Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
File:                     34322e36322e3137392e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier:          M0AUI1pCCQGDUTBoH7C4DRRLknJoPGFTXz+BysiMZwA=
Subject key identifier:   08:9B:62:7B:D8:3C:98:30:95:4C:96:6B:C3:7D:B7:93:A5:90:D1:9B
Certificate issuer:       /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
Certificate serial:       60056F89F6A818A56D464F627A9B85BDFB9B2064
Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa
Signing time:             Tue 10 Feb 2026 12:00:02 +0000
ROA not before:           Tue 10 Feb 2026 11:55:02 +0000
ROA not after:            Tue 09 Feb 2027 12:00:02 +0000
asID:                     55690
IP address blocks:        42.62.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl
                          rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:05:6f:89:f6:a8:18:a5:6d:46:4f:62:7a:9b:85:bd:fb:9b:20:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464
        Validity
            Not Before: Feb 10 11:55:02 2026 GMT
            Not After : Feb  9 12:00:02 2027 GMT
        Subject: CN=089B627BD83C9830954C966BC37DB793A590D19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:65:56:f9:2f:da:96:2e:03:ab:fd:2f:48:
                    74:84:b0:6d:54:35:f5:d8:9a:e9:8a:bf:18:0a:c3:
                    95:31:e5:e7:5e:db:22:cc:83:2a:02:72:8a:aa:f5:
                    8d:12:4d:91:7c:78:7c:76:13:f1:9a:3a:5f:22:ed:
                    02:13:67:ac:c1:ad:eb:6d:59:3c:1e:2d:3f:bb:d4:
                    a8:f2:03:d7:37:4e:c6:17:cf:f2:82:89:8a:0e:c0:
                    80:c4:18:2d:47:61:ed:30:0c:a1:ed:12:fd:8a:47:
                    cc:b6:f3:f5:1d:b5:f0:aa:85:80:97:aa:70:ad:14:
                    74:76:f8:bf:bc:71:fe:48:17:7a:4f:28:3d:a1:47:
                    c0:a8:31:20:88:73:8a:31:eb:c6:6e:c1:e5:a7:f0:
                    b2:b8:99:0f:c1:c0:f4:c6:a9:75:ce:d1:63:e3:37:
                    22:9e:c9:ed:0b:15:93:f1:49:6c:b9:61:54:63:fe:
                    f9:1e:ad:ac:76:9f:66:6b:21:19:0a:fa:14:99:60:
                    b9:60:14:08:0e:20:e9:30:fc:3a:af:a5:69:06:fe:
                    7c:c2:15:e1:5c:54:4a:90:ac:83:4a:6e:ed:9a:f2:
                    57:a2:c8:40:bc:a0:a3:e0:34:37:8b:b4:a6:5f:d0:
                    08:cc:eb:ef:f1:3e:ce:6b:46:ac:a0:80:f7:91:8e:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:62:7B:D8:3C:98:30:95:4C:96:6B:C3:7D:B7:93:A5:90:D1:9B
            X509v3 Authority Key Identifier:
                keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:80:af:d3:a8:af:79:20:27:ee:f0:b3:ea:63:11:43:02:
         ea:4a:48:80:60:ef:99:17:26:e6:ec:02:fc:f1:76:5f:00:35:
         a2:a2:3d:07:8a:00:8b:9b:cd:78:3f:da:07:de:ee:92:32:cf:
         74:31:05:27:ea:5f:34:8c:c2:89:74:c6:29:cb:3c:20:a3:08:
         72:3b:5a:a1:dd:f7:06:bc:74:c8:bf:67:24:82:b4:5a:b0:f6:
         03:d2:a9:2d:85:04:5d:dd:14:49:fe:e3:a8:52:e5:e5:35:65:
         21:e6:8c:69:c0:0a:d2:63:25:e2:e4:de:f9:f6:59:df:fa:79:
         c6:df:d7:c7:ab:fa:fd:bc:0c:14:bd:f3:d5:15:29:a1:c9:d3:
         28:96:c8:d5:5d:10:8f:79:0a:bb:03:5e:c0:f8:8f:63:2a:b1:
         5c:4b:fe:35:27:3d:e5:01:39:de:3e:46:ae:c6:1f:1e:b9:9b:
         47:b7:97:8d:8f:32:7e:45:59:35:44:f9:a1:00:41:cb:9c:e5:
         bf:b2:36:54:5f:71:87:0c:c2:ab:92:1a:42:87:47:2d:bc:53:
         4d:f6:cd:c3:d0:cf:70:5c:b9:5f:32:00:22:60:4b:9e:fe:b9:
         e8:4f:b3:dd:37:18:28:15:51:86:79:40:87:a6:3f:b6:6a:a8:
         ae:c7:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:26 2026 by rpki-client