Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa
File:                     3135372e36362e392e302f32342d3234203d3e20313532373436.roa (raw, json)
Hash identifier:          fmytzBR8cmf3vdnIrK45FL503JvRMo/wdgQ7EJfM3Ng=
Subject key identifier:   21:1C:18:3B:9F:8C:07:09:56:A4:B3:69:F6:10:91:D2:05:57:F5:22
Certificate issuer:       /CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD
Certificate serial:       149BABEDD2A70CC12281B4124331C9EAB0CC64E9
Authority key identifier: F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa
Signing time:             Thu 02 Apr 2026 10:00:00 +0000
ROA not before:           Thu 02 Apr 2026 09:55:00 +0000
ROA not after:            Thu 01 Apr 2027 10:00:00 +0000
asID:                     152746
IP address blocks:        157.66.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl
                          rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 04:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9b:ab:ed:d2:a7:0c:c1:22:81:b4:12:43:31:c9:ea:b0:cc:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD
        Validity
            Not Before: Apr  2 09:55:00 2026 GMT
            Not After : Apr  1 10:00:00 2027 GMT
        Subject: CN=211C183B9F8C070956A4B369F61091D20557F522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:d8:9d:18:77:aa:3e:18:fc:38:3f:34:1d:
                    ea:3f:e2:b9:0b:3e:a4:20:01:82:93:7a:37:b3:d4:
                    a4:45:03:2c:6d:84:31:1c:9f:c9:f1:87:f0:4f:a5:
                    e6:51:38:e7:97:65:e5:87:8f:00:6f:5e:7c:25:c8:
                    b6:16:eb:9b:9b:10:b9:71:75:93:11:db:e4:d1:7e:
                    2c:a3:93:69:1c:82:d2:f8:8c:1c:7a:e0:51:de:39:
                    53:33:30:4f:d7:82:37:0a:e2:d1:20:ff:db:36:18:
                    5c:fc:fc:19:3e:0c:00:45:b0:6e:ae:a5:a8:75:72:
                    8a:7a:d7:66:4d:8f:f7:2a:14:d2:fc:1d:a2:12:15:
                    92:90:b7:2b:e8:11:a1:a5:10:15:a2:73:73:e2:eb:
                    26:7a:1f:a2:aa:8a:43:86:7d:5a:38:13:7c:3d:1a:
                    f7:55:ca:3a:49:8c:a2:d2:d3:0d:e6:41:cf:7d:af:
                    4b:fe:ea:66:3a:f8:97:e7:00:c6:f9:bf:63:8f:14:
                    70:64:e1:8b:ac:5b:2c:8d:e9:7d:ad:a4:d4:30:0f:
                    05:65:79:33:05:1c:67:79:60:6d:ae:71:a0:69:9e:
                    c9:f8:c1:d7:21:25:1f:6e:0a:3d:c9:6b:89:df:42:
                    b1:ee:9f:b4:fb:fb:50:c2:2b:d8:13:18:ed:bb:bf:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:18:3B:9F:8C:07:09:56:A4:B3:69:F6:10:91:D2:05:57:F5:22
            X509v3 Authority Key Identifier:
