Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa
File:                     3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (raw, json)
Hash identifier:          c81trxyY0udGDfe8fU9qE2D4eeTkINIkeMooDG/PsoU=
Subject key identifier:   55:DB:91:D4:A4:F2:EC:2A:12:51:70:DA:FC:20:A0:85:0A:46:33:45
Certificate issuer:       /CN=1073C0AF2447C17B85643987B72701D1AE52823D
Certificate serial:       2641DFDDC75DE6BF6A5663687785D9E9FC1D72F3
Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa
Signing time:             Tue 21 Apr 2026 02:01:35 +0000
ROA not before:           Tue 21 Apr 2026 01:56:35 +0000
ROA not after:            Tue 20 Apr 2027 02:01:35 +0000
asID:                     152397
IP address blocks:        157.15.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
                          rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 11:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:df:dd:c7:5d:e6:bf:6a:56:63:68:77:85:d9:e9:fc:1d:72:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D
        Validity
            Not Before: Apr 21 01:56:35 2026 GMT
            Not After : Apr 20 02:01:35 2027 GMT
        Subject: CN=55DB91D4A4F2EC2A125170DAFC20A0850A463345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:7f:e9:1c:ba:43:46:ac:ec:e0:2e:50:87:
                    7b:8e:39:66:bc:df:8a:a1:3f:a7:15:37:a8:93:05:
                    84:c8:31:c6:60:d5:e5:cf:86:50:a5:6b:b8:41:7f:
                    8d:cd:c5:2b:cd:63:a7:98:50:8d:ca:45:0a:62:4a:
                    32:e3:f0:91:cd:b2:ec:b8:3e:04:0d:b4:97:71:8a:
                    a5:0c:49:6b:da:99:14:ae:09:e9:1c:5e:49:2e:0e:
                    02:3f:bc:82:85:5e:af:d7:9a:ef:36:c2:35:8e:dc:
                    30:ab:4e:58:27:d8:f2:4a:9b:ab:cb:67:1c:a5:df:
                    82:25:2e:6a:6c:0f:2b:49:07:b2:b5:9e:d4:80:10:
                    9c:41:7c:e5:bd:e6:88:4d:04:b3:df:99:2d:dd:4c:
                    0b:c7:67:7a:87:73:69:d6:19:32:61:14:a9:77:3b:
                    68:ba:13:af:28:08:e5:80:14:a7:21:8c:f8:30:c1:
                    36:f9:66:9f:6c:d7:24:38:53:2b:33:3e:4d:2b:b4:
                    06:27:3f:2e:a6:9d:ab:3f:66:13:47:55:95:dd:5b:
                    fd:f9:00:f0:8e:32:f6:00:7d:db:52:9e:ac:d5:35:
                    3f:ab:7b:35:4c:39:de:6c:42:c3:c8:c3:e7:c0:1a:
                    a1:d6:20:b4:ea:a0:44:0a:8b:cf:2d:6f:7e:51:84:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:91:D4:A4:F2:EC:2A:12:51:70:DA:FC:20:A0:85:0A:46:33:45
            X509v3 Authority Key Identifier:
                keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:cb:8f:2c:db:92:13:c4:1c:11:ce:59:08:a5:34:c7:68:
         8a:12:b7:fe:d5:8d:15:87:96:d1:30:a5:48:7f:e5:ea:1e:23:
         2a:67:f5:c3:b9:1e:ab:a7:c1:03:bf:71:26:64:76:25:af:3b:
         f4:0d:97:fc:15:ba:00:c6:3f:99:67:5f:a6:12:0f:71:86:1e:
         44:56:e5:74:d5:5c:35:ba:dc:02:4d:72:3f:89:ae:04:a3:5f:
         18:cf:10:ae:0e:2d:c6:4b:d5:00:79:8e:4f:ce:6c:c8:de:be:
         1c:94:53:e3:fe:f4:d5:91:c1:39:c2:50:7d:ce:f2:0b:a7:c7:
         57:bc:d5:bd:8f:d7:79:36:9a:5a:21:4a:17:47:8d:8f:17:de:
         48:36:1b:94:91:62:e7:48:5e:80:26:24:82:e7:c4:6d:7a:97:
         b7:59:8e:23:d8:06:a9:a5:87:41:dd:f8:c4:07:32:f4:7b:f4:
         1d:0f:8a:9e:b4:d7:bc:bc:53:0e:fb:0f:68:92:a8:e9:56:86:
         3c:e2:ee:52:64:f9:44:21:6c:9f:af:9f:ed:01:86:3f:a7:ec:
         1f:f6:99:15:5a:5e:22:84:70:f5:68:c5:aa:a6:32:c0:f0:b4:
         10:40:31:27:77:13:3c:e7:1a:0c:e7:61:5a:41:bf:5c:c2:ef:
         03:47:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:04:31 2026 by rpki-client