Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa
File:                     3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (raw, json)
Hash identifier:          UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=
Subject key identifier:   1D:FC:D0:48:71:E3:22:60:88:4A:01:CE:14:D0:A6:BE:2C:C2:16:F2
Certificate issuer:       /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial:       2A923F25B78441450F7EB0FDD6DEA3EE16D8FD41
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa
Signing time:             Sun 03 May 2026 03:13:51 +0000
ROA not before:           Sun 03 May 2026 03:08:51 +0000
ROA not after:            Sun 02 May 2027 03:13:51 +0000
asID:                     152365
IP address blocks:        157.15.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:3f:25:b7:84:41:45:0f:7e:b0:fd:d6:de:a3:ee:16:d8:fd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
        Validity
            Not Before: May  3 03:08:51 2026 GMT
            Not After : May  2 03:13:51 2027 GMT
        Subject: CN=1DFCD04871E32260884A01CE14D0A6BE2CC216F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:fd:c1:c5:b9:3f:6e:1c:c5:a2:78:35:b5:
                    75:82:ca:12:03:6c:80:f8:05:1f:59:54:9b:fa:3f:
                    de:08:51:90:af:e3:38:25:a6:90:3c:97:06:9b:89:
                    6d:f3:23:a4:47:6f:fd:9d:34:83:b1:0a:3b:63:3e:
                    f9:9a:1a:ba:4d:08:38:73:f8:b5:83:87:c8:82:e9:
                    58:a9:9c:0d:5f:db:a6:6a:eb:b4:0d:c8:b7:b3:96:
                    f1:d8:a3:21:bb:30:f2:c3:52:e3:16:1f:c5:c4:f0:
                    2f:b8:14:9f:82:89:5c:b5:fc:a1:f6:40:10:b2:30:
                    eb:ac:38:5c:e7:b1:f2:3c:b3:4c:da:66:77:65:13:
                    9c:d0:f0:98:e8:31:f2:98:7c:79:d4:22:b1:68:dc:
                    3b:af:d4:92:de:e9:b5:47:8d:2a:06:6e:51:65:b6:
                    df:7f:30:16:0d:41:1b:56:6e:a3:87:d8:f4:0d:86:
                    8b:fa:00:69:3e:82:9e:8b:af:3d:a1:89:00:45:0d:
                    21:9f:5c:2a:c3:68:2b:70:9a:aa:ea:24:88:5c:0d:
                    51:f8:09:46:6e:48:1c:3b:fc:e4:15:04:07:00:fd:
                    37:41:10:5c:69:e9:c7:25:0f:63:35:c8:e7:e9:c5:
                    b8:d7:2b:e9:6e:62:a6:76:c6:ed:99:78:60:ea:3e:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FC:D0:48:71:E3:22:60:88:4A:01:CE:14:D0:A6:BE:2C:C2:16:F2
            X509v3 Authority Key Identifier:
                keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:06:09:c4:f6:14:95:79:02:eb:55:f3:77:75:f6:3a:4f:
         10:68:55:83:e4:a7:b1:ed:d0:5f:ba:44:32:72:df:5c:fc:79:
         f1:f2:30:8c:8d:53:30:69:fd:65:04:fb:ee:87:a1:e1:c5:a7:
         7b:ef:85:9f:7a:f9:9d:55:5a:5a:b9:6e:c5:ca:f2:9a:80:57:
         b6:64:93:bd:af:74:83:34:b3:18:fb:ac:4e:b8:76:42:12:3c:
         3c:f1:7c:f4:f0:e6:e2:8d:ea:1f:60:a7:8c:62:d9:cb:62:6c:
         77:25:b9:35:a9:fe:67:7c:e9:d3:62:a5:fe:83:15:75:a6:4e:
         0c:f8:cf:e3:15:5f:9e:1f:cb:a5:28:61:70:25:6b:12:8f:e2:
         3a:d4:17:1f:aa:4a:d0:74:eb:2e:c1:c2:1e:e3:05:d2:87:cf:
         9f:4c:bb:4b:05:b9:7c:28:6d:0d:60:03:d1:36:f8:ac:c3:7c:
         bb:b5:4f:51:a9:93:87:5a:a9:3d:7b:f7:f9:72:86:6c:08:2c:
         69:ff:8b:06:59:82:cf:07:ff:6d:69:c4:24:89:a4:ee:c0:81:
         8e:24:1d:16:97:f6:be:b0:47:33:18:2d:d9:f5:79:cd:27:2b:
         9b:49:30:0a:e0:b3:27:03:0d:e5:36:56:49:f8:ec:86:68:01:
         d2:10:fa:a1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKpI/JbeEQUUPfrD91t6j7hbY/UEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx
QTZCOEQwRTAeFw0yNjA1MDMwMzA4NTFaFw0yNzA1MDIwMzEzNTFaMDMxMTAvBgNV
BAMTKDFERkNEMDQ4NzFFMzIyNjA4ODRBMDFDRTE0RDBBNkJFMkNDMjE2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3a/3Bxbk/bhzFong1tXWCyhID
bID4BR9ZVJv6P94IUZCv4zglppA8lwabiW3zI6RHb/2dNIOxCjtjPvmaGrpNCDhz
+LWDh8iC6VipnA1f26Zq67QNyLezlvHYoyG7MPLDUuMWH8XE8C+4FJ+CiVy1/KH2
QBCyMOusOFznsfI8s0zaZndlE5zQ8JjoMfKYfHnUIrFo3Duv1JLe6bVHjSoGblFl
tt9/MBYNQRtWbqOH2PQNhov6AGk+gp6Lrz2hiQBFDSGfXCrDaCtwmqrqJIhcDVH4
CUZuSBw7/OQVBAcA/TdBEFxp6cclD2M1yOfpxbjXK+luYqZ2xu2ZeGDqPndlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHfzQSHHjImCISgHOFNCmvizCFvIwHwYDVR0j
BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0
RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4
RDBFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05
NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PKjANBgkqhkiG
9w0BAQsFAAOCAQEAk60GCcT2FJV5AutV83d19jpPEGhVg+Snse3QX7pEMnLfXPx5
8fIwjI1TMGn9ZQT77oeh4cWne++Fn3r5nVVaWrluxcrymoBXtmSTva90gzSzGPus
Trh2QhI8PPF89PDm4o3qH2CnjGLZy2JsdyW5Nan+Z3zp02Kl/oMVdaZODPjP4xVf
nh/LpShhcCVrEo/iOtQXH6pK0HTrLsHCHuMF0ofPn0y7SwW5fChtDWAD0Tb4rMN8
u7VPUamTh1qpPXv3+XKGbAgsaf+LBlmCzwf/bWnEJImk7sCBjiQdFpf2vrBHMxgt
2fV5zScrm0kwCuCzJwMN5TZWSfjshmgB0hD6oQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:32 2026 by rpki-client