                keyid:F9:93:0E:30:8D:30:B3:E1:5C:FF:F7:EB:0D:34:37:A0:B7:EC:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F9930E308D30B3E15CFFF7EB0D3437A0B7ECE7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/3135372e36362e392e302f32342d3234203d3e20313532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:d9:7d:7b:0d:69:35:f7:6e:74:82:20:f0:ad:7a:16:e2:
         55:31:66:3c:4c:e5:16:59:75:b5:4f:60:1f:0a:14:c5:17:cb:
         f6:06:00:27:6d:d9:29:1a:1d:b4:5a:4e:fe:b4:cd:8d:d3:5b:
         54:77:ec:c3:7b:27:b0:fc:1e:a2:c4:9e:d1:e5:0c:6b:6a:0e:
         ec:5f:78:3e:38:d5:ff:a7:e7:e6:df:27:ae:46:ba:af:50:53:
         8b:ea:52:8b:00:65:d5:12:bd:b9:a7:e0:f9:a5:df:e1:ef:b5:
         01:8b:df:21:51:d6:2f:95:73:dd:d8:1e:34:2d:3e:c7:c4:b3:
         b6:75:52:0a:7d:97:d2:a1:f3:5d:40:94:a8:34:d6:c3:1f:27:
         aa:61:0b:b6:b4:3e:6d:07:9f:8a:85:94:ed:80:8f:0f:38:67:
         92:66:2b:6e:c5:c7:77:80:3b:9d:24:4b:d0:34:f8:75:2b:4a:
         57:96:71:f0:af:c1:9d:6b:ce:a7:5b:85:0a:26:49:89:90:00:
         04:ff:7a:6a:2c:1b:32:71:b1:cc:8e:c9:6a:99:96:d1:41:68:
         6f:a2:0f:f7:43:c8:bf:98:b9:0c:fd:dc:b3:d6:f7:2c:d0:14:
         87:27:e8:ed:61:ac:2b:08:5b:87:c5:a1:54:59:c0:18:0c:91:
         c8:9a:02:b0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFJur7dKnDMEigbQSQzHJ6rDMZOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBC
N0VDRTdCRDAeFw0yNjA0MDIwOTU1MDBaFw0yNzA0MDExMDAwMDBaMDMxMTAvBgNV
BAMTKDIxMUMxODNCOUY4QzA3MDk1NkE0QjM2OUY2MTA5MUQyMDU1N0Y1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAdidGHeqPhj8OD80Heo/4rkL
PqQgAYKTejez1KRFAyxthDEcn8nxh/BPpeZROOeXZeWHjwBvXnwlyLYW65ubELlx
dZMR2+TRfiyjk2kcgtL4jBx64FHeOVMzME/XgjcK4tEg/9s2GFz8/Bk+DABFsG6u
pah1cop612ZNj/cqFNL8HaISFZKQtyvoEaGlEBWic3Pi6yZ6H6KqikOGfVo4E3w9
GvdVyjpJjKLS0w3mQc99r0v+6mY6+JfnAMb5v2OPFHBk4YusWyyN6X2tpNQwDwVl
eTMFHGd5YG2ucaBpnsn4wdchJR9uCj3Ja4nfQrHun7T7+1DCK9gTGO27v3RHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUIRwYO5+MBwlWpLNp9hCR0gVX9SIwHwYDVR0j
BBgwFoAU+ZMOMI0ws+Fc//frDTQ3oLfs570wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZWJmNTVjYS1kNzgzLTRhM2ItOTVjYy03M2NjMzQ2ZGI0NmUvMC9GOTkzMEUzMDhE
MzBCM0UxNUNGRkY3RUIwRDM0MzdBMEI3RUNFN0JELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjk5MzBFMzA4RDMwQjNFMTVDRkZGN0VCMEQzNDM3QTBCN0VD
RTdCRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlYmY1NWNhLWQ3ODMtNGEzYi05
NWNjLTczY2MzNDZkYjQ2ZS8wLzMxMzUzNzJlMzYzNjJlMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQgkwDQYJKoZIhvcN
AQELBQADggEBAB092X17DWk19250giDwrXoW4lUxZjxM5RZZdbVPYB8KFMUXy/YG
ACdt2SkaHbRaTv60zY3TW1R37MN7J7D8HqLEntHlDGtqDuxfeD441f+n5+bfJ65G
uq9QU4vqUosAZdUSvbmn4Pml3+HvtQGL3yFR1i+Vc93YHjQtPsfEs7Z1Ugp9l9Kh
811AlKg01sMfJ6phC7a0Pm0Hn4qFlO2Ajw84Z5JmK27Fx3eAO50kS9A0+HUrSleW
cfCvwZ1rzqdbhQomSYmQAAT/emosGzJxscyOyWqZltFBaG+iD/dDyL+YuQz93LPW
9yzQFIcn6O1hrCsIW4fFoVRZwBgMkciaArA=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:04:58 2026 by rpki-client