Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa
File:                     34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          6MaTCwYtKpnx6eg3KSD1AYOyXHo3i56ljG0wVGw46pk=
Subject key identifier:   A0:18:8B:C7:61:5C:22:AB:F0:E1:A4:1E:97:EE:88:E3:81:14:8D:84
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       1417837DA476C4B10845309F68B6730672C58D00
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 12 Feb 2026 11:02:02 +0000
ROA not before:           Thu 12 Feb 2026 10:57:02 +0000
ROA not after:            Thu 11 Feb 2027 11:02:02 +0000
asID:                     58816
IP address blocks:        43.252.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 00:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:17:83:7d:a4:76:c4:b1:08:45:30:9f:68:b6:73:06:72:c5:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Feb 12 10:57:02 2026 GMT
            Not After : Feb 11 11:02:02 2027 GMT
        Subject: CN=A0188BC7615C22ABF0E1A41E97EE88E381148D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:58:a3:c0:50:62:95:29:e7:fc:92:39:a7:
                    cf:a6:6e:0e:18:54:68:6b:0f:17:ce:c5:f0:57:39:
                    1d:59:31:d0:e7:39:b2:7a:a7:96:d8:40:c3:0f:2c:
                    c6:4d:e2:59:a7:aa:54:00:12:95:e4:42:57:f4:36:
                    f2:df:b8:55:5d:0c:3a:86:e0:96:13:6b:5a:e7:65:
                    d2:71:d2:e3:28:c0:8c:a4:52:b2:e3:9e:e6:01:a7:
                    35:73:f6:4c:ef:6f:05:ef:86:22:3b:dd:31:39:d5:
                    57:a2:ca:9d:74:27:6c:dc:c0:4a:2c:79:cd:17:8e:
                    f2:9e:fd:5c:4d:1b:9d:b6:e9:34:75:66:be:21:2c:
                    e2:4e:db:37:e8:c4:eb:e6:f0:7e:07:56:cb:74:29:
                    f8:3d:4e:29:85:0c:28:d3:89:21:92:8d:8f:26:40:
                    c4:80:36:f9:65:13:82:c8:47:75:ea:6c:cf:69:bd:
                    52:e1:66:ae:e4:c6:6b:c3:dd:ca:9a:53:0e:10:e3:
                    ef:2c:58:9d:fb:52:98:20:79:2f:b7:ca:15:a9:e2:
                    c3:eb:a1:cf:0b:b5:d5:64:9b:db:e3:51:11:e3:fd:
                    24:b4:66:81:7f:03:43:b5:4c:e9:43:23:35:f3:bf:
                    97:2c:f8:bd:a9:c0:6b:c5:4b:5a:b5:8c:08:f5:a3:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:8B:C7:61:5C:22:AB:F0:E1:A4:1E:97:EE:88:E3:81:14:8D:84
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:05:ec:79:85:49:fe:2f:27:e5:38:04:43:d0:04:8e:79:
         4c:4b:fe:3f:e5:40:ed:43:53:fc:f7:1f:91:f3:11:55:5c:b8:
         ab:ed:2c:d6:b2:68:e9:28:72:53:b2:15:a3:e7:e8:39:6a:09:
         6b:9c:7d:39:fa:c2:4f:a2:94:5c:cb:0e:0b:d9:f5:7e:d8:4f:
         23:10:a7:7d:e1:6c:b6:6a:45:12:2a:0a:39:a2:83:53:6d:69:
         ef:04:54:08:37:7e:9a:86:c3:db:d6:f9:e1:26:0c:2e:22:16:
         26:d5:c4:55:34:fd:26:9a:8b:10:5b:13:aa:0f:2c:b1:64:17:
         87:33:d3:9d:61:e3:75:55:ba:55:fb:8a:fe:2b:99:6f:04:ff:
         21:67:78:09:9f:7b:0f:30:8f:e8:36:6a:fa:eb:d7:7b:ff:55:
         d7:79:0a:f3:9c:e9:73:63:de:0a:87:c0:89:68:b7:4a:f8:2d:
         11:e3:9c:fb:5e:2d:b0:c7:28:0b:38:ec:53:06:09:3c:93:31:
         92:67:a2:7f:13:69:57:58:7e:0e:69:9b:82:7b:72:03:74:50:
         91:f0:03:d7:57:bc:e8:d9:2f:da:73:f6:7c:01:b7:39:b7:27:
         af:a5:04:53:41:9d:7b:2a:12:e0:59:ae:52:42:59:12:70:6c:
         24:eb:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:30 2026 by rpki-client