Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa
File:                     3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (raw, json)
Hash identifier:          ssrdaMdD91d9puarXkmEF2msco4idnBSdBjfgFRS004=
Subject key identifier:   F4:D8:1D:70:91:5E:79:22:63:4D:DA:33:D0:95:05:74:F6:32:CB:1A
Certificate issuer:       /CN=92444EAFB5817899BEB063769FE0DE16A6772F69
Certificate serial:       46DD5432C7FF85008339453F0D2ED3950795F205
Authority key identifier: 92:44:4E:AF:B5:81:78:99:BE:B0:63:76:9F:E0:DE:16:A6:77:2F:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa
Signing time:             Sun 03 May 2026 03:16:39 +0000
ROA not before:           Sun 03 May 2026 03:11:39 +0000
ROA not after:            Sun 02 May 2027 03:16:39 +0000
asID:                     152369
IP address blocks:        157.15.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.crl
                          rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:54:32:c7:ff:85:00:83:39:45:3f:0d:2e:d3:95:07:95:f2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92444EAFB5817899BEB063769FE0DE16A6772F69
        Validity
            Not Before: May  3 03:11:39 2026 GMT
            Not After : May  2 03:16:39 2027 GMT
        Subject: CN=F4D81D70915E7922634DDA33D0950574F632CB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:58:e9:66:b6:d8:70:1f:70:8b:f2:50:ca:
                    8b:b6:f1:c4:95:6e:58:f4:4b:30:22:23:86:d7:34:
                    77:ab:7a:9c:70:db:cd:56:61:3d:ce:21:7b:4c:fa:
                    4b:08:16:f0:65:bb:54:8e:a9:de:ca:7a:d8:e9:86:
                    71:7e:98:1a:c7:d6:9d:90:fd:d5:d4:30:21:1f:05:
                    70:ae:7c:bd:1c:cf:8c:d2:47:a1:c1:33:86:84:93:
                    0c:4c:73:37:1b:1c:0d:5e:7e:1d:b5:c9:35:cd:a6:
                    e6:cd:50:96:86:13:10:94:52:b0:1a:df:95:74:ef:
                    17:31:3b:d3:5e:42:c7:bb:5e:a3:68:f1:1d:d8:38:
                    ac:06:5b:16:2f:0e:ec:eb:9c:af:1d:38:23:0f:f2:
                    e4:aa:e0:40:f4:e7:1b:0b:31:ab:f3:fb:bd:ad:a0:
                    2d:1e:8e:de:c6:1c:8f:db:45:72:10:0d:28:c2:71:
                    08:98:c0:dd:e0:fc:57:44:2e:63:6d:d4:04:52:e0:
                    ab:26:d4:8c:e5:e2:56:ad:ef:3c:d6:a9:b9:ef:43:
                    a3:b9:8c:ee:34:fa:74:76:66:69:2a:ef:73:77:e4:
                    a3:9c:b2:89:77:e2:e1:fe:1f:8a:6a:4f:f0:5a:de:
                    32:e0:03:a5:e0:eb:8a:fd:79:3a:14:ec:f5:c8:20:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:1D:70:91:5E:79:22:63:4D:DA:33:D0:95:05:74:F6:32:CB:1A
            X509v3 Authority Key Identifier:
                keyid:92:44:4E:AF:B5:81:78:99:BE:B0:63:76:9F:E0:DE:16:A6:77:2F:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/92444EAFB5817899BEB063769FE0DE16A6772F69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/92444EAFB5817899BEB063769FE0DE16A6772F69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:67:3b:f0:be:f8:bc:66:27:15:aa:2b:2d:6c:39:d1:24:
         29:e7:43:62:77:5f:ad:fc:ca:c1:5b:2b:41:61:d1:ce:43:e9:
         bc:07:28:31:36:a2:3b:63:5d:87:a6:b8:e6:94:05:b5:68:b3:
         03:8e:0d:d5:08:56:fb:bb:e6:ec:d8:7b:44:7c:7c:cf:85:09:
         0f:77:44:90:f6:2d:48:ab:8c:c4:04:97:24:19:8c:a9:3a:ec:
         e1:b4:f0:4c:aa:44:3f:f2:33:c1:14:be:20:ba:bd:26:6a:a4:
         b7:ab:55:21:21:17:5a:76:52:c8:2e:66:91:86:40:45:1b:91:
         83:bc:4a:fd:d9:35:f0:8c:e6:fb:fc:d7:37:30:85:80:68:eb:
         a9:02:ac:cd:e2:00:3e:ce:e3:12:f2:e5:be:22:58:68:2d:96:
         fd:2d:79:01:5f:ef:ef:c4:55:00:60:14:b8:ed:1a:d8:8b:b2:
         f0:8d:28:fb:2e:51:0a:ad:9f:0e:c1:b7:52:f3:fa:5c:af:86:
         06:44:bb:76:bd:f1:1b:91:bf:ed:c4:50:e6:77:d2:81:77:a7:
         62:52:55:d9:ac:6a:2a:a4:48:0e:f4:00:7a:f4:f7:e6:f1:cf:
         70:80:77:2e:68:12:56:45:63:75:ad:86:db:04:c1:eb:10:22:
         22:a9:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:11 2026 by rpki-client