Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa
File:                     AS142231.roa (raw, json)
Hash identifier:          nNYUO3F+MbLZiXnZByaukB29DixH+7DpWUTGTlI0/pg=
Subject key identifier:   33:1F:07:9F:2B:1E:F3:27:C8:7A:A8:21:83:B2:5C:03:43:5A:4F:FF
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       79051F5671512DBCC931D2A4932EA283E910BF89
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa
Signing time:             Fri 06 Feb 2026 08:07:42 +0000
ROA not before:           Fri 06 Feb 2026 08:02:42 +0000
ROA not after:            Fri 05 Feb 2027 08:07:42 +0000
asID:                     142231
IP address blocks:        144.79.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 02:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:1f:56:71:51:2d:bc:c9:31:d2:a4:93:2e:a2:83:e9:10:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Feb  6 08:02:42 2026 GMT
            Not After : Feb  5 08:07:42 2027 GMT
        Subject: CN=331F079F2B1EF327C87AA82183B25C03435A4FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:4e:c4:8f:9c:d8:c1:46:97:7a:1a:ed:ed:
                    99:79:b0:6d:c4:c0:0e:4a:49:a8:f2:dc:6d:dd:fb:
                    57:97:15:d4:df:10:49:07:61:bb:9e:cc:f8:86:18:
                    9f:dc:9e:a0:d5:33:87:c4:6d:2a:27:3e:f2:4e:fa:
                    29:df:1f:c3:fe:0c:e5:2e:7b:84:70:40:fb:5a:0f:
                    6a:20:22:99:66:f6:b4:0b:a7:0a:e5:dc:3b:67:db:
                    6e:92:07:00:6a:f6:8e:94:05:ed:fc:32:5d:79:b7:
                    31:2f:09:59:03:80:26:ed:5f:79:16:00:4e:eb:52:
                    6a:19:6d:7a:f4:e6:7d:94:e9:63:75:c4:ff:a3:2b:
                    ed:ee:5b:5e:ec:e9:f5:cd:e5:d9:2a:b3:1e:02:77:
                    42:56:c3:5f:8d:c8:2b:65:5e:13:dc:99:70:1d:01:
                    ab:17:17:2e:1f:1e:32:7f:21:55:c9:2b:3b:55:63:
                    1c:84:32:94:8c:bd:66:5c:a1:ea:ea:89:e1:50:15:
                    98:9d:d3:c1:12:aa:dc:96:59:e4:73:2a:df:d3:da:
                    09:e8:1e:f5:04:4e:61:3d:c8:00:2a:6a:74:2e:7a:
                    19:76:32:8d:8d:af:5e:f9:30:c7:f5:8b:78:3c:0f:
                    3d:46:76:e9:40:d6:84:e0:ae:ed:d6:31:18:8a:df:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:07:9F:2B:1E:F3:27:C8:7A:A8:21:83:B2:5C:03:43:5A:4F:FF
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:90:68:43:d1:08:18:e9:1f:27:7f:9d:2d:b2:4f:a2:c3:4b:
         44:de:cf:1b:47:8c:4b:93:cd:df:5d:66:5e:01:bd:e7:08:27:
         8d:86:15:c4:10:8b:fb:a1:54:b8:70:a2:41:98:4f:91:33:e2:
         ba:b5:21:33:33:37:5e:8c:76:f3:b3:0e:6a:29:78:41:a8:3b:
         13:a1:f0:c3:95:36:b1:5b:0d:34:6e:3e:44:ae:d5:2e:89:2e:
         9a:c6:77:cb:26:cc:ea:7c:bd:09:94:a0:2b:c5:36:67:43:0d:
         24:b1:be:9b:94:68:e3:ad:24:c9:eb:74:2a:70:0d:60:01:e1:
         2f:10:ed:b3:dc:b4:cb:15:ef:b0:bc:5e:1b:36:5f:c4:47:41:
         87:4a:ab:49:ff:8d:70:5b:96:50:ee:db:6e:f0:d9:83:85:a6:
         4d:7a:19:00:66:c9:c4:39:a4:42:e1:59:3c:6d:1d:17:e3:25:
         dd:4c:1f:42:8f:81:c9:7d:90:44:ae:5b:70:40:b5:9d:cd:01:
         c8:0e:49:ed:d6:47:e1:bd:19:cc:13:17:09:bd:e7:f5:2f:7c:
         ea:f8:5d:49:e1:59:c8:a6:82:a6:64:0c:c9:c8:8c:0e:34:72:
         52:78:b6:a4:a7:73:29:2f:64:e8:d2:54:1f:e5:6f:cc:36:9e:
         56:15:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:51 2026 by rpki-client