Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138362e302f32332d3233203d3e203633383237.roa
File:                     34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier:          yqQnWTr36Q+9IOq0gEzqGc62R4aFD9e9lomWkv5xJj4=
Subject key identifier:   2A:B4:FD:BA:48:3F:6B:F7:FE:A3:FE:11:C4:61:DC:A3:C8:43:7D:9D
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       5EC8DC5BEE2974EB5E422D1606D1B403F3323D2F
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138362e302f32332d3233203d3e203633383237.roa
Signing time:             Wed 08 Apr 2026 13:26:12 +0000
ROA not before:           Wed 08 Apr 2026 13:21:12 +0000
ROA not after:            Wed 07 Apr 2027 13:26:12 +0000
asID:                     63827
IP address blocks:        43.243.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 09:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:dc:5b:ee:29:74:eb:5e:42:2d:16:06:d1:b4:03:f3:32:3d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Apr  8 13:21:12 2026 GMT
            Not After : Apr  7 13:26:12 2027 GMT
        Subject: CN=2AB4FDBA483F6BF7FEA3FE11C461DCA3C8437D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:3d:f4:d1:0c:44:1c:be:80:66:3b:7b:27:
                    d4:c6:8b:54:bc:11:46:44:00:21:f4:32:74:c9:cd:
                    92:e0:51:37:ac:db:5a:1e:db:b2:de:25:54:2f:7c:
                    80:41:88:4a:d3:e9:15:57:23:e6:24:22:56:18:17:
                    52:7b:17:8c:ab:17:59:59:d1:49:38:1a:13:09:58:
                    88:14:7f:78:e8:d2:42:0c:00:5d:10:ca:6f:1d:ef:
                    94:64:86:86:15:92:1a:fc:67:61:e1:3b:10:be:c4:
                    eb:f9:60:44:9c:fa:10:c5:aa:2d:6d:73:62:3a:78:
                    89:1d:44:7f:6d:40:dc:f7:b5:83:c6:81:cf:51:1b:
                    5b:52:3a:3d:9e:35:96:e0:a1:8d:10:a0:cc:82:02:
                    95:26:c3:08:45:19:7c:4a:8c:fa:09:ad:f9:ce:75:
                    fc:68:d1:c2:44:81:6c:5d:8e:0e:1b:cb:3a:6a:20:
                    e2:bb:02:31:56:de:7e:ce:91:d0:6c:41:54:e5:82:
                    7c:51:06:e2:f1:26:fd:f6:4c:e6:36:ce:8f:3c:d7:
                    06:71:69:48:0c:e8:0a:66:ea:cd:6a:b3:b4:ca:d5:
                    53:e5:d9:6f:7b:2e:81:62:83:b7:b6:b3:4c:25:18:
                    a4:b3:0b:62:d6:60:c4:9e:10:13:3a:5b:b4:86:51:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:FD:BA:48:3F:6B:F7:FE:A3:FE:11:C4:61:DC:A3:C8:43:7D:9D
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138362e302f32332d3233203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:64:4a:eb:d2:65:7e:69:be:ec:40:0a:e4:1a:ee:1e:5d:
         d3:85:d8:3b:5c:96:7b:26:45:70:9d:74:be:e8:12:67:43:ac:
         a7:38:71:f3:70:1d:00:3e:b8:a7:a7:7b:84:d1:6a:4c:46:bb:
         fb:36:b9:7d:a8:58:b4:e2:1f:b7:14:cd:a3:be:4c:94:cc:8c:
         61:42:36:a8:5a:eb:e7:d4:64:06:1e:ec:f6:cd:7f:9a:b8:61:
         cc:1e:55:1e:8a:a8:15:e5:d6:32:5e:89:60:fe:a9:8e:f7:5d:
         c6:dc:9b:a9:73:d1:8d:3a:6e:9b:7f:16:93:a4:56:fe:da:93:
         ce:bc:1a:56:7f:c3:25:a2:4e:14:74:e7:3f:e1:10:2c:39:19:
         22:f8:90:54:a6:0c:55:29:0b:85:51:c7:54:26:8e:57:79:79:
         bd:79:e0:bb:ce:35:41:05:59:fe:3f:e1:2f:dd:9d:0d:79:03:
         42:2c:b1:ae:6a:a7:7f:13:9a:9a:ac:5a:06:9e:2c:99:ef:5e:
         48:a0:80:46:59:37:37:ce:2b:59:33:d1:12:a1:5c:1d:b1:6b:
         fd:de:ef:87:5a:22:ca:97:56:b7:e4:03:4c:9a:44:0b:17:31:
         88:ab:6f:ef:44:62:38:d5:46:4f:f9:38:3f:9c:f1:89:fa:02:
         88:30:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:47 2026 by rpki-client