Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142184.roa
File:                     AS142184.roa (raw, json)
Hash identifier:          U3a+KhZBO7SizrHoJwMr5y/qXLM2JmlvD91+hwxZ4qE=
Subject key identifier:   74:CA:ED:8A:A5:DE:C2:E6:24:4B:D2:07:64:D3:2D:53:BD:51:C2:95
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       2E43745E4C5D4F73FD233771DDF201C07669EE0A
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142184.roa
Signing time:             Sat 02 May 2026 09:23:08 +0000
ROA not before:           Sat 02 May 2026 09:18:08 +0000
ROA not after:            Sat 01 May 2027 09:23:08 +0000
asID:                     142184
IP address blocks:        144.79.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:43:74:5e:4c:5d:4f:73:fd:23:37:71:dd:f2:01:c0:76:69:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  2 09:18:08 2026 GMT
            Not After : May  1 09:23:08 2027 GMT
        Subject: CN=74CAED8AA5DEC2E6244BD20764D32D53BD51C295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ac:46:00:88:a6:f9:01:4e:de:4a:49:e6:07:
                    ef:d4:bb:d4:92:9c:2f:9a:58:84:f3:57:49:fa:7d:
                    4a:66:c6:36:fc:58:fc:82:64:1b:bc:ce:cc:9f:c9:
                    20:04:9d:60:44:9f:95:04:73:84:e2:e1:e8:64:12:
                    3f:24:b2:8a:0c:a5:41:c1:cc:5f:b7:f7:4e:04:7d:
                    3d:84:a9:94:a2:b7:58:5f:70:04:98:2d:c8:79:6a:
                    fd:e5:d2:6b:87:9d:04:8b:2b:e5:fc:22:77:f8:ea:
                    d7:81:8a:6d:51:76:3d:dc:b0:6b:09:59:e3:78:8a:
                    b4:9e:45:f3:03:79:ea:b9:36:11:12:29:62:39:db:
                    af:f5:d2:a4:f7:34:df:48:81:1e:3c:59:96:49:34:
                    2a:24:36:43:36:c9:0e:5e:fa:3a:2c:be:7e:73:31:
                    13:7e:e0:6b:e7:06:fc:2a:9e:db:66:4e:1a:f9:44:
                    c2:bf:b6:d4:84:0d:79:53:53:07:66:75:c7:99:62:
                    e3:e3:c1:d7:72:0c:96:fe:ce:e1:3d:6b:0d:5e:be:
                    45:3c:4d:37:c8:c4:07:45:0c:5e:73:41:61:6c:d3:
                    49:07:d0:6d:f7:a4:aa:8a:3b:ff:b4:05:8d:00:e2:
                    58:1f:c6:f3:87:31:01:13:d0:31:a9:14:91:3c:ea:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:ED:8A:A5:DE:C2:E6:24:4B:D2:07:64:D3:2D:53:BD:51:C2:95
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:65:6f:1a:cf:5c:05:a5:3c:95:6d:38:31:99:e4:bf:3e:
         37:46:02:fd:59:d4:36:21:0b:3e:7f:1a:66:31:86:06:da:2b:
         c1:68:e8:23:21:0d:f5:b2:11:54:c4:05:66:55:9e:2e:d2:cd:
         ee:20:94:a7:5c:74:c2:d5:e1:4d:b4:e6:d7:00:7c:a1:f6:cd:
         2f:b0:f5:61:5f:25:eb:23:f9:1e:05:9e:70:41:26:b2:49:74:
         53:fb:45:b1:4a:96:05:ac:35:63:82:07:7a:df:a9:f1:8e:2f:
         ac:30:52:c1:28:76:e4:96:b4:9f:79:8f:c4:2a:56:a7:7c:72:
         a4:af:3e:6c:37:01:56:62:26:3c:f4:06:7e:17:44:2c:6e:7b:
         15:b3:06:9b:24:2d:f3:3c:dc:e7:9c:d8:05:dc:5b:94:1c:3c:
         76:fb:5f:3c:03:2d:19:c0:37:e8:92:98:71:40:c1:fd:1c:e8:
         ef:aa:e9:fe:f4:8c:e4:2a:36:28:b2:b9:99:24:ab:44:63:73:
         6d:a2:b3:fa:37:e3:10:08:b9:f0:d0:aa:5e:a8:04:a7:a6:79:
         35:f7:d7:47:e1:cb:c4:87:2c:c4:7f:39:28:76:6f:2d:39:9d:
         74:fb:18:3a:c6:23:cf:99:cd:e4:0c:70:90:c1:17:5a:d9:49:
         d5:72:42:f0
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIULkN0XkxdT3P9Izdx3fIBwHZp7gowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0
NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwOFoX
DTI3MDUwMTA5MjMwOFowMzExMC8GA1UEAxMoNzRDQUVEOEFBNURFQzJFNjI0NEJE
MjA3NjREMzJENTNCRDUxQzI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCsRgCIpvkBTt5KSeYH79S71JKcL5pYhPNXSfp9SmbGNvxY/IJkG7zOzJ/J
IASdYESflQRzhOLh6GQSPySyigylQcHMX7f3TgR9PYSplKK3WF9wBJgtyHlq/eXS
a4edBIsr5fwid/jq14GKbVF2PdywawlZ43iKtJ5F8wN56rk2ERIpYjnbr/XSpPc0
30iBHjxZlkk0KiQ2QzbJDl76Oiy+fnMxE37ga+cG/Cqe22ZOGvlEwr+21IQNeVNT
B2Z1x5li4+PB13IMlv7O4T1rDV6+RTxNN8jEB0UMXnNBYWzTSQfQbfekqoo7/7QF
jQDiWB/G84cxARPQMakUkTzqYBsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR0yu2K
pd7C5iRL0gdk0y1TvVHClTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT
YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB
NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG
MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz
Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyMTg0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAkE/0MA0GCSqGSIb3DQEBCwUAA4IBAQBO42VvGs9cBaU8lW04MZnkvz43
RgL9WdQ2IQs+fxpmMYYG2ivBaOgjIQ31shFUxAVmVZ4u0s3uIJSnXHTC1eFNtObX
AHyh9s0vsPVhXyXrI/keBZ5wQSaySXRT+0WxSpYFrDVjggd636nxji+sMFLBKHbk
lrSfeY/EKlanfHKkrz5sNwFWYiY89AZ+F0QsbnsVswabJC3zPNznnNgF3FuUHDx2
+188Ay0ZwDfokphxQMH9HOjvqun+9IzkKjYosrmZJKtEY3NtorP6N+MQCLnw0Kpe
qASnpnk199dH4cvEhyzEfzkodm8tOZ10+xg6xiPPmc3kDHCQwRda2UnVckLw
-----END CERTIFICATE-----
Generated at Sat May 2 21:04:35 2026 by rpki-client