Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa
File:                     3135372e31352e302e302f32332d3234203d3e20313532373639.roa (raw, json)
Hash identifier:          Ga3Ln5lbJr/jOn/mktQk4Ls62tUtKHvTiYJE3HVfL+Y=
Subject key identifier:   34:A4:51:59:E0:81:FE:98:DF:F6:0A:99:7E:D8:26:30:A4:EA:0A:87
Certificate issuer:       /CN=D5265466AE0186702AF52D11170A29AC32F54EF5
Certificate serial:       0A29282532FBEBCD0B968B8AC127D6E559E29FCB
Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa
Signing time:             Thu 09 Apr 2026 07:03:25 +0000
ROA not before:           Thu 09 Apr 2026 06:58:25 +0000
ROA not after:            Thu 08 Apr 2027 07:03:25 +0000
asID:                     152769
IP address blocks:        157.15.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl
                          rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 23:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:29:28:25:32:fb:eb:cd:0b:96:8b:8a:c1:27:d6:e5:59:e2:9f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5
        Validity
            Not Before: Apr  9 06:58:25 2026 GMT
            Not After : Apr  8 07:03:25 2027 GMT
        Subject: CN=34A45159E081FE98DFF60A997ED82630A4EA0A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:55:d9:bd:a5:fd:47:8e:d1:9e:51:9d:ff:
                    b6:9c:0c:2c:11:24:9b:83:cf:56:6e:3b:b6:c9:22:
                    e0:2e:f5:70:b0:76:2f:c8:3e:86:0a:a5:d2:0f:8a:
                    fc:79:3b:d9:5e:1e:54:9f:89:44:89:39:3c:26:62:
                    76:a2:15:b4:fa:5e:3e:e2:e7:c0:2d:fe:f5:c0:28:
                    dd:8f:06:2c:37:70:fc:e8:87:f7:bf:0b:98:16:81:
                    fb:b1:a4:56:f4:6c:83:1b:e7:07:66:a5:0d:c6:56:
                    b5:a4:e3:ce:eb:9d:0f:5a:b3:03:96:f0:5d:80:a4:
                    36:36:62:98:43:90:3b:ff:62:d7:16:b1:39:c9:2d:
                    88:2f:38:fc:1f:37:ff:61:d2:d1:a0:db:d0:69:30:
                    dd:cf:f8:94:a4:9d:e8:3c:8c:8a:dd:34:d8:da:d0:
                    87:2e:ee:a6:d4:c5:f2:3c:77:69:99:20:09:dd:c1:
                    39:01:fb:bd:02:2c:d3:7d:8b:f6:84:f9:00:be:16:
                    18:f4:bf:f4:15:7b:ab:73:d6:d8:f4:90:f6:ba:1f:
                    81:84:e5:4b:5e:62:4e:d6:0f:c9:12:fb:e7:c7:70:
                    e2:df:78:df:12:56:5d:c4:11:93:68:c8:aa:4b:be:
                    7f:59:e7:1e:8c:51:40:0d:e6:40:0b:4b:81:2d:41:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:51:59:E0:81:FE:98:DF:F6:0A:99:7E:D8:26:30:A4:EA:0A:87
            X509v3 Authority Key Identifier:
                keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:1c:04:75:bf:88:0a:bd:0a:1f:07:34:4a:79:63:69:03:1d:
         92:d0:fa:7e:30:d8:ca:7b:75:53:95:eb:da:94:31:cb:40:1d:
         c0:ad:78:6b:19:96:b9:f2:69:e5:64:30:9e:83:25:82:4d:0d:
         ea:2f:2f:30:da:57:66:b2:5f:e7:0c:32:1d:a1:b2:83:40:2e:
         44:83:93:e5:61:9b:35:ba:f7:c1:a0:39:99:fb:06:a6:7a:d7:
         00:73:58:00:11:f6:8c:64:df:72:dc:2e:13:96:e6:e6:6d:55:
         6d:69:6c:c9:5d:49:08:b8:ad:11:ef:6d:c3:ce:55:a8:10:48:
         8b:cd:5a:26:97:67:67:eb:ac:1c:f3:f4:f8:2a:77:54:93:96:
         4e:2e:38:b5:15:7c:0f:ae:53:ed:8a:6d:54:b3:75:87:98:09:
         eb:20:4c:94:bf:b9:58:0c:84:6b:bb:63:fa:59:a1:1a:1e:49:
         5d:89:1f:1e:31:51:cb:31:72:13:0f:ca:eb:5c:64:0f:2b:8b:
         40:76:e7:f2:25:32:f9:df:ca:9d:1f:4e:79:66:e2:84:f2:5e:
         40:31:58:8c:76:30:a9:d3:cc:b4:32:d8:51:3d:ff:a7:e1:c5:
         b8:f3:ca:ea:02:ff:62:7a:0c:77:12:d6:9a:fe:72:0e:76:cf:
         c9:e7:13:b5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCikoJTL7680LlouKwSfW5Vnin8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz
MkY1NEVGNTAeFw0yNjA0MDkwNjU4MjVaFw0yNzA0MDgwNzAzMjVaMDMxMTAvBgNV
BAMTKDM0QTQ1MTU5RTA4MUZFOThERkY2MEE5OTdFRDgyNjMwQTRFQTBBODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XFXZvaX9R47RnlGd/7acDCwR
JJuDz1ZuO7bJIuAu9XCwdi/IPoYKpdIPivx5O9leHlSfiUSJOTwmYnaiFbT6Xj7i
58At/vXAKN2PBiw3cPzoh/e/C5gWgfuxpFb0bIMb5wdmpQ3GVrWk487rnQ9aswOW
8F2ApDY2YphDkDv/YtcWsTnJLYgvOPwfN/9h0tGg29BpMN3P+JSkneg8jIrdNNja
0Icu7qbUxfI8d2mZIAndwTkB+70CLNN9i/aE+QC+Fhj0v/QVe6tz1tj0kPa6H4GE
5UteYk7WD8kS++fHcOLfeN8SVl3EEZNoyKpLvn9Z5x6MUUAN5kALS4EtQXHpAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUNKRRWeCB/pjf9gqZftgmMKTqCocwHwYDVR0j
BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF
MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1
NEVGNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NjEzN2FlLTJlZmItNDNjMC1i
ZGI3LTQzZjVkOTM5Y2YwYy8wLzMxMzUzNzJlMzEzNTJlMzAyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMTM1MzIzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdDwAwDQYJKoZIhvcN
AQELBQADggEBAB8cBHW/iAq9Ch8HNEp5Y2kDHZLQ+n4w2Mp7dVOV69qUMctAHcCt
eGsZlrnyaeVkMJ6DJYJNDeovLzDaV2ayX+cMMh2hsoNALkSDk+VhmzW698GgOZn7
BqZ61wBzWAAR9oxk33LcLhOW5uZtVW1pbMldSQi4rRHvbcPOVagQSIvNWiaXZ2fr
rBzz9Pgqd1STlk4uOLUVfA+uU+2KbVSzdYeYCesgTJS/uVgMhGu7Y/pZoRoeSV2J
Hx4xUcsxchMPyutcZA8ri0B25/IlMvnfyp0fTnlm4oTyXkAxWIx2MKnTzLQy2FE9
/6fhxbjzyuoC/2J6DHcS1pr+cg52z8nnE7U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:28 2026 by rpki-client