Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa
File:                     3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (raw, json)
Hash identifier:          eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=
Subject key identifier:   D4:1A:51:95:86:39:B7:01:B4:D2:61:1D:95:B3:51:48:4D:F5:6F:E3
Certificate issuer:       /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial:       37302D40461087669DD298981EB13C1BE380AB07
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa
Signing time:             Wed 04 Feb 2026 02:42:04 +0000
ROA not before:           Wed 04 Feb 2026 02:37:04 +0000
ROA not after:            Wed 03 Feb 2027 02:42:04 +0000
asID:                     142258
IP address blocks:        151.158.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:30:2d:40:46:10:87:66:9d:d2:98:98:1e:b1:3c:1b:e3:80:ab:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
        Validity
            Not Before: Feb  4 02:37:04 2026 GMT
            Not After : Feb  3 02:42:04 2027 GMT
        Subject: CN=D41A51958639B701B4D2611D95B351484DF56FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:6b:75:ca:8e:06:c2:00:d9:60:93:01:b9:
                    4d:b7:b1:6c:95:dd:65:a2:2d:ed:a3:ad:54:dd:19:
                    b9:f9:1e:de:48:a6:b2:68:08:9e:5b:c8:4e:fb:d3:
                    ed:3b:7c:44:8a:3e:d8:76:39:63:ac:af:57:7f:04:
                    5d:0d:3f:f7:7e:7d:ce:35:0a:7e:2b:45:df:1a:e5:
                    5d:55:87:f3:8e:1b:9e:53:50:1a:56:c6:1b:43:23:
                    7a:15:15:e3:2d:3e:75:32:df:74:76:35:06:cb:d7:
                    73:a0:54:ad:b7:46:57:6f:35:1d:6a:66:b0:8a:60:
                    bf:0a:ce:6d:a1:b7:10:ef:3e:26:be:b3:63:76:e6:
                    ed:df:56:a5:b1:b0:14:39:d4:87:ae:c9:01:4e:a3:
                    d7:d8:44:7b:26:dc:8c:ca:4c:d6:f5:21:af:ab:00:
                    7b:c3:02:d7:a8:d0:22:21:0b:8f:9a:30:6c:8b:76:
                    91:19:15:be:bb:58:18:d7:58:32:f8:f3:5b:5b:3c:
                    81:18:64:90:86:aa:d8:5f:c4:93:7f:8d:02:f8:02:
                    cc:53:62:65:03:ed:8e:fa:ac:f6:26:9b:9d:15:24:
                    ff:af:31:03:3e:34:bb:88:c7:93:03:c6:d5:a1:18:
                    79:41:2c:04:56:5f:ba:ad:22:f3:bf:99:77:67:e2:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:51:95:86:39:B7:01:B4:D2:61:1D:95:B3:51:48:4D:F5:6F:E3
            X509v3 Authority Key Identifier:
                keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:1f:61:25:c1:06:43:73:6c:2b:87:94:a4:7e:d8:2c:5c:
         18:39:17:ae:f0:2a:06:ee:9b:45:ee:aa:3e:1b:b9:ef:d1:f1:
         16:2c:03:3c:52:72:f0:30:42:6b:39:46:6d:00:72:28:7c:14:
         fb:ad:f0:97:66:70:5c:4f:38:6f:a6:91:3f:6b:69:46:0f:26:
         ae:fa:97:d9:8a:60:f5:ff:e2:83:00:aa:3b:1e:a0:0b:30:dd:
         0f:ab:40:b1:95:f2:49:13:6a:ff:fd:20:e4:55:77:23:24:b1:
         07:79:f1:d3:55:b3:07:75:17:ef:b1:b1:cd:d7:ee:22:e9:f3:
         cd:a7:1a:dc:cf:17:22:d3:ff:df:0b:36:09:a6:7f:a8:bc:8a:
         a2:21:38:6b:a1:e3:0a:e5:eb:83:57:55:1e:5f:f0:25:4b:aa:
         b4:c6:33:3a:40:bc:41:37:25:44:c1:dd:12:dd:51:05:d9:23:
         e1:54:98:19:a6:da:6e:cb:60:a4:06:77:3c:3a:2f:61:92:27:
         d8:21:1c:b3:4d:08:a3:8d:7c:c5:f2:a6:fb:ad:32:c5:03:9a:
         00:01:cd:56:53:1e:33:40:9b:d5:f5:25:46:91:6d:14:88:f0:
         96:09:16:61:11:0c:9e:50:3e:99:77:9c:4c:15:d3:c7:05:fc:
         52:ad:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:47 2026 by rpki-client