Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa
File:                     3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa (raw, json)
Hash identifier:          /EQh7qiYa71VUGjV3Zf7X0Yu8GoGKgMCvZHxTHwAUIc=
Subject key identifier:   07:E8:78:06:0A:32:1A:F8:C0:21:C7:E5:D1:A7:11:EE:D7:D9:EE:BE
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       08D84BE7EC9298BCFE1347CC8803A6374A5E30D4
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa
Signing time:             Thu 21 May 2026 07:59:22 +0000
ROA not before:           Thu 21 May 2026 07:54:22 +0000
ROA not after:            Thu 20 May 2027 07:59:22 +0000
asID:                     154537
IP address blocks:        151.158.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:4b:e7:ec:92:98:bc:fe:13:47:cc:88:03:a6:37:4a:5e:30:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: May 21 07:54:22 2026 GMT
            Not After : May 20 07:59:22 2027 GMT
        Subject: CN=07E878060A321AF8C021C7E5D1A711EED7D9EEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:3d:81:c8:16:b5:2d:ef:e5:be:6a:b8:9c:
                    d2:e1:89:0f:c2:56:28:2e:2f:47:1c:7e:14:4a:c4:
                    33:5f:5c:e2:c9:ac:f1:0c:fd:65:bb:a2:36:a1:c2:
                    9d:35:84:b5:af:d4:ee:17:c3:e9:61:66:15:25:5e:
                    8c:c3:13:2e:3a:13:78:20:40:0a:99:b3:aa:c1:01:
                    0f:ba:31:f4:f8:d2:b7:73:de:a0:7c:21:46:62:50:
                    de:60:16:39:f5:f7:d7:a5:f8:fc:c6:7c:5f:ea:17:
                    4f:7d:3f:1f:92:d5:de:23:ab:7f:48:86:83:0f:ab:
                    08:da:41:8e:d3:36:d7:b4:9f:1f:3c:dd:87:9a:49:
                    f9:ee:d7:a3:ad:e4:68:f8:1e:e6:75:76:40:61:d4:
                    ef:29:de:3a:54:28:e9:f5:df:bf:86:74:94:f8:42:
                    97:a9:3c:9c:e3:eb:3c:a6:f1:9b:89:94:ae:2c:7f:
                    61:82:06:fc:0b:38:b1:8d:35:cc:7f:4e:3c:9a:e8:
                    36:da:58:87:7c:e1:cb:d5:84:de:ae:85:cf:9b:a4:
                    ca:55:fe:5e:f3:45:8d:82:4e:4e:b7:f5:e0:04:f4:
                    83:92:3b:37:09:21:58:40:df:23:f0:f1:f0:bc:c3:
                    22:c9:9c:b3:61:16:73:9e:5c:af:b5:6f:55:10:f8:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:78:06:0A:32:1A:F8:C0:21:C7:E5:D1:A7:11:EE:D7:D9:EE:BE
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38322e302f32332d3234203d3e20313534353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:62:af:f9:83:17:ca:e6:af:15:bb:92:51:ef:b1:82:21:d6:
         1a:cd:57:1e:b7:2e:47:58:0b:e9:8b:0a:17:fb:bb:e4:61:85:
         63:f8:f8:79:6c:e3:25:94:bd:c1:1f:8b:cd:d9:81:73:53:cb:
         24:56:27:6b:9e:34:9b:86:93:f5:f3:1c:9f:df:14:0e:d4:25:
         69:43:f6:93:76:d8:9a:3a:26:13:23:d6:d7:b9:95:22:9a:ef:
         52:e9:aa:b3:67:8f:ec:c7:2e:67:fe:d5:db:d3:2e:5b:9e:58:
         f2:3c:fa:25:11:93:82:a9:7f:8b:fb:2f:5d:3d:17:32:41:82:
         b5:66:4a:55:70:84:1f:85:d2:51:1d:e0:e3:35:66:83:43:14:
         7c:d4:9a:fd:8c:0c:de:50:3c:38:4b:fe:8a:c9:4f:32:a1:1d:
         d7:c2:91:75:ba:be:08:81:76:d1:a5:c9:0b:db:57:57:55:4f:
         52:11:37:62:41:eb:8a:2a:1c:23:fa:80:00:4e:77:d6:72:5e:
         5b:00:ac:19:71:dd:21:a4:f9:d0:ec:89:44:b0:e6:03:b7:4c:
         70:36:91:bd:6a:1c:5f:78:15:c6:97:22:33:92:df:a7:14:b2:
         4e:8c:fc:4e:94:32:0b:ae:95:ff:16:67:d3:d8:7a:e1:5c:df:
         26:a8:60:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:56 2026 by rpki-client