1:a3:
                    ba:92:2f:96:07:8a:fc:53:70:ba:3b:b3:d0:ff:2a:
                    9a:6d:89:f4:0a:3e:25:9c:2a:4d:d6:c3:9a:6b:91:
                    7d:eb:b0:f9:d4:4d:95:fa:4f:1a:bc:cb:af:49:c8:
                    f7:e5:b8:88:ba:b4:cb:02:40:97:a1:32:2f:08:61:
                    32:28:a4:dc:dc:71:41:45:68:8f:11:90:c5:87:e1:
                    84:84:53:30:07:4a:5d:5e:3f:72:b9:00:e6:52:5b:
                    c1:44:73:4a:31:88:d6:4c:f2:1b:fe:c1:e3:75:89:
                    de:47:6f:36:3f:d7:45:c2:5f:6a:cd:5c:f7:ee:14:
                    5a:ed:5e:b8:b8:7f:db:bb:99:c6:4b:3e:b1:09:dc:
                    ab:d8:1c:52:b5:52:f4:6b:93:ad:8b:68:2b:17:e9:
                    4c:48:5e:09:cf:66:2e:31:93:da:e4:9c:51:65:0c:
                    af:d7:23:c8:19:0a:63:20:29:81:b4:f9:a4:e4:17:
                    6a:21:fa:5d:64:e1:b5:43:e5:b0:7c:b9:a2:da:e9:
                    c3:28:0f:42:ae:bf:d1:09:cd:0c:7f:65:d4:29:1f:
                    c5:8a:37:6d:94:3e:7c:c3:46:f9:45:aa:57:2d:14:
                    af:c1:18:ae:b4:4d:cf:85:be:89:3f:04:2e:c5:ac:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:54:C4:D7:4F:CF:4C:63:0C:60:D6:A4:3F:DD:37:D7:C6:94:03:17
            X509v3 Authority Key Identifier:
                keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/3139382e31352e31362e302f32342d3234203d3e20313432363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:ff:b1:b0:8a:54:ae:81:3b:75:19:18:61:bc:6a:f0:f9:
         5a:58:19:25:07:47:bd:a0:5c:57:a3:8d:96:fa:00:3f:87:dd:
         23:fc:ec:d3:67:f8:8f:80:17:0b:48:b9:4d:e8:d8:9a:27:d9:
         65:c8:52:29:a6:c8:d7:37:82:54:61:0e:19:b2:c2:bb:33:e7:
         3b:64:98:13:62:b3:a3:9b:0c:ee:3d:08:9a:08:17:28:6d:8d:
         5e:58:c6:de:f4:2a:c0:82:10:f6:ea:b6:f1:24:e2:5d:6a:97:
         b2:27:1d:d0:96:ad:64:f0:2a:55:b5:50:fc:a5:5e:4d:3d:01:
         f3:2c:66:ff:4e:ca:60:1b:d2:be:7b:2c:c4:92:a9:e6:3b:2f:
         e0:a9:00:e6:13:d5:9b:f3:9d:4f:41:15:c7:12:99:16:cf:14:
         0c:23:79:95:65:1c:f8:33:36:7b:13:a7:ac:42:2c:5a:83:17:
         25:d4:e0:b9:b5:15:28:b2:39:f9:4e:fb:d0:fd:a6:67:d0:d6:
         a9:bd:19:23:34:24:56:f5:f3:d5:24:33:8a:bd:67:f2:a3:ee:
         86:9a:bb:68:61:18:fa:36:da:99:1b:86:13:a6:e1:4e:94:96:
         25:2a:59:7c:97:06:bd:c6:5a:a8:b2:39:ca:dd:c0:5b:fb:3b:
         15:55:32:c1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUENYWJRcm5SALt7mKqg2LUO3vGYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF
QUFFQTYyNTAeFw0yNjA1MDMwMzA1NThaFw0yNzA1MDIwMzEwNThaMDMxMTAvBgNV
BAMTKDRBNTRDNEQ3NEZDRjRDNjMwQzYwRDZBNDNGREQzN0Q3QzY5NDAzMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkzdGNi/vgMsdNJnxo7qSL5YH
ivxTcLo7s9D/KpptifQKPiWcKk3Ww5prkX3rsPnUTZX6Txq8y69JyPfluIi6tMsC
QJehMi8IYTIopNzccUFFaI8RkMWH4YSEUzAHSl1eP3K5AOZSW8FEc0oxiNZM8hv+
weN1id5HbzY/10XCX2rNXPfuFFrtXri4f9u7mcZLPrEJ3KvYHFK1UvRrk62LaCsX
6UxIXgnPZi4xk9rknFFlDK/XI8gZCmMgKYG0+aTkF2oh+l1k4bVD5bB8uaLa6cMo
D0Kuv9EJzQx/ZdQpH8WKN22UPnzDRvlFqlctFK/BGK60Tc+Fvok/BC7FrB7XAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUSlTE10/PTGMMYNakP90318aUAxcwHwYDVR0j
BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0
MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB
NjI1LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RhOWNkNjY4LTZjYzUtNDlhNi05
ZmNmLWFlMzJhODdmZTYzNi8wLzMxMzkzODJlMzEzNTJlMzEzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMjM2MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYPEDANBgkqhkiG
9w0BAQsFAAOCAQEAK3v/sbCKVK6BO3UZGGG8avD5WlgZJQdHvaBcV6ONlvoAP4fd
I/zs02f4j4AXC0i5TejYmifZZchSKabI1zeCVGEOGbLCuzPnO2SYE2Kzo5sM7j0I
mggXKG2NXljG3vQqwIIQ9uq28STiXWqXsicd0JatZPAqVbVQ/KVeTT0B8yxm/07K
YBvSvnssxJKp5jsv4KkA5hPVm/OdT0EVxxKZFs8UDCN5lWUc+DM2exOnrEIsWoMX
JdTgubUVKLI5+U770P2mZ9DWqb0ZIzQkVvXz1SQzir1n8qPuhpq7aGEY+jbamRuG
E6bhTpSWJSpZfJcGvcZaqLI5yt3AW/s7FVUywQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:14 2026 by rpki-client