Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32302e302f32322d3234203d3e203234353233.roa
File:                     34332e3234372e32302e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier:          888dPGU9cyqiOHv+DUDaPyXxOutzs00FvG2o8cpIqPQ=
Subject key identifier:   1A:C0:0B:F3:16:51:59:15:1F:44:DE:7E:62:13:2E:8B:D5:1F:AA:DB
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       5751D41F5FD818058A5D555C585E92D0C50BF467
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32302e302f32322d3234203d3e203234353233.roa
Signing time:             Sat 04 Apr 2026 09:02:01 +0000
ROA not before:           Sat 04 Apr 2026 08:57:01 +0000
ROA not after:            Sat 03 Apr 2027 09:02:01 +0000
asID:                     24523
IP address blocks:        43.247.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 11:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:51:d4:1f:5f:d8:18:05:8a:5d:55:5c:58:5e:92:d0:c5:0b:f4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Apr  4 08:57:01 2026 GMT
            Not After : Apr  3 09:02:01 2027 GMT
        Subject: CN=1AC00BF3165159151F44DE7E62132E8BD51FAADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:a6:d5:46:87:61:e4:89:71:39:ed:71:d2:
                    ae:25:46:3c:75:3b:26:f6:3c:90:a0:96:5d:93:aa:
                    87:b8:29:2c:75:ea:d0:32:b9:1b:90:70:d0:92:bd:
                    cf:3b:73:2a:2f:66:d5:8e:6d:d7:d3:58:eb:7e:19:
                    66:76:13:8f:2f:d5:20:e4:3a:db:77:b0:ed:7c:69:
                    9b:13:57:bf:d3:72:95:86:47:18:e4:cd:2d:cd:30:
                    b9:48:cc:49:f3:9c:8b:5a:d2:42:0a:5d:43:67:77:
                    93:bb:4b:ef:4f:42:26:3f:ab:6c:70:98:99:d0:68:
                    55:99:81:3c:b7:40:9b:2b:0b:6c:cc:18:d7:b7:f3:
                    b1:02:d5:11:25:aa:bb:e7:82:8d:19:d2:5f:fa:90:
                    53:50:57:10:57:bb:c9:14:c8:0b:b7:64:cd:55:a4:
                    f8:4d:a4:5b:82:52:ed:11:25:c5:b3:5a:12:97:34:
                    37:30:3a:92:1b:34:48:09:c0:cc:b6:10:7d:37:4b:
                    f8:18:8c:b5:9a:3d:34:79:0a:a9:b5:cb:93:9c:14:
                    03:d8:15:55:5b:79:47:e6:09:72:24:64:ad:ca:bb:
                    2a:81:63:c9:80:c8:c4:72:d0:43:ae:af:58:77:b8:
                    e8:a1:2d:d6:57:69:29:82:51:43:74:eb:5b:c1:71:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C0:0B:F3:16:51:59:15:1F:44:DE:7E:62:13:2E:8B:D5:1F:AA:DB
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/34332e3234372e32302e302f32322d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:05:cf:62:df:76:50:2b:b4:d7:1f:0c:9f:1f:cf:2e:17:
         97:a1:13:9a:88:24:36:37:14:a2:ab:6d:7e:16:44:02:83:0a:
         55:24:ff:6f:97:0d:29:6b:40:7a:fd:97:21:dd:24:56:51:8f:
         8d:47:ab:9e:51:ae:3f:15:47:18:15:18:07:e8:30:fe:23:66:
         aa:da:21:b4:0f:fe:33:87:ed:b6:93:39:09:cf:06:47:ed:fb:
         f2:ad:77:c9:29:55:9f:94:aa:87:ed:ef:f0:eb:a8:65:c8:0d:
         4d:23:15:44:63:84:a3:06:16:57:a8:39:af:fe:cf:01:db:b4:
         82:59:da:b5:a8:42:d7:04:b5:51:66:5c:5c:d9:82:fb:f0:53:
         8c:8a:e9:11:7f:62:0b:f3:01:77:89:2e:1b:b3:35:9c:9b:dd:
         a9:b9:3c:1c:47:c0:9e:e0:31:23:19:f9:7b:0b:d4:fb:f0:58:
         f5:7e:54:40:6f:32:3d:23:95:5c:d2:51:3b:8e:ea:35:1a:52:
         2f:7b:27:06:09:da:88:75:7b:b1:c2:42:7a:c2:94:5e:81:4f:
         fc:3b:92:5a:e8:00:4a:f0:d3:f1:e1:45:97:9e:1f:bd:6f:de:
         e9:f2:36:6e:68:3e:ea:40:41:4d:fe:e7:b2:16:53:7d:48:7d:
         8e:05:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:08:39 2026 by rpki-client