Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
File:                     3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          dtHpP/m8KLbGnRe3ljBhKMMLzWqW+st7m3ZDgM49VKg=
Subject key identifier:   A7:A1:A0:AE:FB:97:EB:2D:1C:8E:03:DA:D7:3F:A5:ED:5C:7D:A2:C1
Certificate issuer:       /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
Certificate serial:       3CC88A7CBCBFD8B4CACF368EE1E5DAAB1644A8DB
Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 06 Apr 2026 17:00:00 +0000
ROA not before:           Mon 06 Apr 2026 16:55:00 +0000
ROA not after:            Mon 05 Apr 2027 17:00:00 +0000
asID:                     16509
IP address blocks:        157.66.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl
                          rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c8:8a:7c:bc:bf:d8:b4:ca:cf:36:8e:e1:e5:da:ab:16:44:a8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
        Validity
            Not Before: Apr  6 16:55:00 2026 GMT
            Not After : Apr  5 17:00:00 2027 GMT
        Subject: CN=A7A1A0AEFB97EB2D1C8E03DAD73FA5ED5C7DA2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:50:6a:a0:f1:1b:6e:ff:ad:13:eb:54:b8:
                    6d:fd:9d:2a:d7:a3:94:b7:65:d4:59:13:e0:48:3e:
                    88:75:96:b0:c9:48:96:c6:18:c1:84:a5:a3:d4:b5:
                    3f:25:ae:8a:f7:fa:82:e7:b8:85:91:5f:47:fe:8b:
                    21:3e:85:b8:db:af:87:92:ff:78:56:30:99:4f:bc:
                    61:43:51:c9:30:cd:72:96:c9:b0:74:f6:44:cc:e6:
                    26:14:df:56:96:dc:72:56:ca:0c:3b:65:e6:af:00:
                    97:5c:ca:01:20:c3:ae:3f:c5:d2:6e:9f:60:4e:e1:
                    f8:5c:fe:60:a5:b7:fc:6f:dd:79:62:c9:1b:a5:43:
                    dc:f9:51:a6:24:5c:36:f6:25:d7:46:2c:ef:bf:46:
                    5c:42:0b:2e:56:dd:d2:f7:ed:fb:04:48:6f:12:e6:
                    98:32:8b:cc:f6:65:85:d7:18:3c:dc:4c:63:2d:9c:
                    6b:fc:23:26:42:bb:ed:9b:cc:fd:fa:3a:b0:8c:6d:
                    c5:7b:bb:d6:8b:1e:08:24:09:39:33:89:37:b5:d6:
                    c6:49:cc:c4:23:15:e5:91:8a:32:40:7c:86:74:c1:
                    4d:88:26:c8:87:5e:0a:55:65:e4:23:b5:41:ea:3f:
                    5c:2c:f8:b5:f0:66:f0:4f:24:83:22:c0:88:ad:2a:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A1:A0:AE:FB:97:EB:2D:1C:8E:03:DA:D7:3F:A5:ED:5C:7D:A2:C1
            X509v3 Authority Key Identifier:
                keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:3c:21:54:a9:dd:d8:07:6d:2d:9c:cb:b9:da:0d:8c:28:8c:
         9d:4e:a9:71:10:af:24:81:47:1e:79:52:66:39:85:1c:56:dd:
         89:4a:dc:50:f9:1f:9e:10:09:0b:f4:b7:30:26:58:a0:95:e1:
         38:fd:60:8e:f1:f6:cb:5d:45:7f:e4:6c:f6:b1:25:49:f1:d3:
         bc:fb:b2:ac:57:19:1d:2c:27:29:4d:25:4b:74:cc:43:5b:5d:
         07:b3:ad:2a:f9:04:72:fc:a3:10:e5:c3:2d:d5:72:c4:93:89:
         a8:14:43:8b:ee:07:c2:a8:47:ac:af:f9:16:e3:5d:37:bb:65:
         8f:4d:ac:c0:82:a2:f9:34:c9:9b:58:78:99:38:2b:e7:c1:d6:
         05:a5:50:0b:40:4b:ff:1b:c9:12:53:f2:55:bc:b5:33:cd:54:
         fc:6a:50:18:da:d3:c8:3e:59:37:65:07:50:f5:41:75:e8:73:
         49:c6:47:f1:2e:d8:79:1a:ab:83:94:11:1a:ce:18:19:d0:38:
         85:ee:ea:06:51:10:98:aa:a9:fc:b3:c0:42:ce:0a:3b:c2:0b:
         ef:2c:a4:ba:e5:b2:e9:b8:43:8e:1e:5d:89:c5:dd:ec:04:1c:
         0b:77:dc:8f:e2:23:78:dd:e2:06:13:e4:d0:2d:9a:b5:e5:35:
         49:a4:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:34 2026 by rpki-client