Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142184.roa
File:                     AS142184.roa (raw, json)
Hash identifier:          Yt/fYPU8vcmcRSqHr76xqQKS5qrmqPd6HwdT/6rcub8=
Subject key identifier:   1D:E6:1F:4E:37:6B:B4:DA:22:8E:CB:84:B7:89:2F:BF:1C:0F:1C:4A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67FDDCFAD1E0796BBDC4C1BCAA1516C7A2695878
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142184.roa
Signing time:             Thu 05 Feb 2026 07:38:13 +0000
ROA not before:           Thu 05 Feb 2026 07:33:13 +0000
ROA not after:            Thu 04 Feb 2027 07:38:13 +0000
asID:                     142184
IP address blocks:        2001:df6:8740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Mar 2026 06:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fd:dc:fa:d1:e0:79:6b:bd:c4:c1:bc:aa:15:16:c7:a2:69:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  5 07:33:13 2026 GMT
            Not After : Feb  4 07:38:13 2027 GMT
        Subject: CN=1DE61F4E376BB4DA228ECB84B7892FBF1C0F1C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:c7:7d:6f:2b:dc:1f:81:a7:a6:71:99:35:
                    b2:c4:49:27:8b:15:f9:f8:6b:12:ca:18:a4:44:45:
                    78:ef:e0:7f:df:20:0b:24:1b:f3:06:ea:49:6b:d6:
                    ab:b5:61:a6:4d:2c:8c:de:d8:1b:4e:c9:0d:ed:ed:
                    a5:ec:fd:16:38:ee:d8:79:f4:d1:5d:08:c6:9c:23:
                    cd:a9:c3:b9:68:5c:be:37:f6:21:de:00:00:14:a9:
                    f9:78:ca:26:89:22:fd:75:31:10:a4:56:53:66:09:
                    31:3d:dd:87:af:5f:35:a0:69:4f:d6:2c:71:f4:37:
                    a4:a7:26:3d:e7:8e:29:93:04:d9:b5:ae:ba:58:c9:
                    8c:59:10:cb:4f:98:6f:bc:3a:66:bf:04:3b:d0:23:
                    4f:f5:d9:f3:41:9a:ab:af:ac:9b:e9:d0:8a:e1:3b:
                    39:f9:c5:7c:3e:4f:87:fc:9f:61:e7:99:2d:5c:63:
                    78:08:bf:56:0f:78:fc:c8:43:b4:b3:02:e5:0c:b5:
                    a9:fe:fb:40:6d:f4:d9:46:2d:70:dc:a5:6a:90:60:
                    3e:67:4c:42:f4:38:6d:31:ba:e3:4b:58:d4:0f:67:
                    98:40:2a:4e:db:a6:19:6c:4c:04:01:1d:f7:b9:63:
                    06:f4:0a:67:1a:3c:1a:52:75:3f:1e:74:ce:3c:23:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E6:1F:4E:37:6B:B4:DA:22:8E:CB:84:B7:89:2F:BF:1C:0F:1C:4A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8740::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:18:56:61:1b:3b:ec:cb:fb:ba:28:2f:28:2b:e4:d5:b4:b4:
         1f:ac:62:f2:d8:ac:92:e1:80:5d:28:1c:79:b7:aa:1a:11:91:
         7f:0c:71:4d:dc:25:62:7e:d1:67:60:16:b7:47:47:8f:41:02:
         28:7f:f3:e9:2f:44:d5:19:43:c3:fe:ba:24:52:49:17:04:b0:
         45:13:dc:f5:c3:49:96:3d:03:4b:3c:d6:4d:3a:1e:08:01:75:
         e4:9a:53:eb:76:32:05:ba:06:36:c4:bf:06:e3:ff:d7:e5:48:
         9e:ba:2b:bd:8c:77:fd:f5:c6:66:3c:44:3e:d0:42:2e:c0:e8:
         a3:a4:c7:2a:19:7b:8f:25:41:83:7f:b1:9a:cd:56:2f:c0:15:
         e3:0f:bc:c1:45:ee:18:7b:b3:e3:0d:f2:3b:b6:10:18:86:08:
         96:6d:5c:70:81:bf:c0:ff:73:02:32:71:7c:01:36:13:e0:c9:
         01:e1:69:20:46:c3:e5:0e:fd:47:2f:bd:9f:f5:85:db:83:51:
         ac:a5:22:61:19:1c:fd:c2:79:43:aa:cd:68:10:fd:9e:2a:a5:
         e6:92:46:b5:5b:3d:f8:da:9b:56:04:9b:ce:58:03:fd:c8:e8:
         95:95:eb:aa:e0:23:ef:ca:21:0a:00:40:bc:35:43:4a:e7:1f:
         d3:4e:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:56:34 2026 by rpki-client