Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa
File:                     AS142264.roa (raw, json)
Hash identifier:          xEXXgTH3Q3RbSWxUO03MLjFw8KO2OWK9YSzQ0ZqdyRs=
Subject key identifier:   02:C9:6D:F3:F2:2A:8B:AD:92:76:52:62:92:63:71:52:64:73:2A:8A
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       717301376799D7C8C6FF95163081CEAB9721C929
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa
Signing time:             Sat 02 May 2026 21:23:08 +0000
ROA not before:           Sat 02 May 2026 21:18:08 +0000
ROA not after:            Sat 01 May 2027 21:23:08 +0000
asID:                     142264
IP address blocks:        198.15.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:73:01:37:67:99:d7:c8:c6:ff:95:16:30:81:ce:ab:97:21:c9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  2 21:18:08 2026 GMT
            Not After : May  1 21:23:08 2027 GMT
        Subject: CN=02C96DF3F22A8BAD927652629263715264732A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:ca:4c:52:13:82:ae:9a:9d:93:4f:6d:67:
                    ce:4b:bd:c2:69:e3:4f:66:2b:ba:6c:3b:ce:eb:a5:
                    3c:18:e6:eb:05:2e:10:be:ba:10:97:1e:3b:62:f0:
                    40:51:64:de:99:a1:57:32:92:ce:7e:ab:b9:1b:14:
                    8a:48:d3:d5:95:e7:a4:c9:4d:fc:46:d3:5d:fb:ff:
                    d9:d8:af:62:17:f1:bd:7f:9b:72:db:dc:b2:d6:a3:
                    c8:d1:5e:e2:6b:45:f4:98:f4:ef:31:f0:48:e2:dd:
                    16:7a:71:40:f3:13:0d:69:55:71:ed:86:3c:3d:bc:
                    0b:58:b0:28:a6:4d:cf:82:ab:06:7a:37:56:00:27:
                    8a:b4:79:c8:8b:f0:7d:54:35:65:97:ac:de:39:c0:
                    c8:b4:2e:5f:03:72:9b:38:47:1c:cc:9e:3a:06:18:
                    b4:58:aa:a9:ea:25:b3:17:7d:c0:22:e7:36:a7:52:
                    ca:20:56:93:a3:fc:6c:f1:e0:7a:0e:bd:f1:8f:51:
                    6c:66:32:28:ee:8a:2f:4b:38:45:da:26:e7:42:cc:
                    2e:8f:ae:d9:a6:59:c1:ca:9e:1c:57:67:c1:f7:84:
                    cb:1f:39:7b:c3:37:65:6b:81:2b:c6:40:0e:08:43:
                    29:72:60:50:1a:d3:67:62:3c:66:9e:96:56:c6:e8:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:6D:F3:F2:2A:8B:AD:92:76:52:62:92:63:71:52:64:73:2A:8A
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:89:83:f2:64:45:19:f8:13:5e:68:e8:42:db:27:bf:cd:b6:
         f8:de:40:34:4e:da:3f:fb:27:63:30:44:33:78:a2:7b:c3:9b:
         38:2f:30:70:63:31:44:ce:19:31:fc:f9:b3:97:82:00:7d:1e:
         21:9c:a0:7a:88:00:d7:2c:d4:df:ed:b7:89:e2:70:b3:ad:10:
         30:c2:0a:88:dd:6d:47:01:cd:6b:b2:10:46:1d:3d:74:d5:37:
         03:de:2d:31:f3:02:41:1f:f4:b1:c0:86:ef:0d:f7:7e:fa:ab:
         68:00:44:16:33:23:72:ad:60:ac:6d:bd:5a:01:43:41:e2:73:
         65:c2:5b:45:4c:e4:87:1f:4b:4e:9e:48:79:1f:04:23:03:f6:
         b0:be:62:e4:88:10:fb:40:28:73:25:11:b0:ff:96:c4:55:0f:
         31:86:b4:dc:d0:74:b6:b2:86:b0:9c:c9:13:6c:09:d3:b7:07:
         ed:6b:ef:7f:20:32:9d:af:1c:35:06:69:77:60:63:ea:db:65:
         1f:48:63:e2:a1:c2:a4:2d:b6:32:0f:ba:4c:a5:59:9f:9f:cc:
         90:f8:17:4c:c4:01:17:3b:ef:9d:45:55:03:8a:18:99:32:08:
         83:fa:d6:02:2e:db:ed:96:52:d0:09:55:35:a6:0b:17:e7:c5:
         83:07:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:24 2026 by rpki-client