Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          Uw+aclh2qxCETkaiurOCAIwByyRhtpJmoX60PZbRrk0=
Subject key identifier:   7B:A0:50:98:C1:84:56:D4:9A:8B:E8:85:AD:D8:9C:D8:37:E7:3A:70
Certificate issuer:       /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial:       7146D29F11AEA6472298C3E638EB2650F1586FD6
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
Signing time:             Wed 01 Apr 2026 08:02:43 +0000
ROA not before:           Wed 01 Apr 2026 07:57:43 +0000
ROA not after:            Wed 31 Mar 2027 08:02:43 +0000
asID:                     152351
IP address blocks:        157.10.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
                          rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 13:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:46:d2:9f:11:ae:a6:47:22:98:c3:e6:38:eb:26:50:f1:58:6f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
        Validity
            Not Before: Apr  1 07:57:43 2026 GMT
            Not After : Mar 31 08:02:43 2027 GMT
        Subject: CN=7BA05098C18456D49A8BE885ADD89CD837E73A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:48:67:a5:5f:21:0b:e9:e8:82:ff:6e:e2:
                    f8:ea:f0:ad:a4:60:5b:a1:f1:ae:51:da:88:73:56:
                    cf:69:bc:fd:95:33:39:42:ff:7b:d5:1d:ca:3a:a7:
                    a1:89:ee:cd:64:d9:c7:20:61:61:be:fc:02:1d:a1:
                    95:a7:07:ee:37:10:1c:22:a2:a4:e2:d0:9a:2b:4e:
                    36:3d:7f:54:37:4d:5c:9f:7d:c6:c9:82:c9:91:c0:
                    9d:94:5e:32:14:9a:95:35:8f:82:84:fe:aa:92:0a:
                    6c:96:b5:98:ce:3b:6c:a3:2b:5a:93:29:a7:e9:60:
                    00:a0:20:d4:d6:66:8a:88:c6:46:1d:a7:6c:1c:2d:
                    f1:16:af:d5:67:37:98:4e:17:9d:8e:82:6d:cb:7e:
                    d7:80:7a:03:e9:72:b5:96:95:5d:d1:99:a8:ba:71:
                    78:6d:21:51:f0:55:16:69:68:ab:f7:f6:4b:3c:7d:
                    01:fd:2d:67:75:48:76:2a:56:49:a0:d4:7e:f3:ff:
                    a2:eb:e4:29:89:ee:53:bf:99:8e:97:71:e6:76:21:
                    8d:95:99:b8:cf:c2:ad:c8:c7:9d:6e:3d:5e:e4:ca:
                    1e:5d:9d:19:86:11:aa:8e:47:50:c3:36:55:8f:0d:
                    d0:6c:a7:b3:ea:74:8c:fe:9f:a7:03:90:fa:01:69:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:50:98:C1:84:56:D4:9A:8B:E8:85:AD:D8:9C:D8:37:E7:3A:70
            X509v3 Authority Key Identifier:
                keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:69:77:d0:41:3b:28:a7:dd:50:bd:d1:89:40:99:34:ea:
         01:d0:bc:d2:f0:e9:00:d6:de:23:37:9b:86:8d:2b:6a:db:89:
         97:16:53:a4:7b:54:a0:53:b8:0c:be:4f:00:57:64:55:66:f5:
         40:74:d0:18:ee:38:6f:7c:89:13:76:69:de:df:b8:77:d6:cd:
         74:a0:23:b1:ba:9c:03:41:72:c7:3d:11:d4:14:86:86:e2:19:
         77:c6:e7:ae:62:1e:1d:0f:a9:55:27:8f:09:6c:9d:91:fe:7f:
         4a:0b:db:f0:d9:19:99:e0:57:74:3b:a3:12:7f:b4:2b:10:d6:
         44:0f:78:cb:47:65:1d:60:9e:b3:4a:b7:e8:aa:e2:8b:4a:2c:
         bd:5e:1c:21:7a:c4:1a:d5:de:df:8a:c4:ff:61:21:4b:5d:30:
         96:77:6c:48:4a:6b:6a:7a:25:ba:20:8d:48:77:88:d5:78:f2:
         94:b5:66:a9:dd:f1:4b:d9:91:f1:49:0f:09:58:67:6d:4b:ac:
         93:67:f0:6f:ec:dd:69:16:61:ea:a6:e6:88:60:7f:12:0f:42:
         d0:5d:3c:29:de:a0:b9:37:0b:3e:7e:4c:2c:32:b0:20:9a:4f:
         a9:65:39:08:c0:45:dc:3b:21:62:e3:a8:7c:d5:c7:97:31:d3:
         8b:06:1a:93
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcUbSnxGupkcimMPmOOsmUPFYb9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx
MTNGNUREMTAeFw0yNjA0MDEwNzU3NDNaFw0yNzAzMzEwODAyNDNaMDMxMTAvBgNV
BAMTKDdCQTA1MDk4QzE4NDU2RDQ5QThCRTg4NUFERDg5Q0Q4MzdFNzNBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3EhnpV8hC+nogv9u4vjq8K2k
YFuh8a5R2ohzVs9pvP2VMzlC/3vVHco6p6GJ7s1k2ccgYWG+/AIdoZWnB+43EBwi
oqTi0JorTjY9f1Q3TVyffcbJgsmRwJ2UXjIUmpU1j4KE/qqSCmyWtZjOO2yjK1qT
KafpYACgINTWZoqIxkYdp2wcLfEWr9VnN5hOF52Ogm3LfteAegPpcrWWlV3Rmai6
cXhtIVHwVRZpaKv39ks8fQH9LWd1SHYqVkmg1H7z/6Lr5CmJ7lO/mY6XceZ2IY2V
mbjPwq3Ix51uPV7kyh5dnRmGEaqOR1DDNlWPDdBsp7PqdIz+n6cDkPoBaeWZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUe6BQmMGEVtSai+iFrdic2DfnOnAwHwYDVR0j
BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0
RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG
NUREMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwYzI2NmU2LTBiODQtNDMxZi05
ZTc0LTA2ZDNkOTNlOTcwNC8wLzMxMzUzNzJlMzEzMDJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0KQjANBgkqhkiG
9w0BAQsFAAOCAQEAVHtpd9BBOyin3VC90YlAmTTqAdC80vDpANbeIzebho0ratuJ
lxZTpHtUoFO4DL5PAFdkVWb1QHTQGO44b3yJE3Zp3t+4d9bNdKAjsbqcA0Fyxz0R
1BSGhuIZd8bnrmIeHQ+pVSePCWydkf5/Sgvb8NkZmeBXdDujEn+0KxDWRA94y0dl
HWCes0q36Krii0osvV4cIXrEGtXe34rE/2EhS10wlndsSEpranoluiCNSHeI1Xjy
lLVmqd3xS9mR8UkPCVhnbUusk2fwb+zdaRZh6qbmiGB/Eg9C0F08Kd6guTcLPn5M
LDKwIJpPqWU5CMBF3DshYuOofNXHlzHTiwYakw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:06 2026 by rpki-client