Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa
File:                     3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (raw, json)
Hash identifier:          l2sRWuDj9NuoGun/QwVKlUMfqQ/mBD+QWaXv9jkfzHs=
Subject key identifier:   A6:E7:CB:AC:FA:63:FF:EC:A4:95:11:0D:0E:D1:10:D5:E9:D7:E2:86
Certificate issuer:       /CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
Certificate serial:       74D607181638E1E944AD14C9FADFCE9025F163BF
Authority key identifier: 24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa
Signing time:             Tue 10 Feb 2026 04:27:40 +0000
ROA not before:           Tue 10 Feb 2026 04:22:40 +0000
ROA not after:            Tue 09 Feb 2027 04:27:40 +0000
asID:                     131454
IP address blocks:        151.158.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl
                          rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d6:07:18:16:38:e1:e9:44:ad:14:c9:fa:df:ce:90:25:f1:63:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
        Validity
            Not Before: Feb 10 04:22:40 2026 GMT
            Not After : Feb  9 04:27:40 2027 GMT
        Subject: CN=A6E7CBACFA63FFECA495110D0ED110D5E9D7E286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:de:e4:72:30:c8:62:3d:58:87:b9:7e:e5:
                    0a:af:49:b7:b0:40:03:62:e4:5f:ad:cd:94:ca:68:
                    b5:61:8f:99:80:0a:20:b8:07:4a:83:cd:3c:b3:f5:
                    14:dc:21:d0:d9:e9:e4:e8:cf:56:6e:9e:1b:4c:68:
                    20:5e:11:6f:ee:44:0a:14:e1:dd:47:b5:f3:d3:4a:
                    d0:52:07:75:8a:46:ea:2b:23:88:65:61:c6:63:46:
                    43:d5:ec:18:ba:d1:76:42:3e:b0:8f:3d:a1:77:b4:
                    74:72:e8:30:77:26:2f:3e:c7:03:ce:c7:ae:ab:7e:
                    3d:98:2b:ed:82:f3:72:34:bd:34:c5:96:44:4c:8c:
                    35:59:5c:c2:fa:db:a4:6a:a7:96:2f:c8:99:c9:cf:
                    be:85:b8:75:4b:e6:a1:57:e7:05:9d:00:ae:33:3c:
                    63:e1:3e:30:c0:ac:2c:b8:97:75:95:8f:50:5c:dc:
                    83:a2:7a:36:70:d2:2b:dd:b5:1a:63:b7:b3:a1:23:
                    5a:83:88:a1:c7:4c:76:62:6b:bb:b5:01:50:e3:fd:
                    84:8b:90:1f:2f:5e:47:22:08:26:f8:7b:00:1f:2e:
                    e5:28:5e:ea:b9:06:30:81:54:62:6a:47:4a:ef:94:
                    3a:47:3c:8e:1e:15:e2:4f:c1:bd:79:9a:75:19:41:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E7:CB:AC:FA:63:FF:EC:A4:95:11:0D:0E:D1:10:D5:E9:D7:E2:86
            X509v3 Authority Key Identifier:
                keyid:24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:43:74:7f:f1:ca:0d:c5:f5:10:df:9c:6a:9d:a0:d5:66:
         e1:56:c7:b0:fa:9b:57:6e:34:80:cc:63:45:92:4e:21:14:01:
         bb:00:ac:19:67:41:af:34:61:34:02:d1:b9:08:ec:ca:b5:8d:
         ea:77:e4:e7:0e:f2:6f:2e:3b:ea:5f:a9:14:e4:13:21:76:ca:
         06:79:90:cd:e3:df:e2:11:7c:4e:93:26:dc:be:6b:73:bf:2f:
         6f:3c:80:05:da:4d:e8:eb:44:48:4d:cb:79:81:fe:93:09:05:
         29:2e:74:76:3e:e4:d3:4d:c9:22:84:86:c5:53:c9:a2:01:ae:
         88:ad:79:48:06:10:f6:9c:9e:bd:3e:8a:95:5d:19:f4:61:c8:
         fa:68:e7:64:03:ea:22:a5:71:ba:8e:2e:d9:00:7b:cd:b1:d2:
         f6:de:4b:01:3c:4c:34:dc:15:44:01:c7:5c:f4:6b:04:e9:79:
         d4:e7:3d:1e:79:25:7f:2f:89:0d:c5:fe:c6:66:89:b9:b2:02:
         7d:e4:2a:59:18:47:24:2e:f6:b9:90:94:f0:54:a5:1c:31:cb:
         0e:2f:0e:0f:89:31:2a:90:84:e3:c9:a8:a2:f1:e3:17:fb:b8:
         76:c6:1e:85:87:c1:c4:ad:5a:6a:09:86:0f:c3:1f:95:53:29:
         11:b4:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:56 2026 by rpki-client