Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa
File:                     3139382e31352e32352e302f32342d3234203d3e20313432323634.roa (raw, json)
Hash identifier:          zqg63PzFpvnHisK0vME07RPDLgK5KqQVtr6YJH2qfqs=
Subject key identifier:   7C:6C:B7:CC:1E:6F:B6:F9:1A:23:E8:8E:33:45:26:84:D1:13:07:50
Certificate issuer:       /CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
Certificate serial:       10EF80D6F12FC47A87EDD924C15FB5EA39C9CC15
Authority key identifier: 36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa
Signing time:             Tue 29 Sep 2026 20:44:36 +0000
ROA not before:           Tue 29 Sep 2026 20:39:36 +0000
ROA not after:            Tue 28 Sep 2027 20:44:36 +0000
asID:                     142264
IP address blocks:        198.15.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl
                          rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 17:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ef:80:d6:f1:2f:c4:7a:87:ed:d9:24:c1:5f:b5:ea:39:c9:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
        Validity
            Not Before: Sep 29 20:39:36 2026 GMT
            Not After : Sep 28 20:44:36 2027 GMT
        Subject: CN=7C6CB7CC1E6FB6F91A23E88E33452684D1130750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:e7:79:57:b0:d7:dd:6d:a7:28:8b:eb:ed:
                    14:c4:8d:06:4e:46:2a:57:82:06:06:a7:36:fb:62:
                    17:40:09:4f:d7:38:71:9e:c2:30:a5:df:55:55:60:
                    b8:aa:ff:31:3a:8a:b9:71:75:a9:ec:32:6b:c8:bd:
                    59:54:c3:b4:ea:66:df:9a:b8:11:a0:98:2e:a8:08:
                    b5:c8:9a:20:94:68:be:52:fe:c0:5e:db:e1:7e:e9:
                    79:4a:55:db:a4:a3:4d:ff:f2:45:f6:fb:69:02:d9:
                    7e:32:7f:62:65:cf:72:6e:3c:8f:c2:34:41:81:40:
                    40:00:de:ff:e6:8a:88:3d:c7:8f:fb:bb:b0:95:e9:
                    13:b8:97:8c:9d:ac:fb:f5:e2:dd:c4:1e:51:8d:8d:
                    73:c5:6c:18:d6:d5:77:67:d9:90:46:a4:1c:51:0e:
                    85:ef:6d:ea:1a:af:4d:cd:30:ed:2f:9f:43:07:97:
                    d0:dd:47:61:18:8f:d4:93:c0:6c:2d:84:ff:e2:f3:
                    66:3c:ef:d7:f5:b8:d5:71:e8:72:22:62:84:60:25:
                    78:10:ab:43:e7:8e:4e:59:d5:7c:85:b5:fa:74:a8:
                    52:8a:eb:2e:1d:e0:55:b6:43:19:db:ed:26:d5:6b:
                    81:a9:7a:64:e6:e3:04:30:bb:cb:b1:00:a4:1e:70:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:B7:CC:1E:6F:B6:F9:1A:23:E8:8E:33:45:26:84:D1:13:07:50
            X509v3 Authority Key Identifier:
                keyid:36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:df:98:49:91:24:78:08:3f:02:ff:9c:e3:94:57:fe:1a:fe:
         2b:74:c2:c9:ce:3e:ea:fa:c4:2d:4a:ca:d6:49:7a:af:9f:4d:
         1d:01:7f:c8:34:fd:bb:c1:5e:1b:aa:5f:86:ff:f0:08:da:2e:
         9e:26:b2:6d:5d:f1:5b:94:ee:6a:75:4f:c7:09:e5:13:6e:25:
         13:13:b4:48:61:59:f7:fa:8f:57:96:11:cb:65:60:28:cd:d6:
         a4:12:8b:86:08:35:44:0b:c5:b0:c8:1a:4d:57:9b:45:8e:3d:
         20:c9:29:12:71:d8:90:c8:f7:02:d5:53:89:bd:d2:36:32:e3:
         64:c7:59:7c:5e:1b:38:ba:c4:fc:24:fe:a3:6f:d1:c9:07:a1:
         79:0c:d5:47:8f:08:76:bf:a9:b2:34:81:1e:7d:c9:c4:44:4a:
         f1:15:65:0b:9c:e5:53:b7:f9:31:c8:f1:fb:d2:53:80:50:21:
         58:2b:d4:b8:3c:9f:e7:31:5b:10:0b:83:f5:bb:eb:ce:c9:b9:
         f1:96:8f:a8:d8:19:13:47:4e:02:7c:70:5c:b9:73:9b:d0:e7:
         98:98:57:0e:9f:c2:a2:7a:04:39:a1:e5:f0:6b:c4:80:b2:85:
         91:c5:40:f3:97:eb:32:d0:e4:9a:ec:bd:d7:aa:b9:ce:66:bb:
         0d:87:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:47 2026 by rpki-client