Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154056.roa
File:                     AS154056.roa (raw, json)
Hash identifier:          XfsFFp57OqdAXseW1zAt0gzbca2190WqgmGczA32/8w=
Subject key identifier:   D5:F5:E7:39:24:07:61:E4:B8:A5:14:FB:BE:0E:6E:9C:5D:6C:51:32
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       60D93963BFF06B0EBC33A2CEC2DB11F1BD5CDEAB
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154056.roa
Signing time:             Sat 02 May 2026 09:25:14 +0000
ROA not before:           Sat 02 May 2026 09:20:14 +0000
ROA not after:            Sat 01 May 2027 09:25:14 +0000
asID:                     154056
IP address blocks:        165.101.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:39:63:bf:f0:6b:0e:bc:33:a2:ce:c2:db:11:f1:bd:5c:de:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  2 09:20:14 2026 GMT
            Not After : May  1 09:25:14 2027 GMT
        Subject: CN=D5F5E739240761E4B8A514FBBE0E6E9C5D6C5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:ea:44:fc:7a:f3:17:64:34:ff:6c:1e:e5:
                    46:e9:6d:60:95:43:71:50:8f:b5:f9:d3:30:ca:ec:
                    4d:c8:8c:0d:28:dc:18:35:2c:ab:eb:ef:47:bf:88:
                    9d:a4:d0:05:ae:e4:87:fc:b9:5f:74:1e:ab:d0:9c:
                    4b:3b:1c:21:e8:13:ec:df:8f:c2:fb:2f:f4:58:f9:
                    e7:00:5f:f4:2f:ed:50:2c:8b:41:d5:c9:d0:5e:3a:
                    3c:f7:ff:85:f1:93:15:ec:2d:b5:65:e2:55:9a:df:
                    f8:97:a8:63:a5:3d:a0:25:04:66:29:d7:8b:87:f2:
                    76:fe:b4:95:91:8b:b0:ae:2d:c5:6a:93:a5:19:48:
                    98:03:e6:bb:55:44:73:e0:f2:9e:e9:3d:2d:f8:bb:
                    63:dd:b5:a2:d8:06:2c:ee:8b:41:ae:a4:7d:d1:d5:
                    60:70:b4:4b:1c:c3:06:98:de:65:dd:3d:34:fb:73:
                    68:d1:b2:cb:e0:41:c4:85:b7:c2:39:de:b3:06:18:
                    db:b9:8f:b3:ca:6a:6d:d7:7a:48:a6:c9:8c:9b:88:
                    f7:20:82:3c:60:3b:77:0a:e5:8b:5b:22:a5:53:9b:
                    32:08:5f:88:63:23:43:82:29:0c:47:ff:44:b7:fc:
                    ff:d6:2e:79:e6:08:96:c9:52:f6:e4:15:3e:d0:8c:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:E7:39:24:07:61:E4:B8:A5:14:FB:BE:0E:6E:9C:5D:6C:51:32
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154056.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1d:19:99:52:db:91:91:4e:33:29:31:36:84:5e:28:14:a8:
         32:65:da:dd:14:aa:17:6f:4c:85:8b:3c:15:1b:22:4d:e9:36:
         a8:05:42:32:1e:c6:4f:f3:c3:da:89:25:23:6a:96:75:9d:7f:
         06:39:fd:04:c8:f2:49:b5:08:1a:15:2c:d6:23:60:16:e2:8d:
         91:0c:c0:47:d6:cc:96:32:e2:be:55:c4:71:80:61:6a:42:69:
         fb:1c:b7:d6:21:56:7d:d6:31:6a:6f:e8:d1:4f:55:84:96:2e:
         79:41:c4:5a:28:20:e2:2d:b0:2d:db:13:95:6c:0b:ea:f2:5c:
         3f:e5:d0:09:15:6f:25:8d:b9:67:1c:fa:58:cb:66:44:5a:ba:
         f0:25:6b:c4:fa:c5:fc:66:64:ed:68:a2:77:82:86:e3:4e:92:
         60:94:af:6b:79:af:8b:ac:2d:97:99:f5:30:4a:d8:d5:d0:d3:
         02:b5:be:7f:1a:e6:dd:a5:a6:ae:e8:0a:df:65:56:d9:4d:87:
         94:b8:76:35:f9:21:ea:13:5c:29:0d:b4:b3:a5:1b:7b:ad:84:
         0e:c0:6a:85:67:7c:3d:bf:10:84:e8:ae:8e:46:7b:7c:6c:0a:
         29:ef:2f:a3:f4:52:3c:42:df:4f:bf:67:a4:02:16:51:98:44:
         83:7f:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 21:03:47 2026 by rpki-client