Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
File:                     34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          wrPfrYH/RCODEwRRXXFscLBMctsYKddhPZkumcZ0Blw=
Subject key identifier:   8C:72:37:CC:05:B9:F9:8A:E9:47:90:DC:E3:DF:5D:E6:34:DB:4D:50
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       42339D3B7D94594653764825DF48C669EEEC10C2
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
Signing time:             Fri 06 Feb 2026 08:00:01 +0000
ROA not before:           Fri 06 Feb 2026 07:55:01 +0000
ROA not after:            Fri 05 Feb 2027 08:00:01 +0000
asID:                     133823
IP address blocks:        45.116.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 02:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:33:9d:3b:7d:94:59:46:53:76:48:25:df:48:c6:69:ee:ec:10:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Feb  6 07:55:01 2026 GMT
            Not After : Feb  5 08:00:01 2027 GMT
        Subject: CN=8C7237CC05B9F98AE94790DCE3DF5DE634DB4D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:f0:c1:9d:a0:70:cb:7a:71:92:c5:a4:c9:
                    f4:97:7c:7c:d2:80:f7:18:5c:49:1c:69:b5:3f:6d:
                    b5:24:cd:ff:27:e0:80:23:cb:59:11:88:f2:57:fb:
                    29:45:ee:e5:f2:90:db:90:4c:bd:1e:41:20:6a:60:
                    1b:2a:ea:4f:66:33:c7:e8:59:38:52:1e:26:ae:b7:
                    91:73:c6:a9:31:5a:6a:ab:32:59:58:a2:18:4c:fc:
                    06:52:6a:87:39:30:f0:9c:9b:91:bd:e6:54:be:6e:
                    24:a8:35:da:ae:80:67:08:cb:bb:54:6c:9c:52:15:
                    c3:50:fd:4d:c9:a9:42:63:ff:18:ce:e7:24:77:dc:
                    b3:de:03:07:09:19:c2:ae:a3:76:16:c0:01:aa:1e:
                    e9:9d:d3:13:29:cc:63:18:c7:1a:ea:b1:d7:3c:78:
                    4e:e3:03:49:36:19:3d:d0:33:37:36:81:9a:af:99:
                    a0:b1:a2:2b:c2:ea:1a:68:e1:0a:fe:a9:18:c4:9d:
                    8b:bf:15:1c:f2:2e:48:3f:d6:1a:05:fe:13:9a:75:
                    16:5b:15:be:5c:fc:99:a8:50:1a:f3:8d:56:2a:00:
                    a8:13:0f:58:15:84:28:c8:40:d3:ee:ae:d5:7f:dd:
                    b1:b1:a1:b0:dd:54:e3:ba:ed:e3:8e:de:51:c0:75:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:72:37:CC:05:B9:F9:8A:E9:47:90:DC:E3:DF:5D:E6:34:DB:4D:50
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:2b:b6:da:31:f4:c5:e5:5c:64:f6:61:eb:c2:1c:92:2b:6b:
         25:2e:00:82:07:9d:8f:ed:16:9e:59:bd:8f:c9:eb:9a:84:0d:
         49:c2:64:ac:23:18:08:03:6c:67:cc:0a:92:1e:61:31:54:f5:
         6b:fe:bf:89:40:9b:ac:6f:6a:84:42:58:5e:39:37:fc:59:95:
         1a:8e:69:36:90:b7:b5:35:e4:5d:6b:ca:e4:57:7e:8d:af:fb:
         c9:f4:b3:f0:91:87:e5:91:41:50:3d:7e:eb:9b:dc:02:89:d3:
         97:46:f0:5d:1a:8e:0a:1b:4f:78:39:78:f4:85:5c:c2:38:f5:
         73:f2:04:bd:60:c9:4b:99:f7:d9:a3:0b:7d:a9:3e:92:4b:4a:
         4d:68:3d:fa:4f:e9:0a:5f:46:34:78:0d:53:0f:11:67:ac:3d:
         e3:00:64:2e:8a:c1:6d:49:7a:0c:d3:4e:98:42:10:51:a2:0c:
         6b:bd:55:e7:ab:f5:1d:6b:a6:bd:df:dd:66:21:56:a5:12:b0:
         42:43:21:de:50:8e:67:fc:f2:f2:a3:1b:c6:41:67:de:be:57:
         1d:4c:e9:d1:6c:cf:59:36:59:cc:61:04:a1:f5:f2:6e:ee:71:
         65:f9:93:0a:0c:c9:06:1b:fb:24:53:1f:b3:e7:b9:42:b8:5d:
         48:09:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:10 2026 by rpki-client