Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32342d3234203d3e20313532303836.roa
File:                     3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (raw, json)
Hash identifier:          4iGXcBZYaBFbhDDaR3Pc1G9l4kgiEhTR6an+xcIZ1pc=
Subject key identifier:   06:B8:CF:1D:94:C2:AA:61:C7:6A:2F:8C:98:14:C1:06:F8:FC:91:8E
Certificate issuer:       /CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1
Certificate serial:       D5D586241A1D08C372113216C5A389A2D3FF47
Authority key identifier: 1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32342d3234203d3e20313532303836.roa
Signing time:             Sun 03 May 2026 03:15:47 +0000
ROA not before:           Sun 03 May 2026 03:10:47 +0000
ROA not after:            Sun 02 May 2027 03:15:47 +0000
asID:                     152086
IP address blocks:        157.10.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl
                          rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:d5:86:24:1a:1d:08:c3:72:11:32:16:c5:a3:89:a2:d3:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1
        Validity
            Not Before: May  3 03:10:47 2026 GMT
            Not After : May  2 03:15:47 2027 GMT
        Subject: CN=06B8CF1D94C2AA61C76A2F8C9814C106F8FC918E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:54:1d:02:f8:b8:e7:0f:6a:e0:92:6a:52:
                    8a:ed:86:96:be:fc:0c:35:99:d9:22:6c:32:41:7c:
                    e6:9c:28:de:b0:cb:4e:e6:07:3b:27:a7:38:df:e1:
                    34:3b:bf:90:64:10:31:97:b0:0d:e4:f7:34:ed:46:
                    15:03:9c:c6:69:f4:4f:c7:2e:66:6a:6c:03:f1:85:
                    cf:c9:06:4a:95:63:47:90:3c:22:9f:08:76:31:c7:
                    b0:be:d1:61:3e:81:75:67:39:06:4c:a9:b9:cb:e7:
                    bd:e4:67:2e:fb:0d:dc:f1:5d:df:fb:78:bb:79:43:
                    37:90:f3:5b:4e:1c:47:bf:31:b6:b7:e9:69:02:3f:
                    b6:f3:35:0a:0d:aa:ff:91:42:71:7e:be:1c:08:cf:
                    6a:9c:89:29:ea:c9:ab:32:e2:98:08:25:a9:4f:a7:
                    64:d4:e4:64:df:c3:be:50:f9:f4:b6:19:52:b6:e1:
                    d2:fb:bf:8f:98:df:33:df:28:d6:96:3e:a1:15:cf:
                    b6:41:1d:a8:6c:47:3f:ec:a0:0f:b7:5c:0b:5b:60:
                    89:db:79:d2:60:fd:fd:f6:96:3b:56:15:4e:43:85:
                    2a:6e:af:0b:a0:98:72:bf:f6:44:f3:80:0b:fb:3a:
                    b2:1a:ca:37:38:1b:31:0f:5c:0b:18:c9:d0:c7:68:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:CF:1D:94:C2:AA:61:C7:6A:2F:8C:98:14:C1:06:F8:FC:91:8E
            X509v3 Authority Key Identifier:
                keyid:1B:9E:9F:23:53:3D:41:09:9D:0C:5C:D1:70:C2:B5:1A:87:B8:F6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B9E9F23533D41099D0C5CD170C2B51A87B8F6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/3135372e31302e39302e302f32342d3234203d3e20313532303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:84:ad:cb:e2:26:97:e5:c7:6d:48:73:bf:a5:55:db:0d:20:
         ec:81:8f:5b:98:e8:79:7f:e9:5c:d1:e7:7d:66:71:21:6a:f9:
         4f:ed:46:92:36:16:38:d8:9c:ab:c8:b7:40:1a:c4:25:52:87:
         c5:1c:25:67:ab:b5:03:47:0e:82:91:47:a1:15:db:a2:f5:d4:
         38:03:23:30:6d:5e:39:bd:65:e4:3a:be:43:bf:d4:d7:95:e9:
         db:ea:0b:54:79:da:33:57:a4:d5:4e:95:83:ce:f6:27:47:b6:
         c7:34:89:dd:50:b4:c1:7e:cf:ec:00:09:80:6f:93:d7:46:9f:
         d3:ec:a9:97:8e:27:24:73:f8:05:ae:3b:97:9e:2f:01:db:43:
         47:44:e8:64:7e:c8:2c:3c:aa:a6:95:55:d3:7d:96:f3:2f:41:
         3f:e8:28:e7:43:8b:4c:f5:d4:4f:1b:e9:c5:50:7f:40:e6:28:
         fa:af:a4:3b:1a:09:5e:15:87:7e:98:f9:ef:6f:f1:68:f2:c5:
         f4:77:bf:a2:ce:e1:3d:ee:6d:46:a9:66:b3:7c:59:a7:3e:53:
         e9:80:d6:b5:02:ca:61:3f:5b:ec:6f:ff:7a:2e:d0:91:3b:07:
         18:2d:01:b5:ba:2b:c8:e6:43:5e:c0:5d:aa:8d:a2:f9:51:b2:
         8a:74:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:55 2026 by rpki-client