Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa
File:                     3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          AE1XhBx7e3VWZVTwKTd7Am2QNgqcrN5/LWEu0klX8Q0=
Subject key identifier:   0A:B0:1D:7D:07:FC:21:C1:40:29:85:9B:71:04:E5:CF:96:1A:EF:C3
Certificate issuer:       /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
Certificate serial:       23C5AC0E12A8EDDAEA15E6835D98D45FD356B148
Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 06 Apr 2026 17:00:00 +0000
ROA not before:           Mon 06 Apr 2026 16:55:00 +0000
ROA not after:            Mon 05 Apr 2027 17:00:00 +0000
asID:                     14618
IP address blocks:        157.66.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl
                          rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:ac:0e:12:a8:ed:da:ea:15:e6:83:5d:98:d4:5f:d3:56:b1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
        Validity
            Not Before: Apr  6 16:55:00 2026 GMT
            Not After : Apr  5 17:00:00 2027 GMT
        Subject: CN=0AB01D7D07FC21C14029859B7104E5CF961AEFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:0d:29:65:d7:24:d7:da:17:a2:66:88:00:
                    32:3f:cc:60:1f:d9:03:bd:42:2a:97:d1:ed:37:ac:
                    b9:39:32:18:50:73:e5:8a:78:ad:ca:16:3c:58:6b:
                    7f:8d:d1:07:91:6d:06:d3:d6:59:75:a6:1c:ec:3f:
                    5f:6a:1e:d5:73:67:4f:7c:af:93:5a:22:60:c8:0a:
                    1c:89:e8:c9:01:cd:95:85:8e:84:c4:e8:35:1e:82:
                    1f:80:88:38:ad:1c:2b:79:10:b2:66:9a:17:4c:71:
                    54:b4:9e:0e:d7:50:dd:0e:b3:5f:aa:8f:ed:86:11:
                    96:e2:44:12:a0:3b:ec:ff:66:16:73:23:08:f9:9a:
                    0c:e9:cc:0d:27:cd:c8:58:bd:82:5c:ce:2b:6a:7a:
                    24:bd:e5:24:7c:89:9e:dc:45:59:e2:b5:fd:92:25:
                    98:d3:d1:6d:3b:70:2f:09:80:33:19:07:7d:96:92:
                    41:14:a6:de:f4:42:33:9f:1a:aa:60:56:8c:16:77:
                    8e:a6:97:6a:e2:ff:67:4f:b9:44:e3:f7:66:5d:3b:
                    91:39:8f:85:7b:6b:93:ad:6b:fd:4a:2d:c6:86:46:
                    ff:fb:b0:1f:fb:ea:e2:b2:3c:4c:3f:e7:52:ad:e8:
                    1e:bb:63:eb:f6:39:1f:22:fb:82:bf:b2:de:60:60:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B0:1D:7D:07:FC:21:C1:40:29:85:9B:71:04:E5:CF:96:1A:EF:C3
            X509v3 Authority Key Identifier:
                keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:18:f6:02:d7:38:86:00:80:0c:2e:ba:b4:cb:35:f7:ef:e3:
         86:f6:f8:97:53:27:a2:13:11:44:f5:1e:09:1c:30:15:c6:d9:
         22:06:2b:0f:27:e2:a2:15:60:3d:1a:0c:cc:c9:52:4e:c7:b1:
         57:32:4d:85:31:da:5b:19:8d:78:fb:ec:56:38:d4:05:12:7f:
         f9:f1:13:7f:04:cc:c9:7d:b2:f0:94:80:54:54:82:3e:26:1e:
         2f:80:c8:b7:7e:24:3e:c5:a2:90:ee:06:8c:53:b4:c4:3d:05:
         b2:2a:fd:70:dd:45:aa:93:0b:39:f5:e6:22:af:b0:0e:8f:42:
         55:2a:42:cb:05:2b:16:e8:0d:b0:4e:2a:72:d6:17:29:86:0a:
         67:51:15:2d:09:16:a5:5d:5e:ed:b8:80:7f:81:bc:38:7e:5a:
         6d:0e:da:d6:c3:aa:b1:d3:3a:ec:50:91:ca:06:78:4a:29:a6:
         04:dc:23:12:de:19:ac:b8:54:5f:3a:33:8b:4f:1c:57:04:95:
         14:1f:35:7e:51:48:eb:0a:f0:66:20:6e:ad:d6:75:89:8f:60:
         82:1c:ad:18:86:20:89:69:d8:45:02:a6:4e:6f:5e:df:b8:55:
         97:6c:bc:00:fa:d4:46:92:a2:3f:51:7a:5c:90:e9:de:b5:98:
         19:2a:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:15 2026 by rpki-client