Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa
File:                     3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (raw, json)
Hash identifier:          d9LxLmy6WX3ywvxwdFi325MoQKQHdEXPLafbFaNZOyY=
Subject key identifier:   7C:16:1F:F3:BB:47:99:EC:A6:D5:94:0F:81:00:BF:39:DB:6E:28:3C
Certificate issuer:       /CN=92444EAFB5817899BEB063769FE0DE16A6772F69
Certificate serial:       22DB29BE5CDF841B71CA19C9489225C39ED63327
Authority key identifier: 92:44:4E:AF:B5:81:78:99:BE:B0:63:76:9F:E0:DE:16:A6:77:2F:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa
Signing time:             Sun 03 May 2026 03:16:39 +0000
ROA not before:           Sun 03 May 2026 03:11:39 +0000
ROA not after:            Sun 02 May 2027 03:16:39 +0000
asID:                     152369
IP address blocks:        157.15.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.crl
                          rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:db:29:be:5c:df:84:1b:71:ca:19:c9:48:92:25:c3:9e:d6:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92444EAFB5817899BEB063769FE0DE16A6772F69
        Validity
            Not Before: May  3 03:11:39 2026 GMT
            Not After : May  2 03:16:39 2027 GMT
        Subject: CN=7C161FF3BB4799ECA6D5940F8100BF39DB6E283C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:0c:2e:26:a6:03:76:e1:07:45:58:b2:07:
                    b0:6a:f4:5a:7a:ea:97:7d:d5:b0:e8:bf:1e:8e:18:
                    fa:f9:78:3c:1c:09:5e:43:20:78:44:d9:0e:e6:ba:
                    93:cc:bd:b3:9a:9c:e8:86:2c:e6:20:37:e0:c3:e3:
                    32:8b:ea:52:04:ea:04:08:71:2f:2c:44:3b:8e:d8:
                    22:f1:c6:21:70:20:4b:0b:da:22:ea:ea:69:44:7d:
                    ee:40:14:9c:36:a8:db:e0:86:7a:84:cc:43:04:6d:
                    1f:f1:91:d4:7c:6c:8e:ae:a2:27:c5:15:27:85:74:
                    cf:22:81:e7:04:cc:0d:a2:f1:94:71:4c:49:0e:57:
                    1f:5c:7d:b5:5b:f8:1c:c4:d7:eb:d1:5d:64:80:2d:
                    08:32:67:e8:c7:49:51:a9:b0:3c:6e:91:5a:9e:91:
                    e5:1f:e4:c7:58:be:a1:a0:d5:f4:bc:91:71:18:9f:
                    ea:20:07:a2:09:e3:17:96:dd:69:7f:97:17:b2:46:
                    c4:f0:c6:af:96:1f:40:9d:3f:21:ea:04:f8:21:fa:
                    1d:16:53:4c:20:6b:be:a3:b6:ab:75:b8:bb:20:06:
                    2a:e9:9f:f7:18:7b:21:71:8a:2d:45:4c:d4:9f:ae:
                    fd:30:8d:5b:c2:9f:1e:85:89:bc:e5:ed:e0:1c:a9:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:1F:F3:BB:47:99:EC:A6:D5:94:0F:81:00:BF:39:DB:6E:28:3C
            X509v3 Authority Key Identifier:
                keyid:92:44:4E:AF:B5:81:78:99:BE:B0:63:76:9F:E0:DE:16:A6:77:2F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:55:4d:86:63:47:52:90:9b:1f:1d:30:37:eb:dd:96:cd:18:
         89:3e:90:69:5a:d8:7d:e3:73:55:04:4b:ea:1d:84:6d:f4:16:
         b9:6a:22:25:14:ad:61:67:9d:f4:3b:55:31:36:e1:26:58:fa:
         bd:0e:ae:16:eb:4e:89:70:b6:13:50:9d:07:d1:6a:53:2c:ac:
         1a:a9:0b:69:67:cf:4e:5e:da:03:58:5d:eb:05:23:63:d1:bc:
         35:93:67:f3:c7:5e:bc:5b:1a:aa:a6:3d:cc:2a:ff:ef:3f:76:
         ad:31:e4:ad:36:d7:35:79:0d:c8:50:ee:84:4b:ed:a6:5a:08:
         ee:3b:c5:dc:84:89:32:92:04:f6:14:5a:54:f8:44:00:8f:ce:
         21:61:51:0b:35:fa:ef:0d:3c:a4:e1:9c:36:b0:33:28:5c:88:
         ae:3c:c8:e0:af:54:ee:c9:59:0b:2a:7a:12:3a:70:f4:2b:f6:
         ec:78:cf:cc:78:0c:80:18:1b:9c:fc:f9:f7:1a:fb:af:93:fd:
         92:3f:0a:03:69:a4:00:65:90:d3:d1:4e:88:36:13:46:4b:b0:
         28:b9:ba:86:15:4c:d3:ea:ca:17:57:9e:60:59:99:cf:ad:ef:
         60:45:92:b3:18:5b:03:4a:71:c7:e1:27:9d:34:2d:6b:92:95:
         07:54:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:45 2026 by rpki-client