Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
File:                     3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (raw, json)
Hash identifier:          yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=
Subject key identifier:   E6:27:62:A2:CB:4F:86:4F:F1:80:27:C9:47:89:C9:7F:C5:45:A0:84
Certificate issuer:       /CN=A65A7370A28DA71B1C11B89E09D51753C498246D
Certificate serial:       24D98E18329B402E511B3C47B87C01C861862D04
Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
Signing time:             Sun 03 May 2026 02:23:21 +0000
ROA not before:           Sun 03 May 2026 02:18:21 +0000
ROA not after:            Sun 02 May 2027 02:23:21 +0000
asID:                     131454
IP address blocks:        151.158.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl
                          rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d9:8e:18:32:9b:40:2e:51:1b:3c:47:b8:7c:01:c8:61:86:2d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D
        Validity
            Not Before: May  3 02:18:21 2026 GMT
            Not After : May  2 02:23:21 2027 GMT
        Subject: CN=E62762A2CB4F864FF18027C94789C97FC545A084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b2:84:12:de:24:e1:9b:2e:41:fe:9a:43:97:
                    7c:23:ed:bb:e3:ec:e5:23:1d:53:3d:0a:1e:03:30:
                    88:ac:25:73:5a:9c:0c:d9:85:27:f2:c1:87:42:a8:
                    e4:7f:12:48:47:f7:1f:36:8f:d3:f9:3c:e1:44:4e:
                    2d:0e:65:cb:6e:86:5b:fd:e5:02:39:27:ce:c2:88:
                    6f:d4:75:52:90:04:09:31:c9:cb:21:00:bd:6d:29:
                    50:8d:5d:9d:e6:11:fb:fe:98:61:ee:1e:2b:ca:d1:
                    4e:26:c1:b3:02:4f:98:8d:c5:8e:75:29:2f:33:ce:
                    fa:ba:59:2a:a6:79:9d:cd:b3:9b:21:33:a6:36:13:
                    c0:92:d9:3c:06:1a:59:b7:8c:7b:35:73:fe:2e:d8:
                    c6:0b:6c:d3:8d:c2:af:a5:23:01:6e:e0:1a:4c:8d:
                    66:7a:be:40:f2:a9:7d:0f:4f:db:5c:9a:0c:a5:c1:
                    eb:c5:25:cd:b3:50:0c:2d:f7:a7:17:2f:12:fc:bd:
                    96:28:3c:0f:ee:7d:51:9b:ce:2f:3f:b5:60:9d:9e:
                    86:16:f7:18:7c:3f:d2:8c:a9:ad:ee:e9:3c:cf:a7:
                    37:fe:8b:56:a4:08:0a:21:85:d4:c7:cf:20:7f:0e:
                    1f:1c:a7:14:b1:0d:7c:23:8a:f0:2a:ca:cd:ba:14:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:62:A2:CB:4F:86:4F:F1:80:27:C9:47:89:C9:7F:C5:45:A0:84
            X509v3 Authority Key Identifier:
                keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:be:22:3e:2c:0a:b8:2d:f2:a2:c6:75:d0:b1:e1:89:96:
         b9:5f:1e:73:df:76:97:32:3f:32:2a:9d:69:38:3b:b7:01:0c:
         9e:f8:b5:b5:34:e5:7d:d9:22:5b:cb:53:21:95:f5:c8:94:9c:
         ed:92:51:d8:b7:ef:60:03:27:cd:88:89:e6:4d:f9:5c:db:ce:
         b7:03:51:36:38:a4:ba:1b:c9:77:01:24:6e:c3:d1:29:5c:1f:
         f7:d5:96:50:37:79:26:d2:3b:40:d0:7b:5e:55:29:72:24:d4:
         5f:d6:08:8d:1a:dd:40:d4:1b:4c:61:f7:92:85:2a:fc:08:2c:
         08:50:b3:ea:5f:28:a4:cb:70:4e:a5:6e:0c:03:3c:57:c3:34:
         3f:1d:2b:02:c3:14:d3:87:32:2a:ca:95:b9:cc:e9:c0:c2:df:
         4c:ab:9b:71:db:5f:20:cc:d6:66:3e:0d:93:2a:ce:c8:88:fb:
         45:dc:58:9d:03:c0:f4:bf:18:77:44:0d:df:57:a0:66:f7:23:
         ba:e2:c3:1d:98:ce:9d:55:b0:f0:b1:9d:83:71:4b:f3:e0:0d:
         b2:ff:ab:0b:89:1e:fc:44:83:49:a1:ad:8e:c3:aa:e4:fb:ad:
         5c:ba:02:43:25:14:0d:db:5a:8d:10:b9:66:92:2a:b4:a0:8f:
         7d:5e:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:24:08 2026 by rpki-client