Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa
File:                     3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (raw, json)
Hash identifier:          /JKwCLZI2uVcywPqFmRR4vPzTjDmfZfkEgunxHLA0cI=
Subject key identifier:   79:52:5A:27:E7:10:75:5F:66:A4:C8:EF:25:2F:1D:27:B5:0E:A5:CA
Certificate issuer:       /CN=93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D
Certificate serial:       4E26FC49EBEC8AAB13EF0A71852031A63FA73E6A
Authority key identifier: 93:C4:CA:2E:74:D1:3A:4D:30:BA:87:FF:45:F9:CE:36:10:ED:16:2D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa
Signing time:             Sun 03 May 2026 03:11:22 +0000
ROA not before:           Sun 03 May 2026 03:06:22 +0000
ROA not after:            Sun 02 May 2027 03:11:22 +0000
asID:                     152396
IP address blocks:        157.15.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.crl
                          rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:fc:49:eb:ec:8a:ab:13:ef:0a:71:85:20:31:a6:3f:a7:3e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D
        Validity
            Not Before: May  3 03:06:22 2026 GMT
            Not After : May  2 03:11:22 2027 GMT
        Subject: CN=79525A27E710755F66A4C8EF252F1D27B50EA5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:71:7f:79:06:12:98:76:82:2a:e2:da:80:
                    67:5a:44:7a:f9:ac:5d:39:ba:cf:39:a8:25:39:8c:
                    37:75:a1:0b:92:a3:e2:ae:2e:d2:81:1e:eb:7e:95:
                    f7:a5:7d:7c:ae:04:19:63:cb:1a:81:e3:d7:dc:44:
                    a6:44:ae:34:9f:65:4a:a4:b5:6c:b9:cc:c2:6d:ba:
                    aa:1f:f8:6c:5b:a5:80:dd:60:a0:90:33:1a:c0:10:
                    2c:d2:2f:df:b8:78:58:1f:a6:f3:3d:77:02:28:29:
                    30:af:39:31:74:1d:3b:1f:53:4f:d3:e8:3b:74:7d:
                    2b:97:c2:ad:62:58:c6:fd:28:df:6b:fe:47:b3:94:
                    e3:89:ae:5c:6f:58:01:1b:3e:df:23:cc:b3:39:99:
                    97:6a:e3:5c:8d:79:d4:87:6b:83:55:89:c3:1a:c5:
                    a3:0d:76:84:2d:2a:46:85:5f:66:43:6e:0a:60:80:
                    37:e1:e1:c8:05:6d:67:2f:fa:d0:b7:6a:ab:47:de:
                    cc:5e:dc:17:ee:22:43:f5:c2:24:a6:b6:de:37:87:
                    2d:fa:e9:32:dd:91:e9:f7:f6:cc:5c:06:1f:60:63:
                    4c:06:ce:7f:99:68:22:00:6b:91:32:09:a0:94:7a:
                    dd:5e:c2:02:da:f4:98:51:42:c6:89:09:94:72:92:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:5A:27:E7:10:75:5F:66:A4:C8:EF:25:2F:1D:27:B5:0E:A5:CA
            X509v3 Authority Key Identifier:
                keyid:93:C4:CA:2E:74:D1:3A:4D:30:BA:87:FF:45:F9:CE:36:10:ED:16:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/93C4CA2E74D13A4D30BA87FF45F9CE3610ED162D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34372e302f32342d3234203d3e20313532333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:12:9f:05:d7:9d:9b:81:fe:ca:de:e4:8f:c4:e2:7a:9d:
