Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/3135372e36362e322e302f32332d3234203d3e20313532343430.roa
File:                     3135372e36362e322e302f32332d3234203d3e20313532343430.roa (raw, json)
Hash identifier:          zcAed+U0LIMKkO2m1wb6BGRlQ4YM9y2CMvt4q2VNLq8=
Subject key identifier:   6C:75:06:CF:AE:75:00:48:30:FF:B6:A8:64:D3:AF:0D:B5:F0:2C:DB
Certificate issuer:       /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
Certificate serial:       0E6C1D7DF082925D60705FB3EADA454C6102E8AF
Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/3135372e36362e322e302f32332d3234203d3e20313532343430.roa
Signing time:             Sun 05 Apr 2026 06:00:02 +0000
ROA not before:           Sun 05 Apr 2026 05:55:02 +0000
ROA not after:            Sun 04 Apr 2027 06:00:02 +0000
asID:                     152440
IP address blocks:        157.66.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 06:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:1d:7d:f0:82:92:5d:60:70:5f:b3:ea:da:45:4c:61:02:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426
        Validity
            Not Before: Apr  5 05:55:02 2026 GMT
            Not After : Apr  4 06:00:02 2027 GMT
        Subject: CN=6C7506CFAE75004830FFB6A864D3AF0DB5F02CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:12:8c:7b:7a:27:9f:8c:b4:12:65:04:52:
                    38:68:94:5f:35:93:a9:20:df:54:91:3a:46:b7:4e:
                    01:54:4c:80:f6:bc:0b:e7:65:92:13:cb:bf:30:6e:
                    a7:6d:38:ba:78:5b:30:33:91:69:9c:d2:e8:d0:15:
                    38:e6:55:cd:cb:fb:4f:2d:f0:46:ab:90:9b:96:6f:
                    45:1d:d8:18:ce:49:9f:b5:e8:b4:65:5b:d9:83:b5:
                    01:88:d6:10:62:0a:dd:dc:d7:ce:47:69:8b:66:16:
                    31:24:d8:d8:57:96:40:c3:28:cd:1b:67:2c:0d:2f:
                    85:8d:c8:8e:7c:7c:da:da:a0:da:04:35:09:30:91:
                    be:db:71:23:17:ab:91:e8:4b:20:4e:c8:06:e3:40:
                    5b:35:3c:e4:f0:a6:74:13:d5:5a:1f:e2:fd:4f:c9:
                    2a:82:ea:fb:b1:f8:e8:8e:2b:a9:e5:dc:ca:9d:6b:
                    36:32:d9:4f:25:24:8b:53:6d:0f:d7:fc:18:47:14:
                    65:e6:36:09:cf:6c:87:d9:0b:e2:5d:bb:78:c0:d7:
                    cb:c7:6e:e1:a0:30:d4:ca:35:8a:f3:34:80:f0:0e:
                    fd:24:83:d0:01:14:38:93:79:21:6f:c7:3f:7d:12:
                    57:0c:4d:db:14:d8:4a:51:84:4a:4f:1f:5a:44:96:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:75:06:CF:AE:75:00:48:30:FF:B6:A8:64:D3:AF:0D:B5:F0:2C:DB
            X509v3 Authority Key Identifier:
                keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/3135372e36362e322e302f32332d3234203d3e20313532343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:00:a0:dd:c1:3b:79:2a:67:fa:74:a8:36:42:d9:2e:47:1b:
         df:33:cf:98:13:04:40:e1:b5:b1:ab:e3:3f:88:bb:51:3b:d8:
         b6:49:83:00:8e:2b:f0:53:cf:0a:f9:f3:9f:fe:8a:44:ee:cb:
         81:1e:b1:2c:d5:da:dc:29:b0:b2:c1:0f:c9:51:96:c5:9d:72:
         43:d9:c7:f7:52:0c:74:10:56:69:85:54:99:cb:07:7e:b4:15:
         d1:2d:73:38:27:10:c9:fe:74:30:d4:6b:d3:0f:dc:23:89:cc:
         89:47:2b:cb:1d:ef:cb:0d:72:fe:58:7c:da:cc:e3:fd:8d:ef:
         c5:40:e6:e7:45:10:88:68:99:e4:b4:77:d0:ae:cc:15:85:05:
         fd:5b:ff:d2:d2:7f:eb:b7:4f:2b:2c:9c:73:26:34:d5:d8:ed:
         01:2d:ca:b6:c4:89:bc:4c:54:e9:01:80:f2:2f:ab:7f:87:31:
         d0:ec:e5:14:60:28:17:b3:c4:0c:5f:50:a0:d2:23:5a:b3:1a:
         e8:80:7e:3f:53:38:e9:7a:19:09:d2:1d:50:99:ac:06:28:c6:
         c7:1c:48:f3:50:98:4d:17:92:6d:f3:f3:ee:51:6c:01:c1:85:
         24:b7:4b:33:09:83:8e:fe:07:0f:ef:92:88:c8:e0:1e:28:95:
         45:c4:d0:54
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDmwdffCCkl1gcF+z6tpFTGEC6K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw
NzE5RDQyNjAeFw0yNjA0MDUwNTU1MDJaFw0yNzA0MDQwNjAwMDJaMDMxMTAvBgNV
BAMTKDZDNzUwNkNGQUU3NTAwNDgzMEZGQjZBODY0RDNBRjBEQjVGMDJDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNBKMe3onn4y0EmUEUjholF81
k6kg31SROka3TgFUTID2vAvnZZITy78wbqdtOLp4WzAzkWmc0ujQFTjmVc3L+08t
8EarkJuWb0Ud2BjOSZ+16LRlW9mDtQGI1hBiCt3c185HaYtmFjEk2NhXlkDDKM0b
ZywNL4WNyI58fNraoNoENQkwkb7bcSMXq5HoSyBOyAbjQFs1POTwpnQT1Vof4v1P
ySqC6vux+OiOK6nl3MqdazYy2U8lJItTbQ/X/BhHFGXmNgnPbIfZC+Jdu3jA18vH
buGgMNTKNYrzNIDwDv0kg9ABFDiTeSFvxz99ElcMTdsU2EpRhEpPH1pElvl7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUbHUGz651AEgw/7aoZNOvDbXwLNswHwYDVR0j
BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5
QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5
RDQyNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjgwOGViLWM5OGUtNDAzNi1i
ZTlhLTE5M2JiY2M2NDg5Mi8wLzMxMzUzNzJlMzYzNjJlMzIyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMTM1MzIzNDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQgIwDQYJKoZIhvcN
AQELBQADggEBADcAoN3BO3kqZ/p0qDZC2S5HG98zz5gTBEDhtbGr4z+Iu1E72LZJ
gwCOK/BTzwr585/+ikTuy4EesSzV2twpsLLBD8lRlsWdckPZx/dSDHQQVmmFVJnL
B360FdEtczgnEMn+dDDUa9MP3COJzIlHK8sd78sNcv5YfNrM4/2N78VA5udFEIho
meS0d9CuzBWFBf1b/9LSf+u3TyssnHMmNNXY7QEtyrbEibxMVOkBgPIvq3+HMdDs
5RRgKBezxAxfUKDSI1qzGuiAfj9TOOl6GQnSHVCZrAYoxsccSPNQmE0Xkm3z8+5R
bAHBhSS3SzMJg47+Bw/vkojI4B4olUXE0FQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:09:11 2026 by rpki-client