Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa
File:                     3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (raw, json)
Hash identifier:          rsgLkVZ7ASQkDorSMSGJsm/yhf9qJ/kLL4PzZ1Ecuew=
Subject key identifier:   F5:65:AF:A6:8C:A4:D2:FD:03:79:61:41:71:6F:E0:83:9F:5E:2C:BF
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       49F1512004ABF97B6CA4CB5D270ED5F1C1F133F8
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa
Signing time:             Sat 02 May 2026 08:36:21 +0000
ROA not before:           Sat 02 May 2026 08:31:21 +0000
ROA not after:            Sat 01 May 2027 08:36:21 +0000
asID:                     154528
IP address blocks:        151.158.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 14:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:51:20:04:ab:f9:7b:6c:a4:cb:5d:27:0e:d5:f1:c1:f1:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: May  2 08:31:21 2026 GMT
            Not After : May  1 08:36:21 2027 GMT
        Subject: CN=F565AFA68CA4D2FD03796141716FE0839F5E2CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:f6:2c:95:3e:c2:21:56:ae:bd:3c:a6:4c:
                    f0:9d:0e:c7:ba:3c:5a:f9:e8:57:e7:b8:28:c7:51:
                    a2:b4:f1:0c:a0:c0:39:8a:d4:ce:46:66:33:44:93:
                    15:6e:d6:41:f1:81:1d:a0:50:cd:a5:23:c1:3a:6a:
                    b4:d6:d5:bb:90:55:65:07:9d:12:61:52:d2:37:52:
                    fe:91:ad:d1:19:f9:a2:1b:a6:4b:53:b9:7d:c1:8f:
                    71:78:d9:77:f7:3a:42:2f:1c:91:32:e2:f2:3c:cf:
                    cc:77:04:7a:18:f7:85:87:23:bf:9c:18:55:78:d8:
                    7f:d9:54:4f:6b:23:d6:3b:62:82:21:0b:d2:48:cd:
                    bc:0f:e1:f5:1d:28:75:a0:c6:49:03:ce:a8:0b:40:
                    24:3c:a0:a4:81:78:0f:4e:14:e2:67:0c:9c:06:df:
                    ef:f5:70:09:63:09:b6:5f:b4:df:ce:c1:5d:e7:b4:
                    13:3a:71:d5:45:7d:cf:58:e7:27:38:fb:bf:e4:34:
                    44:29:2a:4a:29:5a:cc:27:f6:a2:3e:d7:21:d1:f4:
                    25:bd:d8:08:92:31:9f:47:74:11:c7:c8:eb:9c:58:
                    15:da:f2:db:2a:56:a2:32:3e:fe:c0:95:6b:30:2b:
                    e2:44:17:ac:3c:1a:a9:8f:ee:59:a8:dc:fc:ab:62:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:AF:A6:8C:A4:D2:FD:03:79:61:41:71:6F:E0:83:9F:5E:2C:BF
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:c4:7e:53:f1:73:dc:49:49:20:5e:ac:68:d3:34:46:3a:
         30:b1:80:00:96:7e:ce:73:79:8e:1a:b1:71:98:b4:23:6d:86:
         f1:24:72:ce:b2:d0:5e:b3:b7:3c:88:87:8f:9b:12:83:48:2b:
         51:ba:4c:d8:44:3b:0a:ef:13:b1:c6:a6:83:c8:34:54:b8:d3:
         3e:3c:35:65:fa:40:d6:20:ed:69:05:af:8b:b4:a0:ea:33:8c:
         e3:e1:62:5f:75:58:20:22:a8:f1:a5:f6:a6:98:a5:a9:fe:2d:
         f4:6b:ff:b9:84:86:f2:c0:13:d5:aa:23:35:3a:45:1c:67:ae:
         c2:e7:03:16:b1:21:a3:6b:26:74:93:09:24:df:a0:03:e3:d9:
         78:8b:c4:2f:e1:06:aa:b2:a5:07:37:6e:cb:71:12:d6:58:d9:
         07:bc:ad:0b:1c:58:85:b9:97:a8:1c:09:d6:c1:9d:39:2c:fc:
         e3:64:9d:16:d7:37:d9:13:cf:2c:7b:28:fa:ff:c5:d1:80:a9:
         f9:9a:a0:33:ce:64:dd:ce:6b:37:3a:42:ad:85:31:32:ba:c3:
         04:68:67:f1:de:ab:b6:9a:7b:f4:03:ec:6d:b1:c7:1d:c0:66:
         77:4e:91:cf:b6:ee:35:14:78:63:f7:ae:b6:52:ee:9e:77:12:
         ce:4c:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:56:52 2026 by rpki-client