Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa
File:                     3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (raw, json)
Hash identifier:          Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=
Subject key identifier:   7D:C5:BE:6A:32:91:A9:CB:D8:6B:16:42:16:F4:16:ED:9D:73:8B:C5
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       7AFF581195F0320E695748E8CCCC61BA08C4D431
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa
Signing time:             Sat 02 May 2026 09:23:33 +0000
ROA not before:           Sat 02 May 2026 09:18:33 +0000
ROA not after:            Sat 01 May 2027 09:23:33 +0000
asID:                     154479
IP address blocks:        151.158.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 14:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:58:11:95:f0:32:0e:69:57:48:e8:cc:cc:61:ba:08:c4:d4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: May  2 09:18:33 2026 GMT
            Not After : May  1 09:23:33 2027 GMT
        Subject: CN=7DC5BE6A3291A9CBD86B164216F416ED9D738BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:d5:24:a1:88:c1:c2:56:b7:4f:58:42:26:
                    40:47:69:0a:6f:31:26:97:b6:9c:b8:59:59:d6:a6:
                    d1:c9:23:a3:d6:09:df:3e:73:ab:b2:66:f3:51:67:
                    fb:49:99:18:74:50:87:1a:a1:f1:86:6e:7f:61:9a:
                    98:8a:f8:ec:72:b8:09:c8:13:19:26:8b:0a:4b:eb:
                    41:48:35:b0:59:3a:04:98:57:35:97:7b:14:b9:42:
                    bd:95:ba:74:8d:56:dc:ea:a9:d5:5f:c2:73:87:e5:
                    ad:a5:4c:56:4f:23:e6:e4:50:ce:b1:25:8f:bd:98:
                    69:e4:88:2d:23:3a:ab:48:83:80:65:31:0b:48:cd:
                    39:60:22:5a:1d:5e:24:b5:f4:90:9d:44:00:b9:20:
                    8f:82:56:30:8a:2d:4f:70:e9:57:bc:96:ea:9d:12:
                    4a:8a:02:ce:e2:96:cf:d7:b7:05:ec:fe:63:55:a1:
                    fb:e7:ad:6d:95:83:ce:78:de:e0:df:4a:2a:05:38:
                    f2:a2:f0:90:82:23:69:24:13:be:02:6d:9d:a2:85:
                    50:20:34:e4:9e:01:28:12:38:e1:60:40:9e:b7:97:
                    df:2b:de:01:19:2d:e7:a2:b5:32:ad:a9:43:db:71:
                    a9:ca:2a:6c:72:8f:ba:b7:0e:31:1e:93:cc:f3:8b:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:BE:6A:32:91:A9:CB:D8:6B:16:42:16:F4:16:ED:9D:73:8B:C5
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:18:b2:c5:84:e7:1d:aa:1a:6f:ae:c7:50:c2:ba:8b:9a:ca:
         7e:61:55:19:22:99:e1:be:d0:37:f7:ae:d8:13:93:25:ca:d4:
         12:5b:c7:29:35:b7:1a:1c:ce:a3:36:7c:fa:48:86:f2:09:8b:
         ff:a8:c6:71:b2:d7:8c:91:f1:31:44:bf:24:f4:b5:19:2e:fb:
         fd:de:ef:8d:c0:7a:9a:23:38:cc:df:bc:85:72:00:73:a3:af:
         7e:1d:38:ee:e3:8d:77:68:78:cc:80:6e:50:64:ef:7e:82:d9:
         a5:85:0d:a4:5a:3d:5c:7e:13:45:17:ef:3a:76:b0:d2:08:e9:
         a3:b9:78:40:58:d7:d7:74:5a:e0:85:39:c2:21:e2:d6:db:7c:
         76:0b:5e:3f:1d:1b:b2:c8:51:a2:ff:a2:91:75:62:cf:a5:c6:
         0a:0e:66:21:88:04:60:4a:80:93:d1:19:6f:08:67:61:ff:07:
         69:27:55:4c:da:7e:9e:6f:50:fe:f3:16:a1:59:9c:a4:67:9a:
         79:69:0e:ff:15:d8:e5:8f:9a:cb:c5:ea:ff:54:ef:ed:c3:a3:
         63:1d:27:2d:52:9b:17:95:8d:23:83:95:38:31:f5:9e:2d:db:
         bf:f3:b0:b2:0b:08:ad:0e:60:7a:cf:b1:97:6a:f8:32:7f:be:
         bb:c8:a3:f7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUev9YEZXwMg5pV0jozMxhugjE1DEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4
QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMjA5MTgzM1oX
DTI3MDUwMTA5MjMzM1owMzExMC8GA1UEAxMoN0RDNUJFNkEzMjkxQTlDQkQ4NkIx
NjQyMTZGNDE2RUQ5RDczOEJDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwL1SShiMHCVrdPWEImQEdpCm8xJpe2nLhZWdam0ckjo9YJ3z5zq7Jm81Fn
+0mZGHRQhxqh8YZuf2GamIr47HK4CcgTGSaLCkvrQUg1sFk6BJhXNZd7FLlCvZW6
dI1W3Oqp1V/Cc4flraVMVk8j5uRQzrElj72YaeSILSM6q0iDgGUxC0jNOWAiWh1e
JLX0kJ1EALkgj4JWMIotT3DpV7yW6p0SSooCzuKWz9e3Bez+Y1Wh++etbZWDznje
4N9KKgU48qLwkIIjaSQTvgJtnaKFUCA05J4BKBI44WBAnreX3yveARkt56K1Mq2p
Q9txqcoqbHKPurcOMR6TzPOLZekCAwEAAaOCAf0wggH5MB0GA1UdDgQWBBR9xb5q
MpGpy9hrFkIW9BbtnXOLxTAfBgNVHSMEGDAWgBT5J984SKuryoj/PZWh5bFnVMY6
UzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzMvRjkyN0RGMzg0OEFCQUJDQTg4
RkYzRDk1QTFFNUIxNjc1NEM2M0E1My5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1
RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvLVNmZk9FaXJxOHFJX3oyVm9lV3ha
MVRHT2xNLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy8zMTM1MzEyZTMxMzUz
ODJlMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzNDM0MzczOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAZeeXDANBgkqhkiG9w0BAQsFAAOCAQEABhiyxYTnHaoab67HUMK6i5rK
fmFVGSKZ4b7QN/eu2BOTJcrUElvHKTW3GhzOozZ8+kiG8gmL/6jGcbLXjJHxMUS/
JPS1GS77/d7vjcB6miM4zN+8hXIAc6Ovfh047uONd2h4zIBuUGTvfoLZpYUNpFo9
XH4TRRfvOnaw0gjpo7l4QFjX13Ra4IU5wiHi1tt8dgtePx0bsshRov+ikXViz6XG
Cg5mIYgEYEqAk9EZbwhnYf8HaSdVTNp+nm9Q/vMWoVmcpGeaeWkO/xXY5Y+ay8Xq
/1Tv7cOjYx0nLVKbF5WNI4OVODH1ni3bv/OwsgsIrQ5ges+xl2r4Mn++u8ij9w==
-----END CERTIFICATE-----
Generated at Tue May 5 14:56:40 2026 by rpki-client