Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/3136332e35322e3230302e302f32332d3234203d3e20313534393236.roa
File:                     3136332e35322e3230302e302f32332d3234203d3e20313534393236.roa (raw, json)
Hash identifier:          uyIJ2Z4ScpSTnFTUd/7BFjto0Eh1ZVPBoc/68apK7UI=
Subject key identifier:   79:EA:68:FE:5E:4D:99:FD:32:10:77:91:49:A7:2E:91:0A:E3:8C:28
Certificate issuer:       /CN=257400396282690A629EEAC8D9AE6FFBDA48213E
Certificate serial:       37C97446C6843861FB1CB3EAA730DD32FE62D6E9
Authority key identifier: 25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/3136332e35322e3230302e302f32332d3234203d3e20313534393236.roa
Signing time:             Thu 05 Nov 2026 00:48:30 +0000
ROA not before:           Thu 05 Nov 2026 00:43:30 +0000
ROA not after:            Thu 04 Nov 2027 00:48:30 +0000
asID:                     154926
IP address blocks:        163.52.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.crl
                          rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 10:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c9:74:46:c6:84:38:61:fb:1c:b3:ea:a7:30:dd:32:fe:62:d6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257400396282690A629EEAC8D9AE6FFBDA48213E
        Validity
            Not Before: Nov  5 00:43:30 2026 GMT
            Not After : Nov  4 00:48:30 2027 GMT
        Subject: CN=79EA68FE5E4D99FD3210779149A72E910AE38C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:06:bb:7b:1c:2e:c8:36:35:6a:e2:10:e7:
                    30:77:74:78:e8:1b:91:9f:86:d8:65:1f:8f:15:ff:
                    5e:74:98:28:a9:9b:b1:d5:01:1d:6c:d0:1b:a3:85:
                    0f:df:67:79:f9:32:d1:e8:e8:14:18:9c:e6:56:c0:
                    d9:5a:ce:a0:2a:a0:69:de:69:02:c3:d4:f9:6e:2f:
                    e1:d6:87:23:0d:87:c4:97:50:1f:14:5b:4e:76:57:
                    ec:ca:c4:be:64:5e:69:2d:ba:c3:94:24:76:b4:9d:
                    2e:aa:2d:1e:d6:eb:2c:54:a9:84:77:ca:15:b0:92:
                    30:f6:1a:d9:37:ce:46:81:5c:4e:b7:72:2a:1e:33:
                    50:c6:e5:06:22:05:ea:ef:b1:82:21:ac:d1:49:3b:
                    b9:83:4d:d8:70:eb:b5:4a:6e:a6:eb:3e:fe:30:f5:
                    c9:3d:16:6f:ba:fd:54:3e:7d:57:a1:88:af:be:93:
                    96:db:d1:43:58:4f:7a:a0:7e:24:8c:05:fe:5a:4a:
                    68:8f:ea:5a:0b:d4:a8:cf:15:62:ba:b1:99:ec:46:
                    04:89:21:70:3f:c2:28:ef:12:93:3c:9f:7b:82:66:
                    3a:e3:47:3a:68:94:a1:de:bb:22:5b:5a:b8:92:0d:
                    34:47:f3:1a:42:ca:09:d1:f7:20:1f:34:09:82:91:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:68:FE:5E:4D:99:FD:32:10:77:91:49:A7:2E:91:0A:E3:8C:28
            X509v3 Authority Key Identifier:
