Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa
File:                     AS142167.roa (raw, json)
Hash identifier:          6STG56RXYNKr/O24RjrJlSbLSu9yi+WMbWe1EgqLxyY=
Subject key identifier:   A5:6A:5A:D4:DE:DD:D6:91:26:BA:B1:56:94:CB:41:02:05:39:07:98
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       7C26BFE042FB6131077D692E3D51E4ED1C886C22
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa
Signing time:             Wed 18 Feb 2026 15:37:11 +0000
ROA not before:           Wed 18 Feb 2026 15:32:11 +0000
ROA not after:            Wed 17 Feb 2027 15:37:11 +0000
asID:                     142167
IP address blocks:        144.79.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:26:bf:e0:42:fb:61:31:07:7d:69:2e:3d:51:e4:ed:1c:88:6c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb 18 15:32:11 2026 GMT
            Not After : Feb 17 15:37:11 2027 GMT
        Subject: CN=A56A5AD4DEDDD69126BAB15694CB410205390798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:96:0c:7f:01:df:ae:94:ac:aa:d5:ba:c1:
                    a2:21:bf:e1:45:5b:e4:51:05:4d:52:e3:0b:90:6b:
                    3b:d8:43:50:61:6b:bb:b8:c0:f5:c8:ac:90:f3:c2:
                    d4:3c:75:23:58:8d:7c:4b:23:cd:72:3e:c3:26:c5:
                    bc:e1:a3:b4:ec:95:9e:19:35:7f:bf:c9:54:b4:d8:
                    53:b1:46:bd:08:55:2f:3d:a7:16:6c:8c:99:85:b4:
                    3c:e8:58:b4:11:05:c4:e9:b8:d8:3b:d0:e3:ef:87:
                    d2:22:66:8d:61:41:64:22:f6:63:2b:12:d0:69:51:
                    0e:2d:1c:d9:ac:66:33:06:b9:a2:03:9b:01:ed:27:
                    56:ae:7e:ca:55:db:e2:0c:8b:aa:96:96:63:08:d7:
                    ca:dd:49:f2:b2:81:6e:03:7c:0e:64:eb:b9:64:55:
                    94:fc:58:0a:cb:56:02:96:92:77:70:ee:ec:f2:92:
                    af:59:3d:21:1e:ff:ac:c1:df:43:f6:ea:82:15:05:
                    e9:21:e5:8f:de:63:ed:b0:f7:38:99:85:16:7e:a4:
                    b9:e2:0c:f8:76:6e:38:7b:d9:58:c2:ce:9c:38:a0:
                    c8:32:86:da:1f:20:8e:2b:f0:c2:66:e7:fa:83:29:
                    03:bb:c8:e6:f4:94:6e:65:eb:63:39:60:96:5c:8e:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:5A:D4:DE:DD:D6:91:26:BA:B1:56:94:CB:41:02:05:39:07:98
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:36:45:1b:e5:dc:a6:af:6d:ed:a4:00:1f:32:1d:9d:d1:
         b4:e6:5b:21:34:d7:da:35:4b:28:58:c6:13:fb:d5:7e:80:5f:
         0a:1e:5c:04:45:ed:e4:f4:29:8a:52:1e:de:ad:d4:92:a0:da:
         f5:75:f1:94:83:97:0a:bf:8f:8e:ae:f4:15:18:63:89:7e:a8:
         40:a4:a3:db:88:b4:0d:cc:b8:9e:a4:18:e0:fd:cd:29:5a:3e:
         9b:05:79:e3:b4:b3:79:0e:b5:5d:92:76:4b:ce:c4:b0:0a:a9:
         8f:37:de:a6:ca:6f:8e:38:37:f6:a2:92:3b:70:8a:7b:41:07:
         db:5c:ef:13:d6:88:78:4a:46:10:d4:6d:4c:fb:88:17:ca:06:
         c2:c3:9e:52:b4:40:7f:68:6d:f3:99:a2:c3:a6:a9:7b:4c:d7:
         e9:a6:e7:be:35:9c:b6:19:1e:b8:a0:1f:7c:f2:12:89:97:4c:
         98:2d:29:e2:c2:b9:fe:a2:aa:ad:56:1c:44:07:f3:2f:1b:79:
         16:eb:f3:b2:5e:ef:31:84:26:18:68:5c:db:b3:65:ce:e0:45:
         91:f9:5d:bf:35:38:09:9d:de:ce:52:0a:fa:65:02:10:e7:45:
         15:57:c2:39:21:96:c3:1d:89:c8:3f:06:73:99:48:3e:c8:2d:
         b7:35:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:49 2026 by rpki-client