Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
File:                     3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          bGKJksvK3V6SxYFL0Fp3YzNPUQZRC0JaGNr4t7QQF9I=
Subject key identifier:   34:1A:87:40:2D:CC:67:67:D7:D7:75:4B:FD:0E:52:71:DF:FD:FB:49
Certificate issuer:       /CN=77565E3DD82843CC865236C04B3AF9BDB2084174
Certificate serial:       360912012D17A9D6F99418EA9B7A206416B7FF08
Authority key identifier: 77:56:5E:3D:D8:28:43:CC:86:52:36:C0:4B:3A:F9:BD:B2:08:41:74
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77565E3DD82843CC865236C04B3AF9BDB2084174.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
Signing time:             Sun 03 May 2026 03:13:56 +0000
ROA not before:           Sun 03 May 2026 03:08:56 +0000
ROA not after:            Sun 02 May 2027 03:13:56 +0000
asID:                     16509
IP address blocks:        157.66.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/77565E3DD82843CC865236C04B3AF9BDB2084174.crl
                          rsync://rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/77565E3DD82843CC865236C04B3AF9BDB2084174.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77565E3DD82843CC865236C04B3AF9BDB2084174.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 05:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:09:12:01:2d:17:a9:d6:f9:94:18:ea:9b:7a:20:64:16:b7:ff:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77565E3DD82843CC865236C04B3AF9BDB2084174
        Validity
            Not Before: May  3 03:08:56 2026 GMT
            Not After : May  2 03:13:56 2027 GMT
        Subject: CN=341A87402DCC6767D7D7754BFD0E5271DFFDFB49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:9a:72:19:47:f3:a4:2b:86:ad:5d:e4:f9:
                    73:75:01:40:56:69:56:c5:df:a3:c0:34:44:df:b6:
                    90:14:da:1c:8a:a9:8c:b7:c1:e9:9b:4b:fb:68:9e:
                    34:35:10:c5:97:07:cd:4f:6f:da:cf:7a:1a:8f:b8:
                    cc:f5:b6:e6:a4:21:d6:48:a3:15:70:3c:25:a3:61:
                    82:1b:fd:4e:d7:f2:f4:16:e2:e5:25:65:d0:6a:f0:
                    8b:47:3d:c2:9e:7e:4b:d7:62:0c:1c:4e:ae:03:c9:
                    4c:c1:75:4b:8e:87:a2:ab:01:bb:ae:08:68:65:88:
                    fe:7e:ae:0c:58:cf:90:f8:62:2b:9f:c3:6e:37:6d:
                    0d:16:bf:f2:5a:7e:03:3c:2f:34:bd:ef:29:a1:32:
                    aa:aa:b6:b3:5e:b7:b2:40:8a:34:49:c1:44:10:95:
                    6d:da:5f:88:b0:86:9c:2a:0e:39:a1:16:28:f3:4d:
                    dd:a4:28:00:5c:17:3a:4d:50:77:15:55:28:31:fd:
                    96:a0:66:c6:74:af:bf:d6:4a:b9:40:7d:b8:a8:6b:
                    ed:fc:87:2b:0e:89:aa:4d:d5:5c:b6:90:d6:50:68:
                    07:7b:06:93:17:b4:0c:96:29:21:2c:14:00:2b:58:
                    7a:a2:20:b3:25:7a:67:51:77:31:c3:af:83:32:3b:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1A:87:40:2D:CC:67:67:D7:D7:75:4B:FD:0E:52:71:DF:FD:FB:49
            X509v3 Authority Key Identifier:
                keyid:77:56:5E:3D:D8:28:43:CC:86:52:36:C0:4B:3A:F9:BD:B2:08:41:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/77565E3DD82843CC865236C04B3AF9BDB2084174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77565E3DD82843CC865236C04B3AF9BDB2084174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:a8:85:63:f5:77:42:43:3f:7e:d0:30:dc:cd:a6:60:1c:2f:
         e8:1e:c8:18:af:26:83:76:52:50:1b:9c:06:2f:15:9b:ea:6a:
         dc:30:20:2e:48:03:2b:d1:97:9a:3f:92:cc:c9:1b:97:df:68:
         e9:7c:32:fd:9f:f4:56:f4:33:5b:ec:5b:d6:df:69:54:49:b6:
         85:3a:65:0d:75:3a:db:7f:9d:d0:62:b2:e1:a6:7c:13:db:b4:
         59:61:d5:ab:ae:b4:d0:a6:f6:b1:d9:9c:2c:81:15:bd:20:db:
         0c:09:3d:55:ba:a0:43:6e:f5:30:4d:aa:5c:75:b0:66:4b:c0:
         96:76:8e:a5:3c:54:a9:f3:61:ee:b3:1b:ab:e0:f4:1c:3d:a9:
         77:49:92:31:5d:16:6b:d9:1b:f3:f9:75:83:61:9b:9b:c0:a3:
         26:37:55:bc:0e:3f:9d:a5:26:e9:c4:69:e4:a4:36:0b:7e:87:
         a0:8a:89:ca:f0:98:d2:ed:18:3d:f1:5e:0a:11:1d:ba:a4:ab:
         37:cc:7b:e4:7c:16:a1:a5:89:d4:bf:9f:0f:ea:0e:ff:b6:f5:
         01:ca:aa:52:e4:68:3b:7d:71:08:2b:43:f5:cd:18:25:65:ed:
         ca:d7:e7:e8:0f:e3:74:3e:29:3a:ff:ce:35:9c:03:80:d6:1c:
         3e:44:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:44:44 2026 by rpki-client