Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
File:                     3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (raw, json)
Hash identifier:          tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=
Subject key identifier:   7F:D7:33:BD:0B:97:4F:91:E6:F0:2F:04:D8:2A:27:2D:4D:63:04:41
Certificate issuer:       /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Certificate serial:       07D8CD84F768B9A9C6A9EACE6418686513336E8A
Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
Signing time:             Mon 09 Feb 2026 16:00:00 +0000
ROA not before:           Mon 09 Feb 2026 15:55:00 +0000
ROA not after:            Mon 08 Feb 2027 16:00:00 +0000
asID:                     152374
IP address blocks:        157.15.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
                          rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d8:cd:84:f7:68:b9:a9:c6:a9:ea:ce:64:18:68:65:13:33:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
        Validity
            Not Before: Feb  9 15:55:00 2026 GMT
            Not After : Feb  8 16:00:00 2027 GMT
        Subject: CN=7FD733BD0B974F91E6F02F04D82A272D4D630441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:ef:d5:31:a0:45:ee:1a:27:fd:67:d7:c8:
                    ed:c3:e8:ff:af:33:7b:f0:4c:e7:df:f3:72:01:d3:
                    ba:1e:3d:9b:7f:51:ea:d8:36:7c:df:d2:38:81:6f:
                    7e:12:95:de:1a:ea:0d:5e:b5:b3:3a:f8:2e:3f:85:
                    ad:21:44:4a:fc:b0:34:55:68:9d:18:9e:40:2b:df:
                    72:3a:f8:bc:36:4a:42:7b:af:52:6b:de:4c:7e:76:
                    1d:bd:81:9e:41:df:e9:d1:0f:b0:ee:de:3a:43:7e:
                    6c:ec:07:65:16:03:48:4b:a0:11:0b:b1:4a:01:1e:
                    df:50:ad:e2:b1:87:8f:fc:fb:77:77:3f:41:c9:ca:
                    9e:aa:4d:31:2e:65:cc:a7:49:e2:5e:51:93:f3:3d:
                    c1:7e:be:95:b3:ed:4a:97:d9:38:19:e2:15:6b:76:
                    e4:9b:1b:f2:8f:1c:e1:e3:45:63:bc:f2:60:95:6d:
                    8c:7c:a8:17:e9:ae:d5:4a:e6:d6:e8:f0:69:b9:80:
                    79:cb:b7:15:14:d1:d8:95:8f:85:0a:cb:3b:6f:ef:
                    d7:b6:e9:07:3d:0b:be:52:b0:35:a5:b0:f9:c6:2d:
                    22:60:e0:d6:28:dc:cd:e7:45:70:d6:6b:4d:9b:0b:
                    b1:ce:48:a5:64:69:e6:d0:60:21:f2:32:a5:7f:d6:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:33:BD:0B:97:4F:91:E6:F0:2F:04:D8:2A:27:2D:4D:63:04:41
            X509v3 Authority Key Identifier:
                keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:f4:e6:c8:29:2e:8d:1b:77:1f:5b:e3:00:f3:9a:57:48:9d:
         45:d3:a7:f5:c7:4f:b8:f8:9a:8f:0d:bc:f1:10:e0:78:77:f7:
         ca:89:42:3d:7d:45:db:07:f0:17:38:40:4b:e1:2b:0d:07:23:
         40:cc:cf:1c:bb:49:62:90:14:73:f4:2e:27:85:b6:90:97:78:
         43:4e:1c:24:66:c8:f0:9b:1c:0b:67:99:78:f3:82:96:23:12:
         07:cb:3b:b3:56:c7:6b:10:95:0f:c0:1e:27:90:df:35:bf:88:
         85:a8:36:00:86:ce:a8:2c:bf:06:63:9f:09:fa:67:45:ee:c3:
         93:b4:d4:03:88:ae:d2:0c:1b:ce:68:e8:72:94:24:f4:a6:53:
         de:78:a5:19:d5:af:c6:16:f3:bb:8c:a0:7e:7e:a1:d0:a0:b1:
         6e:96:c2:f6:7f:31:c3:b7:e1:3f:83:4b:21:b2:b0:d2:a8:e1:
         4f:c8:28:cf:07:f0:57:94:89:78:7a:6f:a7:7f:5e:92:47:b0:
         08:b1:0b:c7:30:5a:d4:8b:67:12:8f:65:6e:23:26:b0:e5:43:
         94:1e:7e:6e:8a:6e:b2:b7:b5:33:1f:51:27:bc:69:83:87:66:
         94:1e:9d:bb:6b:12:40:d9:19:48:ec:77:23:11:15:4a:4b:4c:
         12:d7:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:40 2026 by rpki-client