Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa
File:                     AS154765.roa (raw, json)
Hash identifier:          cyCrRETf888uJLHjBbBnfNkFeGwcI5MAoqYZpi9vt90=
Subject key identifier:   BE:E7:00:02:56:6F:ED:02:9A:90:9D:52:89:5A:54:59:78:56:C3:87
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       6EF76E0E4943196C46378318D595378FA9BE7A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa
Signing time:             Fri 31 Jul 2026 04:26:28 +0000
ROA not before:           Fri 31 Jul 2026 04:21:28 +0000
ROA not after:            Fri 30 Jul 2027 04:26:28 +0000
asID:                     154765
IP address blocks:        2001:df7:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:6e:0e:49:43:19:6c:46:37:83:18:d5:95:37:8f:a9:be:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: Jul 31 04:21:28 2026 GMT
            Not After : Jul 30 04:26:28 2027 GMT
        Subject: CN=BEE70002566FED029A909D52895A54597856C387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:28:4f:16:fb:a5:27:80:2b:61:33:69:5b:
                    4a:29:84:01:5b:d4:6f:4a:a0:c9:76:a7:1a:c9:14:
                    4c:7f:a1:81:12:58:4f:a3:26:13:00:67:21:54:64:
                    fb:3b:13:d1:c5:80:71:67:51:ee:08:e2:8c:57:2c:
                    75:ee:ce:17:5e:56:88:a6:c9:e6:69:43:de:21:56:
                    45:f7:f8:5b:5a:ad:c0:0c:4a:b6:d5:e6:b3:d9:c0:
                    4d:15:c2:c0:16:71:75:dd:96:b9:c5:8c:ca:12:10:
                    2c:ba:2e:3d:45:22:70:af:d8:8a:78:23:86:d2:44:
                    71:97:aa:26:b9:1f:5e:c3:1a:da:09:de:2e:8e:28:
                    b0:d2:c7:71:7e:ed:58:49:39:96:30:b8:a3:49:30:
                    ce:4e:06:be:9d:70:29:c0:62:a2:c5:e8:54:42:bf:
                    73:19:71:a4:34:12:c1:b5:0f:b2:b5:b5:6e:da:1d:
                    03:88:7f:85:98:dc:27:54:d1:50:6a:a1:5c:b4:05:
                    77:a9:49:1b:64:6a:6b:8e:93:62:9c:ad:3d:3b:13:
                    26:72:3a:86:f4:c5:e8:bb:98:a3:42:e8:83:5c:51:
                    14:6e:67:97:bd:78:b4:2e:36:d8:39:b7:f3:d6:b5:
                    29:b7:55:1b:17:3a:9c:32:90:90:a9:b8:56:d1:83:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E7:00:02:56:6F:ED:02:9A:90:9D:52:89:5A:54:59:78:56:C3:87
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154765.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:b6:fb:68:28:d4:3b:d2:9a:03:6d:56:cc:4a:0c:5e:81:
         66:8d:3b:b2:a9:09:ee:77:1a:35:e1:89:18:60:7b:52:b4:bb:
         af:7c:fc:57:1d:d9:01:6e:20:ec:cf:87:cf:2c:1d:c8:e4:6c:
         e3:03:d6:ee:ac:38:a8:ab:e7:70:08:10:ed:df:93:34:bb:23:
         c2:4c:0b:24:cf:9c:b2:a8:9e:1c:0e:34:6e:c4:4b:38:84:7c:
         12:4a:f9:ac:42:48:b9:65:54:21:d9:5a:74:af:c0:6e:84:7e:
         c1:f3:3d:40:a4:a2:72:a6:ab:93:81:d3:03:3e:d1:39:7a:40:
         4f:10:df:f9:2f:5a:dc:11:9b:c1:c2:e6:36:d8:3a:fb:44:27:
         5e:19:8a:94:09:ea:36:6b:fe:30:74:8c:0b:24:8d:bf:41:74:
         27:0b:10:c5:f7:7c:8c:c5:09:d3:fb:4c:9e:76:00:ba:b6:86:
         94:61:a7:68:3f:4b:9a:72:7c:2d:c2:5f:44:2d:31:86:11:93:
         0a:ab:25:ef:b7:99:13:8f:d9:61:d1:41:3e:92:64:7c:37:c6:
         43:a3:51:b2:11:0a:ce:5b:18:30:4e:18:ec:73:f4:d7:79:97:
         37:3e:08:cf:d0:c7:03:55:d0:68:c3:28:b6:6b:7c:b0:e9:42:
         34:68:dd:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 2 14:23:56 2026 by rpki-client