Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa
File:                     34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (raw, json)
Hash identifier:          8DzkDXJ0hjv41WhOioNYW4aCuQ61HA42qiPoGr3H0A0=
Subject key identifier:   A7:5F:6D:6A:B0:9F:79:F9:FB:96:4E:33:4B:18:A9:A2:34:02:0E:1F
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       4C3AE0F273F421B2F365C06E3148C6308196D388
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa
Signing time:             Wed 08 Apr 2026 13:25:42 +0000
ROA not before:           Wed 08 Apr 2026 13:20:42 +0000
ROA not after:            Wed 07 Apr 2027 13:25:42 +0000
asID:                     63827
IP address blocks:        43.243.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 09:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3a:e0:f2:73:f4:21:b2:f3:65:c0:6e:31:48:c6:30:81:96:d3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Apr  8 13:20:42 2026 GMT
            Not After : Apr  7 13:25:42 2027 GMT
        Subject: CN=A75F6D6AB09F79F9FB964E334B18A9A234020E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:6c:23:1e:b5:a8:a8:c3:6d:07:1c:9a:59:
                    c3:a1:dd:b8:48:ef:1f:ce:dd:ae:2f:4b:90:6f:33:
                    fa:e7:b4:03:1d:82:b5:40:0e:8c:e1:42:62:c6:05:
                    9a:4b:47:0c:8f:5b:07:95:a3:22:c9:b5:95:e5:e2:
                    8d:9e:f0:f1:fe:9c:a5:e1:e1:cb:57:a9:1a:d9:a4:
                    a7:ed:c1:96:2a:b0:95:d7:cc:41:14:5c:63:46:4c:
                    93:aa:d5:48:08:8f:dc:c1:8b:ed:d2:56:44:b9:8d:
                    b6:9c:06:9e:25:c2:a8:1b:2a:92:6e:f9:14:9b:4e:
                    89:59:3c:da:d4:ca:e9:dc:64:16:f3:94:2c:08:61:
                    87:35:92:95:01:2c:52:dc:cb:08:a4:dd:c7:41:ca:
                    17:c4:46:e2:35:16:e9:4d:4b:f8:f6:9e:cb:19:b3:
                    3f:13:47:7c:7d:cc:01:13:b5:1a:d6:6b:78:2a:e1:
                    f1:83:11:de:60:84:df:7f:23:43:e8:27:17:da:33:
                    c9:29:d7:94:3a:ab:2d:e0:96:43:e2:ed:1f:d0:48:
                    72:94:06:f6:d3:65:db:2f:f5:c6:16:44:f8:02:4b:
                    e5:1b:6c:a8:f7:33:f1:03:8a:55:45:23:81:f8:7d:
                    1b:4f:c0:28:24:e8:ab:1c:d6:21:85:67:cc:d7:b4:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:6D:6A:B0:9F:79:F9:FB:96:4E:33:4B:18:A9:A2:34:02:0E:1F
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32322d3232203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:45:79:a7:0c:10:5d:dc:e8:52:7d:21:1d:bf:af:6e:f6:
         0b:df:96:57:40:2a:f3:45:b4:42:b1:58:bf:4a:33:88:51:23:
         78:90:36:af:40:04:31:cf:75:47:78:a7:f5:a2:79:8e:c3:ff:
         47:60:a9:29:06:a3:a3:84:0c:1e:6b:6d:82:b8:70:34:85:27:
         77:21:6c:92:04:4e:14:4d:73:25:7d:56:a5:d4:e8:66:37:64:
         b0:c5:72:56:17:7d:96:6d:80:2b:7e:ac:d4:44:ca:1a:6a:d1:
         7e:2a:c2:5e:e5:f6:02:2c:42:14:af:8e:5c:34:1a:23:cb:83:
         45:7e:be:3d:42:79:f5:51:85:20:ea:33:be:7f:23:d6:ad:b5:
         88:f7:d5:ca:2d:3b:b4:fd:f4:94:88:ea:ee:9a:cc:36:a0:49:
         e9:31:16:32:2f:5a:16:8f:7f:d7:74:25:56:08:d4:f7:8e:21:
         71:eb:1e:1c:c8:c9:ab:9f:84:67:db:55:9a:d0:34:1c:1e:3b:
         62:e1:d5:14:d9:0b:01:78:3d:b6:4c:0d:fa:4a:91:2b:7f:60:
         d1:d9:70:86:28:cd:d2:b2:93:a0:7a:a6:f6:38:f7:98:f3:87:
         85:92:05:41:bf:77:25:18:55:4e:23:c8:d6:c8:6b:d4:fc:c1:
         fc:c4:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:03 2026 by rpki-client