Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e35342e302f32332d3234203d3e20313432323336.roa
File:                     3135312e3135382e35342e302f32332d3234203d3e20313432323336.roa (raw, json)
Hash identifier:          mN3KgXfZRRrSmQHzBjW4eQhPmYSo4eOu6KEgvfq9JMk=
Subject key identifier:   5D:19:06:FD:EC:07:76:4B:75:E3:44:63:5A:F5:A9:8E:0A:94:2A:F3
Certificate issuer:       /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial:       4385784B2A314E7B10C13E362F7AEBBC0D0E558C
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e35342e302f32332d3234203d3e20313432323336.roa
Signing time:             Thu 08 Oct 2026 03:33:27 +0000
ROA not before:           Thu 08 Oct 2026 03:28:27 +0000
ROA not after:            Thu 07 Oct 2027 03:33:27 +0000
asID:                     142236
IP address blocks:        151.158.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:85:78:4b:2a:31:4e:7b:10:c1:3e:36:2f:7a:eb:bc:0d:0e:55:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
        Validity
            Not Before: Oct  8 03:28:27 2026 GMT
            Not After : Oct  7 03:33:27 2027 GMT
        Subject: CN=5D1906FDEC07764B75E344635AF5A98E0A942AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:d6:85:22:14:96:98:9d:c1:2c:1a:83:56:
                    d5:8e:d9:40:90:01:70:2d:a7:74:ce:ad:ce:8d:6e:
                    16:57:4d:c6:31:c8:8c:c4:00:21:8c:03:e5:12:25:
                    0c:01:16:58:2b:3a:22:08:e5:07:47:68:11:84:ad:
                    80:b2:4e:5b:1c:e1:d6:ae:7c:d4:90:2b:59:74:00:
                    00:06:0a:1b:db:86:1b:1b:8a:a8:10:46:7a:cc:5d:
                    d2:45:b9:42:8c:a9:cd:7a:d1:96:61:8a:22:f8:c4:
                    5f:22:ff:8f:cb:da:ae:1d:f4:58:91:09:29:30:5d:
                    16:da:69:53:e5:02:ef:92:40:81:14:46:1b:df:98:
                    f8:7d:51:b0:cb:6f:3d:3a:76:e9:08:20:37:c8:17:
                    11:39:1b:de:1a:4f:a3:90:46:54:dd:f7:b9:59:70:
                    66:a0:62:93:78:aa:94:f5:18:9a:e8:ed:72:c7:d0:
                    e7:da:e1:a1:a7:4e:e0:c9:21:30:ad:73:21:fa:39:
                    52:e2:8f:44:33:99:70:2b:8f:12:48:f3:a8:e7:f9:
                    f2:8c:11:fb:88:12:e5:d9:af:07:3f:68:c7:73:67:
                    eb:e9:2a:f1:17:47:22:ca:4a:d1:59:5c:c9:27:44:
                    5f:16:dc:a7:a4:4e:ba:33:e2:81:3b:38:f3:18:c6:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:19:06:FD:EC:07:76:4B:75:E3:44:63:5A:F5:A9:8E:0A:94:2A:F3
            X509v3 Authority Key Identifier:
                keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e35342e302f32332d3234203d3e20313432323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:87:cb:37:48:0d:1b:76:32:a4:28:27:7e:d0:38:4d:51:
         a7:20:e6:0e:2f:f9:2d:c4:2b:c4:71:40:39:b4:95:cd:7d:77:
         67:11:01:fa:d3:b0:a3:1c:85:69:4d:a5:90:7b:a7:d6:db:aa:
         6c:a9:21:35:98:47:a8:e3:b7:82:a3:18:9c:49:37:11:b5:8c:
         27:71:c0:d5:42:11:99:06:a4:9a:9c:f3:7a:50:2b:7c:e4:11:
         b2:94:ec:a4:07:85:d0:43:2c:e7:a3:92:a4:2a:6e:f2:a1:c6:
         56:d4:28:26:a6:a0:46:70:cf:52:ec:50:73:89:1d:c7:f0:4b:
         4c:3a:fe:2b:b9:9d:7b:5b:50:fa:2d:d4:e4:6b:21:c0:f9:87:
         1e:14:fa:8a:d6:7c:cf:ab:d8:f6:21:a4:a7:1f:ad:28:f7:30:
         98:52:ec:61:87:ca:ca:c2:a6:98:40:ac:f8:c5:6c:18:86:02:
         17:87:be:68:8c:95:d5:46:d1:ae:ef:35:80:20:54:1d:64:7b:
         99:18:40:00:5d:9d:28:d5:39:cf:c0:07:1e:4e:fc:ca:f2:9f:
         f0:33:c9:88:b6:dd:39:39:53:b0:78:f7:83:bf:7f:ce:11:67:
         5d:68:5b:86:6f:74:03:8d:9e:ff:17:37:ea:3d:c2:1e:31:1c:
         80:b3:a9:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:53 2026 by rpki-client