Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          q9toowJOz16uhrBCtofU3traOAjII8kFB2udCQItBiM=
Subject key identifier:   41:21:67:9B:81:02:DC:A6:1C:C2:AB:97:57:3C:0D:2A:D3:5B:A8:B9
Certificate issuer:       /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial:       10E454E829A00F72A1168B028520249DE5F8FD69
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
Signing time:             Wed 01 Apr 2026 08:02:44 +0000
ROA not before:           Wed 01 Apr 2026 07:57:44 +0000
ROA not after:            Wed 31 Mar 2027 08:02:44 +0000
asID:                     152351
IP address blocks:        157.10.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
                          rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 13:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e4:54:e8:29:a0:0f:72:a1:16:8b:02:85:20:24:9d:e5:f8:fd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
        Validity
            Not Before: Apr  1 07:57:44 2026 GMT
            Not After : Mar 31 08:02:44 2027 GMT
        Subject: CN=4121679B8102DCA61CC2AB97573C0D2AD35BA8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:d1:6c:2d:96:39:1f:22:15:64:51:72:90:
                    5d:1b:14:2f:93:b4:d0:da:17:07:ef:e5:13:64:9c:
                    10:5d:79:9c:b7:72:5f:0e:34:0d:74:b8:85:77:f6:
                    9e:51:2c:f0:aa:c5:52:5f:2f:1b:56:6f:62:3b:60:
                    39:70:1b:2c:e5:ad:64:3d:43:91:bc:3c:38:cd:94:
                    3c:84:78:72:e1:91:70:99:6f:87:9a:2c:ad:fa:83:
                    91:23:02:04:e5:69:56:15:a9:65:9d:19:f5:d3:c0:
                    01:9a:18:77:f1:56:b5:22:da:18:b9:bc:93:b4:0d:
                    ad:ff:a0:a3:ce:0b:03:ca:85:a6:fc:fa:8c:78:cc:
                    63:43:4c:52:84:de:f3:b4:4b:63:ae:64:68:bf:d9:
                    4c:6f:2c:de:17:2f:d4:b1:c0:56:93:7f:b7:84:7a:
                    a1:bf:cb:76:3e:46:7c:93:0f:f1:07:f3:d6:9e:4d:
                    4d:ed:fb:2e:d1:b2:8b:9f:50:2c:84:1a:08:fd:be:
                    ba:25:c9:43:e2:da:4a:ce:c4:89:45:f2:3a:0f:f7:
                    0a:8f:59:f6:cc:6c:42:a9:d2:ea:20:5c:85:4f:c3:
                    15:65:51:80:53:30:9e:58:8b:2d:41:00:74:f7:37:
                    dd:c9:37:f6:b1:9b:04:f1:ec:d0:ef:12:d2:f0:04:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:67:9B:81:02:DC:A6:1C:C2:AB:97:57:3C:0D:2A:D3:5B:A8:B9
            X509v3 Authority Key Identifier:
                keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:96:a7:08:fb:52:5a:57:c0:4d:22:f8:d3:27:28:f9:a3:
         7e:34:a6:1e:e1:25:8d:32:b1:8e:a6:a7:83:86:7c:8c:dd:12:
         5a:6f:4b:57:c9:51:7c:86:19:03:94:c6:67:1f:98:a7:45:66:
         58:a6:dd:0d:f9:53:59:c6:40:57:2a:a0:13:f0:e4:34:7d:3d:
         d8:19:89:d4:f2:ac:d6:51:81:47:1f:6d:6c:dc:b8:ab:5d:e4:
         39:2f:ab:f0:5e:a3:07:59:f6:3d:bf:75:87:3c:f9:d1:2a:02:
         03:77:4c:56:cb:04:2c:91:74:65:63:c4:4f:aa:df:68:d4:e6:
         c1:b8:e7:04:2f:c3:12:4f:81:5e:4e:41:f7:b7:c2:dc:95:d7:
         fc:ac:c6:e0:ad:b5:0c:5e:3b:ad:62:5b:bd:18:34:72:6f:e7:
         60:69:86:bf:36:df:5e:4d:fe:b4:6e:bd:46:8e:b1:72:a1:dd:
         9e:be:ac:a4:d7:49:67:90:d9:37:8b:20:62:39:9f:8b:e4:31:
         e0:c6:54:06:4c:06:75:4d:cc:43:a4:ca:53:ec:da:07:26:e4:
         84:4f:ac:69:df:e6:45:e0:c6:18:44:51:28:40:5a:93:de:33:
         fa:c0:67:1a:f3:60:cc:8b:84:a1:1e:6a:b4:31:89:e9:f6:05:
         c4:82:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:06 2026 by rpki-client