Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa
File:                     3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (raw, json)
Hash identifier:          W3urnvB4E+6SEusJQIN6SGkpT8Tewd+aHWIjJ/m7d6s=
Subject key identifier:   20:42:BF:44:B4:B5:99:2D:4D:0F:55:2A:9E:5A:9E:E1:4F:51:52:94
Certificate issuer:       /CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Certificate serial:       2D5E7D8EB1C6EDFBDBFAC025FD1BF37D79BC3751
Authority key identifier: 62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa
Signing time:             Sun 03 May 2026 03:13:19 +0000
ROA not before:           Sun 03 May 2026 03:08:19 +0000
ROA not after:            Sun 02 May 2027 03:13:19 +0000
asID:                     152082
IP address blocks:        157.10.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
                          rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:7d:8e:b1:c6:ed:fb:db:fa:c0:25:fd:1b:f3:7d:79:bc:37:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
        Validity
            Not Before: May  3 03:08:19 2026 GMT
            Not After : May  2 03:13:19 2027 GMT
        Subject: CN=2042BF44B4B5992D4D0F552A9E5A9EE14F515294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:0c:74:d4:c1:81:46:c1:ce:07:dc:03:94:
                    28:ab:78:6e:08:84:0f:72:f2:47:f0:c6:78:c0:94:
                    ee:2c:d5:c6:d6:f0:53:68:23:3c:ff:9c:fe:ee:03:
                    a3:d6:80:22:ee:8d:63:d8:a5:5f:6d:14:b7:a8:f9:
                    fc:5e:e6:9a:bc:cb:af:7d:80:73:f2:3f:11:04:e4:
                    15:ba:d8:02:89:d8:cf:3f:ca:af:dd:60:30:c9:a7:
                    d1:28:01:d9:fb:4d:c0:40:4e:b4:80:61:4d:c2:fc:
                    d9:cd:1a:73:19:81:0a:e8:21:a9:8f:71:f4:72:d2:
                    2b:a5:f2:26:0b:88:ed:95:be:6a:99:30:cf:26:94:
                    82:71:e1:0d:43:6e:54:98:35:d8:71:18:1f:4b:cc:
                    01:46:ee:fc:71:66:e2:6a:a8:1a:bb:7b:20:f9:dc:
                    a1:5f:70:08:2f:7a:53:2a:2e:0f:84:1a:4b:69:51:
                    d3:40:d1:28:dc:cf:9f:ad:60:35:64:68:73:05:d3:
                    40:53:de:18:ad:b5:e8:b3:68:d5:35:cb:6b:63:e4:
                    0f:79:be:ec:a8:36:f7:e7:71:8d:27:c1:8a:e0:ac:
                    45:39:a4:c6:81:15:52:a0:ce:2d:56:a8:3f:c3:6a:
                    c0:7c:0f:89:d5:fa:79:78:b6:41:87:86:9d:d0:72:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:BF:44:B4:B5:99:2D:4D:0F:55:2A:9E:5A:9E:E1:4F:51:52:94
            X509v3 Authority Key Identifier:
                keyid:62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38382e302f32332d3233203d3e20313532303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:2f:b4:97:42:4a:45:85:49:7d:b0:9e:1f:2c:7b:79:9a:
         41:e7:03:d6:16:e7:f3:b1:f8:a7:00:c7:5d:c3:b9:bc:b5:71:
         eb:de:91:10:ac:38:fa:ba:d3:bf:f5:31:2e:3b:51:7a:3b:ae:
         74:2f:11:51:8d:26:0b:17:f9:f1:9e:e3:63:f2:6d:4c:09:2b:
         02:dd:80:9b:d4:c1:48:fd:66:c1:8f:71:70:76:21:fb:b1:10:
         a7:0e:d0:14:f0:6e:7f:8e:2b:89:7d:99:30:39:59:16:91:56:
         a7:60:86:93:6c:ea:87:14:8e:08:4e:e8:46:4b:95:a0:cc:d6:
         72:b0:11:ad:2b:21:5a:3f:1f:44:33:91:3b:e3:f4:ff:92:5a:
         e6:c0:dd:29:62:c5:04:17:b3:5c:32:cc:38:91:64:37:a9:3c:
         21:20:8c:4c:78:41:9c:6e:2d:d1:f8:bf:97:d8:4c:32:1b:d6:
         7c:0f:68:1e:1d:3e:0a:13:59:36:df:80:07:6d:60:1f:a1:48:
         27:1a:24:4a:21:6e:df:ea:8e:8b:61:b1:d3:67:9b:b5:9e:d2:
         9c:0f:c3:ff:00:09:71:d0:a8:2c:7f:2b:b2:7d:37:a9:ae:c8:
         e0:20:16:0a:9e:54:5d:54:a8:85:ee:9d:ea:a5:8b:7d:ea:10:
         3b:58:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:06 2026 by rpki-client