                keyid:25:74:00:39:62:82:69:0A:62:9E:EA:C8:D9:AE:6F:FB:DA:48:21:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/257400396282690A629EEAC8D9AE6FFBDA48213E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257400396282690A629EEAC8D9AE6FFBDA48213E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a8cdbae-c67b-4e9e-9b5d-b64937da8def/0/3136332e35322e3230302e302f32332d3234203d3e20313534393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:73:18:2e:46:ea:8c:c6:05:79:4f:68:97:97:df:2f:56:67:
         6d:e0:38:d7:58:ac:6e:35:98:08:02:4b:eb:3e:13:1b:50:93:
         2b:d3:ae:d1:a8:72:ea:b7:a5:1e:d1:81:fd:1f:d4:ef:b4:31:
         b3:15:74:2d:fb:3f:84:11:d1:21:36:8c:78:f0:ba:b8:a6:cd:
         1a:62:b2:41:53:2e:e6:a9:97:77:ce:ed:66:89:79:c7:18:0f:
         97:be:a6:a1:e0:5a:08:ff:be:df:f8:8b:7f:5d:46:25:be:5f:
         5d:de:27:60:22:7f:8f:c1:72:b1:34:cf:12:91:4d:1d:2c:ab:
         5c:86:bf:ec:25:08:21:e5:a4:1f:72:8e:19:e1:96:6f:7a:b4:
         45:a8:ac:7a:53:ef:1f:29:c7:30:68:30:f5:12:b4:65:f4:86:
         20:cd:be:ab:35:fa:17:7b:87:c4:1d:3e:bf:f6:d0:fb:f3:b8:
         20:97:19:b5:ea:ac:8d:71:4a:5f:fc:1d:70:d3:e5:59:c7:8f:
         7b:fa:50:35:ba:17:70:c3:45:87:d4:fb:26:48:f5:87:29:56:
         2d:c1:25:df:8b:3c:c1:d3:6b:f5:80:0d:d6:63:72:08:91:2e:
         77:af:01:29:02:de:8a:76:99:c4:2e:e7:76:93:ad:fd:55:40:
         43:9f:9a:79
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUN8l0RsaEOGH7HLPqpzDdMv5i1ukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU3NDAwMzk2MjgyNjkwQTYyOUVFQUM4RDlBRTZGRkJE
QTQ4MjEzRTAeFw0yNjExMDUwMDQzMzBaFw0yNzExMDQwMDQ4MzBaMDMxMTAvBgNV
BAMTKDc5RUE2OEZFNUU0RDk5RkQzMjEwNzc5MTQ5QTcyRTkxMEFFMzhDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzQa7exwuyDY1auIQ5zB3dHjo
G5GfhthlH48V/150mCipm7HVAR1s0BujhQ/fZ3n5MtHo6BQYnOZWwNlazqAqoGne
aQLD1PluL+HWhyMNh8SXUB8UW052V+zKxL5kXmktusOUJHa0nS6qLR7W6yxUqYR3
yhWwkjD2Gtk3zkaBXE63cioeM1DG5QYiBervsYIhrNFJO7mDTdhw67VKbqbrPv4w
9ck9Fm+6/VQ+fVehiK++k5bb0UNYT3qgfiSMBf5aSmiP6loL1KjPFWK6sZnsRgSJ
IXA/wijvEpM8n3uCZjrjRzpolKHeuyJbWriSDTRH8xpCygnR9yAfNAmCkYPFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeepo/l5Nmf0yEHeRSacukQrjjCgwHwYDVR0j
BBgwFoAUJXQAOWKCaQpinurI2a5v+9pIIT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2E4Y2RiYWUtYzY3Yi00ZTllLTliNWQtYjY0OTM3ZGE4ZGVmLzAvMjU3NDAwMzk2
MjgyNjkwQTYyOUVFQUM4RDlBRTZGRkJEQTQ4MjEzRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTc0MDAzOTYyODI2OTBBNjI5RUVBQzhEOUFFNkZGQkRBNDgy
MTNFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdhOGNkYmFlLWM2N2ItNGU5ZS05
YjVkLWI2NDkzN2RhOGRlZi8wLzMxMzYzMzJlMzUzMjJlMzIzMDMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTM0MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBozTIMA0GCSqG
SIb3DQEBCwUAA4IBAQAUcxguRuqMxgV5T2iXl98vVmdt4DjXWKxuNZgIAkvrPhMb
UJMr067RqHLqt6Ue0YH9H9TvtDGzFXQt+z+EEdEhNox48Lq4ps0aYrJBUy7mqZd3
zu1miXnHGA+Xvqah4FoI/77f+It/XUYlvl9d3idgIn+PwXKxNM8SkU0dLKtchr/s
JQgh5aQfco4Z4ZZverRFqKx6U+8fKccwaDD1ErRl9IYgzb6rNfoXe4fEHT6/9tD7
87gglxm16qyNcUpf/B1w0+VZx497+lA1uhdww0WH1PsmSPWHKVYtwSXfizzB02v1
gA3WY3IIkS53rwEpAt6KdpnELud2k639VUBDn5p5
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:49 2026 by rpki-client