Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa
File:                     3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (raw, json)
Hash identifier:          XFhFebLIPZULajE3nvQRfK4ZgyC1cbWqHGjSgE8qiuc=
Subject key identifier:   4C:E5:B1:4E:28:59:7A:2A:B6:AD:79:B2:89:1C:20:51:64:77:79:32
Certificate issuer:       /CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
Certificate serial:       04A7C070B8AE545B9F9C4202E03237E6E82A6C89
Authority key identifier: 24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa
Signing time:             Tue 10 Feb 2026 04:27:09 +0000
ROA not before:           Tue 10 Feb 2026 04:22:09 +0000
ROA not after:            Tue 09 Feb 2027 04:27:09 +0000
asID:                     131454
IP address blocks:        151.158.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl
                          rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a7:c0:70:b8:ae:54:5b:9f:9c:42:02:e0:32:37:e6:e8:2a:6c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D5D46277BE98F80EC6AF901FD4322AA2FAB208
        Validity
            Not Before: Feb 10 04:22:09 2026 GMT
            Not After : Feb  9 04:27:09 2027 GMT
        Subject: CN=4CE5B14E28597A2AB6AD79B2891C205164777932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:20:cb:b8:da:81:ec:84:6b:ef:a4:e3:e0:
                    de:0f:f6:5a:19:91:7f:3f:e0:8f:e7:76:51:64:d8:
                    e7:c6:74:af:72:5f:f0:58:bd:49:51:2d:94:19:0e:
                    50:46:89:b1:ff:18:15:da:9a:e8:e8:a4:73:97:eb:
                    7c:d9:25:26:3c:16:24:d2:b6:1c:a2:08:9f:d7:c1:
                    a5:8b:88:41:43:75:ca:51:d9:31:da:44:15:a5:00:
                    57:83:6c:94:50:62:4f:bb:9a:a5:1c:cd:11:a9:99:
                    39:2c:db:a2:5d:58:a4:20:c0:0b:ed:c5:d2:b1:6b:
                    30:0b:ed:10:8d:8b:14:6c:be:45:d6:28:db:39:9e:
                    6d:28:de:3d:b2:6c:3d:e5:24:dd:38:b9:eb:86:6b:
                    6f:1b:29:1b:af:cd:5d:86:d8:36:66:b1:7b:97:ac:
                    98:8c:84:38:c8:ab:24:7b:5e:5f:77:c3:f3:b1:3f:
                    65:4b:ca:33:db:28:68:8b:4d:86:d6:65:df:14:36:
                    01:cc:a9:6c:0a:79:6c:c6:9c:cf:f7:f8:3e:38:48:
                    e8:c5:5d:62:7c:ef:02:c8:2d:8b:d8:07:d7:7c:97:
                    fa:67:c6:e9:e2:f0:2e:d4:bd:68:35:3a:4d:91:24:
                    56:4a:7a:fe:d3:f9:0f:7f:1b:69:cd:1a:5c:b3:93:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:B1:4E:28:59:7A:2A:B6:AD:79:B2:89:1C:20:51:64:77:79:32
            X509v3 Authority Key Identifier:
                keyid:24:D5:D4:62:77:BE:98:F8:0E:C6:AF:90:1F:D4:32:2A:A2:FA:B2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:64:b8:cd:0c:ae:a3:6c:6e:b7:54:85:40:7a:dd:84:4a:02:
         bb:5d:29:ed:a6:a9:93:2e:0b:9c:88:e2:23:05:e4:fe:52:90:
         a3:43:b3:0a:86:1e:7f:80:21:5b:59:45:02:0e:3d:f9:2b:1b:
         f0:a8:6b:1e:7d:c5:93:96:54:79:e9:20:06:34:af:2e:26:30:
         2b:12:f6:62:b3:00:a6:e0:99:5c:a0:d7:7d:c9:71:9b:33:1e:
         40:e8:f0:3c:df:2a:6a:6f:8b:b6:8d:8d:e6:1a:69:b7:7f:b3:
         c8:d0:65:aa:f8:a4:43:32:16:a3:b2:04:81:d6:4e:c5:bf:2e:
         2f:06:cf:f6:50:e0:11:4d:ff:1a:e5:19:23:dd:34:f7:4b:ba:
         c6:74:a9:9e:8c:01:8e:b2:45:6f:c7:d1:4d:54:b2:80:fd:69:
         94:4f:a0:b9:16:84:6a:15:d9:09:5a:41:2e:26:d3:86:f3:95:
         48:ee:d0:52:c5:08:a5:1c:3c:49:af:67:ec:d2:a4:84:a2:73:
         2e:7c:2e:8a:14:e8:1f:12:da:46:8c:0c:fa:0b:0c:9c:5e:75:
         16:f3:0d:fc:d6:4a:f8:c3:fb:b1:f7:8f:76:2b:d1:1d:61:59:
         f3:92:82:95:e8:05:2a:1d:ba:c7:5a:32:12:0a:1f:c3:e7:97:
         07:57:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:55 2026 by rpki-client