Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32332d3233203d3e20313532303836.roa
File:                     3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (raw, json)
Hash identifier:          v7cG37DYrW8JrmIbpGdR7cCoMwPhd0DXQSTSMGbLlQ4=
Subject key identifier:   27:9F:2C:C0:0E:DD:D4:94:1A:15:54:30:37:8F:DF:AC:6F:20:D0:99
Certificate issuer:       /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1
Certificate serial:       3119C4A6CD16B30B896D13C6029598919BEDBFA6
Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32332d3233203d3e20313532303836.roa
Signing time:             Sun 03 May 2026 03:15:46 +0000
ROA not before:           Sun 03 May 2026 03:10:46 +0000
ROA not after:            Sun 02 May 2027 03:15:46 +0000
asID:                     152086
IP address blocks:        157.10.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl
                          rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:19:c4:a6:cd:16:b3:0b:89:6d:13:c6:02:95:98:91:9b:ed:bf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1
        Validity
            Not Before: May  3 03:10:46 2026 GMT
            Not After : May  2 03:15:46 2027 GMT
        Subject: CN=279F2CC00EDDD4941A155430378FDFAC6F20D099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:9c:67:1e:7d:3a:c4:65:91:27:3b:16:a1:
                    0c:c1:02:67:e5:ce:c4:0c:c0:af:c8:a7:07:90:cc:
                    d0:0c:ce:c4:c3:d5:60:79:b9:64:fb:bd:1c:b1:26:
                    ca:59:92:4f:68:da:86:c8:89:2c:3f:4c:10:11:d8:
                    00:f2:a5:3b:91:32:b3:54:a5:86:cb:72:2b:18:83:
                    3c:62:32:07:da:83:4c:ed:84:1b:42:2f:3d:29:11:
                    a4:ec:d4:6a:fe:ab:91:ec:8e:78:b5:92:a5:31:35:
                    6f:e0:a0:f7:78:c4:0d:24:ed:6f:65:c7:6f:5c:97:
                    14:2c:9e:3a:48:71:d5:1f:c3:53:38:ca:be:a7:73:
                    73:c0:b3:62:36:94:7b:b8:24:1f:f5:5f:ae:b5:01:
                    15:73:32:e1:b6:81:07:e3:a5:d5:ea:c7:ff:03:4c:
                    32:39:e6:db:ed:6f:17:80:48:51:11:f6:71:da:d3:
                    57:5e:ae:3a:61:59:0d:b8:24:4a:a2:6f:87:f4:94:
                    01:00:06:8a:46:52:9c:9c:9c:13:9d:56:6f:58:4f:
                    1f:35:01:95:70:6f:32:29:18:d6:95:ae:31:2a:db:
                    3d:27:00:e4:2e:6e:e8:85:ff:aa:cd:7c:1b:43:23:
                    92:09:4d:14:98:8e:e5:8b:89:65:b4:89:97:12:10:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:2C:C0:0E:DD:D4:94:1A:15:54:30:37:8F:DF:AC:6F:20:D0:99
            X509v3 Authority Key Identifier:
                keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32332d3233203d3e20313532303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:b5:c0:45:fb:27:23:7e:fc:e4:db:9c:5c:a2:eb:b5:cf:
         a7:b4:ce:86:dc:6c:d9:58:c9:82:ff:d3:ec:f0:53:8c:af:e2:
         cb:ea:34:3a:c1:c9:20:e2:c0:d5:4f:ed:b8:b7:47:92:c3:1a:
         dd:66:bc:1c:5c:ad:39:28:22:83:5d:1f:2d:63:22:2b:0d:6e:
         69:e1:8d:d2:36:4b:ae:a5:5a:89:a5:e1:9f:3b:bc:94:73:86:
         19:3b:82:bb:6f:fd:cf:d3:ea:83:6d:92:49:2a:9f:22:6d:1c:
         06:37:13:bb:eb:33:f4:e9:09:e4:a4:98:7c:1f:fb:39:2c:d0:
         d1:71:ba:41:e6:27:3d:54:e2:c1:a5:22:23:4f:28:ba:14:05:
         37:fb:05:81:3d:a3:9b:f9:f6:fd:ab:84:b5:a3:62:89:fa:48:
         97:f8:f3:bf:f2:45:fb:d3:dd:23:1f:9f:aa:bd:05:38:2e:10:
         15:9a:44:c1:5a:6d:51:00:68:0b:7b:eb:12:8a:3d:75:5b:81:
         b2:ac:c3:09:6b:fd:51:64:c3:d8:e8:5d:d9:aa:37:ef:cc:71:
         6d:b6:06:ee:c3:0a:c1:63:18:8a:9f:76:57:24:cc:e9:01:ca:
         83:38:71:96:b5:3b:a0:b7:06:ab:46:b1:59:e3:9e:a6:34:b6:
         13:4e:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:48 2026 by rpki-client