Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa
File:                     3136332e36312e372e302f32342d3234203d3e20313534343134.roa (raw, json)
Hash identifier:          V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=
Subject key identifier:   F5:78:79:EC:4C:3D:72:D0:1B:DD:98:53:73:7D:84:2E:C8:CA:A0:1D
Certificate issuer:       /CN=39E28911B503E25DB463229AC922CAEF5693A5DD
Certificate serial:       47AEAB6FB9E239FC35F4CABB5AAC5046945BEF15
Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa
Signing time:             Thu 12 Feb 2026 13:07:34 +0000
ROA not before:           Thu 12 Feb 2026 13:02:34 +0000
ROA not after:            Thu 11 Feb 2027 13:07:34 +0000
asID:                     154414
IP address blocks:        163.61.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl
                          rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 16:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ae:ab:6f:b9:e2:39:fc:35:f4:ca:bb:5a:ac:50:46:94:5b:ef:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD
        Validity
            Not Before: Feb 12 13:02:34 2026 GMT
            Not After : Feb 11 13:07:34 2027 GMT
        Subject: CN=F57879EC4C3D72D01BDD9853737D842EC8CAA01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:68:a2:2b:95:70:83:4b:42:82:89:02:10:
                    09:55:71:b4:fe:03:85:0d:d8:42:f1:1a:da:0e:c4:
                    35:aa:dd:e5:36:c6:d9:b0:16:f2:fa:14:96:05:7e:
                    d8:e9:08:2b:e0:77:ae:c4:f5:e2:9d:13:7d:d6:43:
                    c0:30:bc:8f:50:c3:24:8e:8a:11:53:44:f1:24:de:
                    91:7d:e5:0f:1d:c4:cd:f4:8e:70:68:84:47:37:1e:
                    70:77:d0:4d:f1:67:76:45:e0:09:b3:1a:aa:06:77:
                    f0:38:fe:6c:4d:bf:77:c9:8b:b6:ab:86:c2:a2:10:
                    56:e6:73:13:66:9e:55:6b:61:52:09:bf:06:17:11:
                    37:0a:fb:fa:21:25:99:2d:6e:fe:51:4d:db:8e:dc:
                    b5:c2:24:dc:5a:06:ed:b7:58:0c:af:b5:9a:87:d6:
                    96:75:e0:43:11:82:00:16:7c:df:84:91:5d:5a:98:
                    5b:f0:68:56:15:f4:b8:e4:b1:07:19:83:d0:4d:77:
                    20:d9:5c:76:c1:98:46:08:23:f7:1c:81:e0:03:21:
                    4f:32:39:27:f6:90:9c:c8:d4:55:3a:25:89:6a:c1:
                    7a:b8:9a:8b:7c:f9:f8:72:11:37:69:11:e7:a5:c6:
                    b1:83:1d:73:ec:32:76:f6:7b:42:e8:8a:6e:ea:2e:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:79:EC:4C:3D:72:D0:1B:DD:98:53:73:7D:84:2E:C8:CA:A0:1D
            X509v3 Authority Key Identifier:
                keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/3136332e36312e372e302f32342d3234203d3e20313534343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:34:f3:a7:a9:c0:01:1e:ec:23:00:72:29:67:b4:08:58:
         04:3f:b8:11:3f:27:3f:3e:ea:c6:72:79:91:76:d1:a2:de:c2:
         2f:37:94:e3:cc:2a:5f:68:8f:8a:69:2f:c2:42:46:c7:98:d3:
         dc:23:47:fb:58:6d:0e:e8:89:e8:e4:ed:11:a6:74:a3:80:52:
         a8:c7:78:8e:a8:a3:d1:86:75:1d:48:bd:b1:b3:12:1e:bb:56:
         b1:fb:02:29:6d:d3:cf:e4:f4:a9:38:87:47:bf:ce:80:90:e2:
         9b:90:a6:f4:24:77:f2:38:61:fc:b1:d3:23:a8:b1:60:d6:79:
         63:61:6a:81:eb:e4:c6:3a:a6:5c:a4:0e:24:b3:91:8a:42:5c:
         89:94:6d:2c:24:d7:c7:db:0c:fc:8c:5f:7f:77:9d:51:02:65:
         fd:8a:22:c1:28:6e:b0:ac:54:0a:73:6a:5d:e2:61:60:17:e1:
         10:1e:28:71:f8:cd:d0:5d:a9:e6:02:5a:a1:7a:58:17:d0:70:
         59:bd:d1:42:da:bb:c4:ab:02:45:38:bf:56:72:83:ea:fc:86:
         39:e9:11:42:a5:c7:4e:3e:53:ca:3d:76:ca:16:d0:11:cd:e9:
         5a:5d:b7:dc:66:f0:26:24:8c:d2:22:9b:db:8d:91:38:d7:c2:
         73:22:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:40 2026 by rpki-client