Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa
File:                     3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (raw, json)
Hash identifier:          FnFVRscbNixdyogFa4jXZEgDwaSIltQcnlbwAR1rTuA=
Subject key identifier:   8D:9A:7B:91:16:CE:F9:B6:84:26:FC:38:93:C7:DF:D5:DE:35:E6:1F
Certificate issuer:       /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial:       435BA08EE5AC99176CB1573BDA0BD5FFDB84D093
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa
Signing time:             Tue 07 Apr 2026 09:00:02 +0000
ROA not before:           Tue 07 Apr 2026 08:55:02 +0000
ROA not after:            Tue 06 Apr 2027 09:00:02 +0000
asID:                     152438
IP address blocks:        157.66.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
                          rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 20:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:a0:8e:e5:ac:99:17:6c:b1:57:3b:da:0b:d5:ff:db:84:d0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
        Validity
            Not Before: Apr  7 08:55:02 2026 GMT
            Not After : Apr  6 09:00:02 2027 GMT
        Subject: CN=8D9A7B9116CEF9B68426FC3893C7DFD5DE35E61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:89:e8:6e:fe:7e:76:38:6e:8a:33:fc:f3:
                    c9:ef:a5:7e:d4:3b:37:2d:85:7d:34:0c:16:19:ef:
                    1b:3f:2e:b5:53:d2:e8:a5:d1:b5:77:74:5b:23:34:
                    77:50:b2:be:5c:13:b6:13:c9:28:d4:8d:ae:ab:bc:
                    91:65:9f:c1:2d:3d:c6:fb:c1:4b:d9:81:67:41:64:
                    a2:54:cd:47:fd:1b:9e:dc:c7:62:82:dc:84:1f:c5:
                    9c:4b:72:b8:59:5e:7b:cc:17:7b:25:b5:73:af:ee:
                    ef:d5:95:4c:28:23:fd:ec:04:4a:a8:de:f1:1a:e6:
                    20:ee:c3:00:3f:b1:1f:92:65:7b:85:39:e2:96:8b:
                    d4:2c:61:be:75:cd:cd:e3:0b:2a:9a:ed:9c:4b:b3:
                    20:38:9c:d4:45:90:83:52:50:cd:ee:0d:cd:22:70:
                    72:36:51:a6:0b:d5:b7:30:d9:d7:17:ec:28:de:d3:
                    be:c4:0b:8c:d7:36:93:08:a3:8d:a6:a7:6b:12:41:
                    35:0c:00:03:15:15:79:4f:20:d4:fa:e0:bb:49:28:
                    42:da:f8:62:b0:37:c7:48:6c:0c:e1:3a:e8:91:08:
                    c6:25:63:e9:e8:02:c0:d3:b0:54:75:2d:6b:62:d9:
                    b9:40:34:90:66:ec:0e:29:73:76:82:24:70:7e:89:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:7B:91:16:CE:F9:B6:84:26:FC:38:93:C7:DF:D5:DE:35:E6:1F
            X509v3 Authority Key Identifier:
                keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/3135372e36362e35302e302f32332d3234203d3e20313532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:70:90:08:d5:f1:89:29:74:af:09:d2:9c:4e:b5:bf:4d:90:
         58:dd:9f:90:42:25:50:3d:e6:e4:ca:b3:ad:eb:8f:24:66:cd:
         bd:67:7b:d8:7a:42:e4:49:a4:45:a4:6a:e3:6d:7b:26:c0:39:
         67:57:59:de:18:30:7d:4f:9c:dd:25:34:f5:36:3a:6a:d5:cc:
         1d:c5:16:ae:e9:c8:58:34:64:ae:b3:5a:81:10:4f:70:cb:3d:
         8e:c9:b2:06:5a:46:82:12:ae:53:61:17:a9:2a:04:cc:2a:4b:
         fd:e2:fd:db:ff:fc:79:cd:f5:d1:fc:ae:d0:3f:8b:bf:76:cf:
         03:bf:67:1f:d9:08:03:76:22:5b:9b:0e:e8:ea:16:a5:d7:82:
         9a:c1:64:2f:5d:44:55:df:2d:6c:d2:d3:4f:23:3c:51:30:8b:
         6b:5a:02:4e:06:0d:2b:8a:45:a7:ea:53:a7:20:0f:19:64:b7:
         6d:b9:54:f6:e7:ac:37:c0:61:b7:81:3b:35:49:09:02:c6:0f:
         24:24:49:d3:d4:dd:ea:c8:9b:fd:79:5a:8d:f6:c0:61:54:49:
         fe:c2:17:ec:03:c4:96:20:59:96:b5:a0:51:a2:2d:2b:0d:e2:
         8d:28:df:99:19:79:0c:37:bc:8d:78:4c:94:d7:9d:32:bd:84:
         5d:ae:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:00 2026 by rpki-client