Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
File:                     3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json)
Hash identifier:          UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=
Subject key identifier:   09:04:1D:2E:3D:66:76:A6:A0:F6:73:8B:95:13:C6:76:47:EC:67:83
Certificate issuer:       /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial:       6C31E0A7C9814BC03DE161BD9189C7404E38F39B
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
Signing time:             Sun 03 May 2026 03:13:51 +0000
ROA not before:           Sun 03 May 2026 03:08:51 +0000
ROA not after:            Sun 02 May 2027 03:13:51 +0000
asID:                     152365
IP address blocks:        157.15.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
                          rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:31:e0:a7:c9:81:4b:c0:3d:e1:61:bd:91:89:c7:40:4e:38:f3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
        Validity
            Not Before: May  3 03:08:51 2026 GMT
            Not After : May  2 03:13:51 2027 GMT
        Subject: CN=09041D2E3D6676A6A0F6738B9513C67647EC6783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9e:b3:43:4e:11:e8:b0:1c:96:b0:b0:f1:1b:
                    af:6a:f8:9e:f8:36:e8:d7:f0:78:f8:2e:63:71:e0:
                    e0:52:7c:71:16:3c:0e:7a:fa:17:ad:28:21:46:ea:
                    e5:0d:35:02:14:21:7b:70:66:01:c9:42:a2:05:39:
                    fd:c1:1c:00:3b:67:18:ba:bf:14:dd:fd:e9:65:87:
                    67:b2:e3:a0:13:4f:92:1e:1c:74:e0:7d:c0:87:3d:
                    b1:f2:3f:4c:d0:6b:40:1b:f2:48:03:6d:5e:ea:b8:
                    c3:46:da:6e:a0:6b:82:b2:54:c6:48:5a:25:ab:4c:
                    ff:0e:e2:42:1c:85:d5:0f:5d:04:5c:01:96:f5:4d:
                    1f:5b:67:cb:01:51:c9:ac:78:48:00:be:99:aa:8d:
                    3b:14:ae:4c:68:8a:e5:50:04:62:11:f1:bc:1d:8b:
                    f8:49:40:6b:32:c7:18:b7:2a:ec:c8:bd:f5:2f:d1:
                    97:89:c3:fa:86:3d:10:d0:c9:c9:c7:59:ee:d3:d0:
                    0e:ab:7d:89:27:29:21:91:c1:d9:9a:d0:ec:29:47:
                    d0:00:64:da:fa:ae:71:f0:d6:99:61:82:1c:96:96:
                    f3:d7:14:3f:ce:af:d3:b5:09:02:33:56:4b:1d:5a:
                    0d:53:ed:42:ce:f6:0d:de:a2:70:46:c2:5d:6f:a0:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:04:1D:2E:3D:66:76:A6:A0:F6:73:8B:95:13:C6:76:47:EC:67:83
            X509v3 Authority Key Identifier:
                keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:d6:a0:33:04:e7:3d:a7:1e:36:c8:44:4c:02:db:df:f3:
         eb:f1:d6:ff:aa:3c:d7:c6:ab:60:df:0b:c3:9c:01:33:ed:2d:
         a1:06:13:d4:31:bd:5e:5f:a3:f6:32:9b:91:b1:61:8e:54:a6:
         7e:e0:e5:f6:3f:19:44:6b:90:3f:b8:9f:7a:12:4f:98:0a:25:
         d3:aa:3f:d9:c2:88:21:86:1a:bd:7d:bb:17:c0:4b:da:0d:b6:
         70:bf:23:df:24:eb:58:9f:6f:6d:cb:8c:93:37:f9:0c:4b:4a:
         2a:db:de:c1:28:ec:a0:0e:e9:fb:12:be:c9:a3:50:c4:01:04:
         31:e1:0c:76:22:11:6b:a5:e0:a7:66:e8:84:15:ce:d5:d4:1b:
         8c:42:9e:2d:33:6e:3f:dc:3d:ab:05:10:b5:4c:3f:34:6a:5d:
         43:33:6f:c2:02:10:ef:bd:e4:7f:87:5c:3c:51:44:2a:3b:26:
         cd:5a:3f:41:f4:79:bd:5e:c3:6d:e8:6a:a1:98:1c:23:a0:b9:
         03:28:f2:43:e2:30:31:69:c4:9b:97:11:53:bb:6e:5c:89:1b:
         aa:28:7a:c4:48:37:58:4b:bd:d3:06:dd:e9:28:5f:be:07:58:
         96:04:86:2b:57:7d:d0:0e:90:3c:46:63:41:5f:03:77:78:7f:
         6e:7f:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:46 2026 by rpki-client