Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa
File:                     3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (raw, json)
Hash identifier:          K7vtTo3ZnWeNKSiRcxh0HNGX04hgeoWacm4JGy+ef5A=
Subject key identifier:   11:3B:12:22:F1:7A:E1:5D:F4:D5:19:C2:D4:05:D0:9C:33:37:E9:B7
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       56CD46F5CF3B1C6DA75808FD5D88568D5374C7C2
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa
Signing time:             Sat 02 May 2026 09:23:34 +0000
ROA not before:           Sat 02 May 2026 09:18:34 +0000
ROA not after:            Sat 01 May 2027 09:23:34 +0000
asID:                     154494
IP address blocks:        151.158.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 14:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cd:46:f5:cf:3b:1c:6d:a7:58:08:fd:5d:88:56:8d:53:74:c7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: May  2 09:18:34 2026 GMT
            Not After : May  1 09:23:34 2027 GMT
        Subject: CN=113B1222F17AE15DF4D519C2D405D09C3337E9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:4a:8e:62:f2:b7:29:d8:77:f7:3d:84:89:
                    dd:8b:f0:e0:b7:8a:0a:3d:33:85:99:93:a8:af:ce:
                    d2:c6:fa:ff:fe:9d:55:8c:09:c5:2e:19:da:b0:f2:
                    e4:02:fc:13:c3:61:5d:6f:80:03:7f:a8:5b:6a:2b:
                    1d:60:0e:60:a1:40:02:01:76:e2:17:44:4b:e0:25:
                    54:0a:f6:67:fe:09:26:98:43:60:ff:81:14:4f:26:
                    5c:4e:81:25:a3:63:31:43:65:d2:59:52:72:d7:db:
                    52:b8:c6:80:ea:ec:c1:af:a4:8b:b3:3e:98:2f:17:
                    5a:3d:20:1e:56:9f:dc:73:a3:10:60:ae:68:52:52:
                    c4:62:12:d8:1f:ee:12:89:46:e4:c9:f7:d7:1e:00:
                    9e:93:bb:d5:00:b9:5e:41:0e:5e:6e:b1:2d:93:5c:
                    93:17:83:ac:3a:ef:dc:e0:cb:7d:91:e9:b2:34:c1:
                    19:32:17:cd:02:3c:bd:82:1f:c7:64:38:e6:e4:74:
                    3f:15:d8:68:d8:1c:71:c4:55:38:42:2a:b0:63:de:
                    5c:5d:7b:bf:59:26:7e:d3:39:7a:e1:e3:c9:bd:dc:
                    e2:c9:b3:0c:ab:a6:39:5d:66:21:83:aa:3a:1a:24:
                    f4:fd:cf:2d:53:00:5c:ed:19:66:95:b8:34:11:0d:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3B:12:22:F1:7A:E1:5D:F4:D5:19:C2:D4:05:D0:9C:33:37:E9:B7
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:cb:f7:98:84:41:1a:d7:92:b4:6c:2b:32:87:30:32:ae:2c:
         d4:42:31:ae:73:62:0f:fa:34:19:cb:99:d9:6c:23:16:9b:cd:
         f8:83:bd:bd:c5:15:c6:d7:6d:d1:7b:3a:23:96:7a:b1:0f:90:
         e0:57:0d:96:cd:bc:ad:6a:91:cc:a8:85:17:cd:31:a2:7f:a0:
         8d:bb:ef:14:b9:90:65:7e:47:32:53:d1:83:d0:79:a3:45:6e:
         95:d6:c7:26:12:cf:b1:64:4a:98:a3:2d:d1:74:e5:7e:7a:4a:
         62:37:bf:a2:fb:2b:f7:e1:cc:f7:af:50:20:47:56:7e:38:57:
         6d:b5:e3:0e:95:7d:55:ff:75:17:f9:82:f1:54:89:8e:2e:c1:
         16:a6:c0:67:4b:ad:40:2a:ab:f9:5f:ac:95:7d:f3:ca:7d:e0:
         30:4b:ab:51:c1:ef:ff:e5:0b:e9:a7:b0:88:97:b7:84:88:f3:
         42:3b:d3:69:be:6b:24:e4:4f:93:01:1c:03:4a:90:99:87:44:
         97:da:f1:df:b1:70:ae:5b:48:f2:59:ec:45:46:6b:8b:e3:03:
         45:8e:c7:2b:bd:d7:61:7a:87:12:b4:61:c7:87:47:05:62:39:
         72:fa:18:67:5f:ea:2b:ed:39:93:d5:51:e0:7d:ad:84:39:d3:
         a3:75:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:56:41 2026 by rpki-client