Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa
File:                     3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (raw, json)
Hash identifier:          IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=
Subject key identifier:   BD:AD:84:45:29:2F:BE:95:20:D1:8F:E1:7C:74:72:B5:89:33:B9:3B
Certificate issuer:       /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial:       3DD99CAB422A4E5838DB82D41F6F4407AE3BC82D
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa
Signing time:             Thu 05 Feb 2026 07:47:30 +0000
ROA not before:           Thu 05 Feb 2026 07:42:30 +0000
ROA not after:            Thu 04 Feb 2027 07:47:30 +0000
asID:                     154477
IP address blocks:        151.158.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 18:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d9:9c:ab:42:2a:4e:58:38:db:82:d4:1f:6f:44:07:ae:3b:c8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
        Validity
            Not Before: Feb  5 07:42:30 2026 GMT
            Not After : Feb  4 07:47:30 2027 GMT
        Subject: CN=BDAD8445292FBE9520D18FE17C7472B58933B93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:3f:92:65:31:f0:d6:3c:9f:8a:bf:7d:ee:
                    ca:d0:77:06:2c:87:4f:e3:80:02:44:27:c0:8a:c0:
                    2c:3a:09:62:bb:e0:5a:64:21:aa:9e:75:b9:9a:30:
                    30:90:1d:98:b8:b3:26:51:5e:b5:fc:71:0d:90:88:
                    be:09:2c:e0:67:c4:32:c6:43:22:cb:b1:6d:5c:e0:
                    ce:da:a3:a2:07:25:93:67:aa:58:25:f5:64:5b:31:
                    97:ef:fc:c7:36:fd:0f:d2:42:e2:bd:06:13:76:ac:
                    ae:72:15:19:d6:90:c4:e6:7d:f3:ff:54:f2:1b:c8:
                    42:1d:12:60:04:8e:9e:9b:7d:df:a9:bf:50:76:43:
                    9e:eb:e5:75:f2:c9:70:fd:2c:70:38:26:47:c4:7f:
                    e8:57:ef:27:f9:13:ac:9f:52:6a:61:cc:87:c2:8e:
                    43:31:1c:ec:68:cd:89:2a:7c:94:39:53:e7:31:c2:
                    78:40:62:59:ea:07:10:73:4e:a6:49:e5:f6:e5:98:
                    10:af:00:ee:e0:cb:0e:3c:fd:13:55:d0:39:71:c8:
                    bd:b9:4d:68:e0:54:c4:94:c2:d3:9b:67:3e:60:75:
                    a4:12:b3:38:6d:43:d4:fb:6b:f6:4f:80:b2:e5:da:
                    f3:5f:31:04:6b:9b:73:5e:f6:e7:4f:ee:ae:f3:a7:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:84:45:29:2F:BE:95:20:D1:8F:E1:7C:74:72:B5:89:33:B9:3B
            X509v3 Authority Key Identifier:
                keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:9f:3e:ed:65:d1:e4:8e:97:5a:13:fd:fe:77:19:7c:a1:
         ef:93:54:7c:69:52:fb:14:81:46:09:57:f3:cc:7d:54:c2:2c:
         be:d4:29:e1:64:6e:1c:a2:f3:61:d8:5e:24:e5:90:28:32:e4:
         6c:39:ae:51:c3:df:f3:66:3f:e5:d1:2f:98:b3:9b:2e:45:f7:
         7b:77:67:20:29:1a:c2:4e:77:c4:52:29:75:4a:8c:84:d2:07:
         bd:f0:66:bd:6c:af:3a:bc:74:ac:97:9e:2b:ee:82:aa:8a:9b:
         d5:2f:f2:db:a1:96:3e:15:27:e8:5a:0f:d8:51:8f:0c:9e:8a:
         18:d9:14:ae:33:1e:06:3b:8a:f0:dd:30:31:64:bf:d7:be:5b:
         08:ea:9e:0b:80:ad:ba:6d:10:d7:de:e1:45:66:14:34:db:9d:
         c2:a3:ec:b2:fe:57:23:9a:13:99:2f:84:f1:cc:de:a6:ab:72:
         a8:e8:c1:95:a2:ad:7c:c2:87:3c:73:c8:80:48:a1:ed:e8:97:
         6f:c6:ac:8d:eb:71:37:a5:94:74:f9:c9:eb:59:8a:7d:16:87:
         77:70:03:c7:d7:c2:be:4d:f8:87:e1:bd:b5:2e:a5:20:70:e9:
         40:84:63:e0:aa:80:6f:c1:7a:ff:80:72:e9:01:2f:74:e5:23:
         8a:22:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:19 2026 by rpki-client