         70:2d:60:8d:6f:e0:ca:8e:33:b1:5a:99:cf:af:30:30:39:f6:
         ca:13:ea:cf:37:bd:2a:47:8f:9b:80:5d:bb:39:43:5e:79:33:
         99:0a:14:87:5a:d1:b6:21:06:a1:e6:5e:dd:96:fe:27:02:00:
         1e:69:5f:f5:04:bd:91:43:28:24:6c:e9:e9:86:a4:a8:8b:e3:
         6b:3f:79:72:66:ef:43:cc:81:e0:68:af:a6:ec:04:87:aa:75:
         30:56:01:79:55:e4:20:3f:5b:3a:2a:7b:63:02:70:ad:3e:dc:
         71:fb:eb:79:00:d2:be:a0:2f:67:29:06:01:bb:a5:38:a8:1d:
         79:60:9a:94:c0:71:ad:76:26:d6:e4:ec:89:31:31:d6:31:cd:
         97:b8:eb:32:f9:71:2d:73:53:c5:2c:12:01:3e:1c:fb:fa:a9:
         a3:18:65:92:64:38:b7:d5:ef:e3:1c:72:6a:aa:af:7a:b9:16:
         4d:bb:03:b8:8a:e3:be:e3:00:1b:d8:98:61:82:c2:56:41:49:
         e5:86:88:92:4a:88:9b:16:ce:f1:ce:d5:83:d8:2e:f5:a3:7b:
         36:b9:d2:c4:07:24:c1:98:8b:0c:01:62:95:50:70:eb:04:27:
         b1:f3:32:ba
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTib8SevsiqsT7wpxhSAxpj+nPmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNDNENBMkU3NEQxM0E0RDMwQkE4N0ZGNDVGOUNFMzYx
MEVEMTYyRDAeFw0yNjA1MDMwMzA2MjJaFw0yNzA1MDIwMzExMjJaMDMxMTAvBgNV
BAMTKDc5NTI1QTI3RTcxMDc1NUY2NkE0QzhFRjI1MkYxRDI3QjUwRUE1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtXF/eQYSmHaCKuLagGdaRHr5
rF05us85qCU5jDd1oQuSo+KuLtKBHut+lfelfXyuBBljyxqB49fcRKZErjSfZUqk
tWy5zMJtuqof+GxbpYDdYKCQMxrAECzSL9+4eFgfpvM9dwIoKTCvOTF0HTsfU0/T
6Dt0fSuXwq1iWMb9KN9r/kezlOOJrlxvWAEbPt8jzLM5mZdq41yNedSHa4NVicMa
xaMNdoQtKkaFX2ZDbgpggDfh4cgFbWcv+tC3aqtH3sxe3BfuIkP1wiSmtt43hy36
6TLdken39sxcBh9gY0wGzn+ZaCIAa5EyCaCUet1ewgLa9JhRQsaJCZRyknT3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeVJaJ+cQdV9mpMjvJS8dJ7UOpcowHwYDVR0j
BBgwFoAUk8TKLnTROk0wuof/RfnONhDtFi0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGMzNGVlZDktMTg3ZS00ZjQ2LWE1YmItMGVhOGY2NjlhZTkwLzAvOTNDNENBMkU3
NEQxM0E0RDMwQkE4N0ZGNDVGOUNFMzYxMEVEMTYyRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85M0M0Q0EyRTc0RDEzQTREMzBCQTg3RkY0NUY5Q0UzNjEwRUQx
NjJELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RjMzRlZWQ5LTE4N2UtNGY0Ni1h
NWJiLTBlYThmNjY5YWU5MC8wLzMxMzUzNzJlMzEzNTJlMzQzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PLzANBgkqhkiG
9w0BAQsFAAOCAQEAJqISnwXXnZuB/sre5I/E4nqdcC1gjW/gyo4zsVqZz68wMDn2
yhPqzze9KkePm4BduzlDXnkzmQoUh1rRtiEGoeZe3Zb+JwIAHmlf9QS9kUMoJGzp
6YakqIvjaz95cmbvQ8yB4GivpuwEh6p1MFYBeVXkID9bOip7YwJwrT7ccfvreQDS
vqAvZykGAbulOKgdeWCalMBxrXYm1uTsiTEx1jHNl7jrMvlxLXNTxSwSAT4c+/qp
oxhlkmQ4t9Xv4xxyaqqverkWTbsDuIrjvuMAG9iYYYLCVkFJ5YaIkkqImxbO8c7V
g9gu9aN7NrnSxAckwZiLDAFilVBw6wQnsfMyug==
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:10 2026 by rpki-client