Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
File:                     34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (raw, json)
Hash identifier:          Xv8kcXDJ6WYMmWOyH4eBz+tykqWc30YT1h8G2TY977E=
Subject key identifier:   93:09:33:19:DC:8A:88:71:8B:D2:82:86:28:84:CC:BC:5E:FB:5C:C6
Certificate issuer:       /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial:       1C03BAACDBA1982C48330FF9193B97130258C818
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
Signing time:             Wed 04 Feb 2026 05:00:02 +0000
ROA not before:           Wed 04 Feb 2026 04:55:02 +0000
ROA not after:            Wed 03 Feb 2027 05:00:02 +0000
asID:                     452023
IP address blocks:        45.123.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
                          rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 12:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:03:ba:ac:db:a1:98:2c:48:33:0f:f9:19:3b:97:13:02:58:c8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
        Validity
            Not Before: Feb  4 04:55:02 2026 GMT
            Not After : Feb  3 05:00:02 2027 GMT
        Subject: CN=93093319DC8A88718BD282862884CCBC5EFB5CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:0a:03:2c:92:8c:cf:8b:37:a4:a3:3f:72:
                    6e:ee:c3:b0:d9:c1:dd:b2:73:91:10:48:79:b8:9b:
                    1b:98:0e:c2:b3:4a:e3:08:70:5a:49:0a:37:6d:d1:
                    ce:8c:28:a3:28:02:0a:b8:ff:13:a6:ce:20:d9:25:
                    6b:c5:0e:3b:7c:95:54:4b:6f:f0:8f:e9:94:d2:c1:
                    49:5f:f2:68:5f:6e:e7:f5:d6:ab:17:2b:13:a7:de:
                    90:d5:f9:03:1e:89:72:05:d7:04:cb:48:10:48:db:
                    14:f2:3b:38:c8:5d:64:6b:49:2e:32:b7:3d:32:10:
                    60:b4:58:9a:3f:aa:fa:81:8f:25:3c:e7:b9:97:7a:
                    3a:f0:92:d1:c3:c4:f8:8b:1a:d6:9f:8e:54:2f:7d:
                    61:80:f9:73:bb:c8:18:7b:95:6a:31:f7:ed:87:e3:
                    18:d7:98:31:43:4d:60:0f:d7:5e:93:7a:9c:3c:3e:
                    21:af:ad:96:43:b9:ac:be:19:32:ea:8b:4a:e6:4f:
                    a6:a7:1c:8a:9f:8d:b3:46:84:b5:6a:51:e6:13:06:
                    cb:11:d3:2f:69:fb:7a:03:f5:04:aa:52:9f:5d:db:
                    f9:12:e6:5d:83:a6:64:37:42:20:07:b2:96:ea:1e:
                    b6:5b:79:83:1f:b5:9b:88:83:10:e1:56:7b:96:ce:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:09:33:19:DC:8A:88:71:8B:D2:82:86:28:84:CC:BC:5E:FB:5C:C6
            X509v3 Authority Key Identifier:
                keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:8d:45:54:e0:7f:b5:c9:e6:6d:53:f6:07:e6:b2:37:f7:
         d7:40:a7:93:be:3d:72:20:f5:3d:3b:a3:a9:e7:d9:e4:b8:f6:
         25:44:5f:c1:a8:a2:d9:50:36:5c:89:a3:5a:19:2b:0c:a4:56:
         15:fe:e8:55:1d:6f:9e:40:0d:ad:87:2d:08:5d:c1:1d:2e:3f:
         f8:de:c6:9c:5e:d6:18:28:66:4f:67:72:d5:2e:94:f9:80:5d:
         8b:7c:15:b2:18:c4:49:4e:0d:75:41:77:7a:4a:f6:3d:4a:e5:
         2c:70:a6:46:db:e3:56:d9:49:a0:e1:7a:03:a7:3f:d2:28:44:
         00:7b:6a:2a:4f:af:8e:18:03:f4:c6:c5:3e:bf:3f:b2:4a:ec:
         2d:cc:00:4a:c5:4b:3d:dd:8f:08:07:aa:7c:96:55:4d:7b:7e:
         e3:62:18:71:95:ca:c2:57:c0:71:12:9b:7b:86:e1:6c:84:84:
         15:98:a8:4d:29:0d:44:b2:82:df:91:32:81:eb:b3:a5:30:cf:
         e4:31:06:82:99:3d:69:4d:39:5b:46:5b:1e:8a:f6:55:7f:24:
         40:9f:91:80:c5:8c:fc:7b:8b:5c:b8:2e:3d:1a:4c:cc:d7:39:
         12:49:41:9f:30:09:5d:e2:4b:9b:86:26:90:7e:3f:36:d9:ea:
         e3:e8:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:23 2026 by rpki-client