Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142639.roa
File:                     AS142639.roa (raw, json)
Hash identifier:          2mm63s2q4KJ4BfBbu8hmIehCyucOWivQt5SUwvvV6bE=
Subject key identifier:   55:B3:8D:F9:79:9D:E5:5E:B5:7B:7C:80:53:E1:2B:24:5A:C1:6D:1D
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       2B1FE4175D731DBCC324A2CBF910B3E8C87E2750
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142639.roa
Signing time:             Sat 02 May 2026 21:23:03 +0000
ROA not before:           Sat 02 May 2026 21:18:03 +0000
ROA not after:            Sat 01 May 2027 21:23:03 +0000
asID:                     142639
IP address blocks:        198.15.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1f:e4:17:5d:73:1d:bc:c3:24:a2:cb:f9:10:b3:e8:c8:7e:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: May  2 21:18:03 2026 GMT
            Not After : May  1 21:23:03 2027 GMT
        Subject: CN=55B38DF9799DE55EB57B7C8053E12B245AC16D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:06:d9:ef:7c:77:a8:4e:66:d5:a8:d7:a1:
                    a1:41:da:9f:bf:49:c9:80:95:a2:43:da:10:16:77:
                    0c:01:3f:4e:13:32:63:a4:7d:9f:cc:4a:70:5a:60:
                    cc:16:fb:fa:22:8c:be:8a:cf:c7:b8:86:30:fa:76:
                    62:e5:61:f7:ab:0b:07:df:d0:56:ad:a2:a3:45:ae:
                    cf:6e:07:16:13:3b:5a:a9:71:75:34:9d:90:61:41:
                    27:3b:30:fe:ff:7e:51:5f:1d:35:df:00:a9:e1:a3:
                    0c:0c:18:74:b2:8e:4c:12:24:25:8d:36:e3:52:17:
                    59:de:a6:ac:f1:02:ac:62:23:2a:69:e7:d3:40:71:
                    a1:78:38:bd:27:1e:54:60:b1:2b:b9:75:cb:b3:66:
                    73:92:e5:a4:3d:9f:31:72:2c:e1:50:ad:9f:e2:bb:
                    e6:19:14:1c:b6:4f:d7:6e:23:18:8c:96:79:02:96:
                    b7:a2:ee:03:2a:51:ff:1f:ee:8e:88:4b:2b:c3:6d:
                    f8:79:28:4f:57:ff:ee:f1:a4:d2:7f:bc:ca:7d:83:
                    9b:68:fa:61:cd:94:30:a3:f5:22:4a:d8:21:17:d9:
                    f9:25:8c:cb:10:75:f0:92:53:a5:25:c0:97:43:55:
                    b4:a7:e8:13:58:e9:8c:24:e0:2f:97:9e:75:88:e3:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B3:8D:F9:79:9D:E5:5E:B5:7B:7C:80:53:E1:2B:24:5A:C1:6D:1D
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:15:cf:f4:b4:29:f4:7e:37:7e:68:fe:ff:2c:74:1a:ad:
         aa:20:69:e8:cc:7d:3d:ea:aa:bb:a7:69:01:e6:b5:d2:02:32:
         67:d0:da:c5:8f:32:a4:fd:a2:dd:ba:43:f1:db:ea:f9:10:e4:
         a5:34:12:c9:9c:25:dc:74:01:af:5c:79:09:50:d9:2f:e9:27:
         41:b5:63:c7:01:fd:88:3e:a3:59:de:75:d0:e4:67:92:0d:9d:
         46:2c:b1:b0:4b:d1:20:f3:c2:d0:8a:2d:21:7d:b9:c2:19:68:
         32:f9:49:72:d5:41:2c:5b:f3:3b:af:0a:c3:8f:ef:a9:fb:70:
         76:dc:12:75:7f:cf:7d:9a:94:54:b0:1f:c4:aa:4a:ce:66:59:
         e9:13:0e:10:f3:33:7c:11:0a:92:1e:cf:53:c7:bf:be:4f:d2:
         35:9c:b3:56:05:83:24:f8:4c:96:0d:26:8a:bc:a6:3f:09:2c:
         f6:68:64:20:26:59:dd:d1:12:cb:fa:d4:14:c7:d6:d8:9e:3e:
         5b:3f:15:26:31:46:23:e0:85:e9:8b:92:80:b2:35:17:61:23:
         70:34:db:de:92:f3:b1:12:dc:d3:2b:8e:cc:5d:ca:cf:2f:95:
         3f:52:ba:37:eb:b2:66:79:d8:b5:4b:00:0b:e1:41:1d:95:59:
         a9:13:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:58:33 2026 by rpki-client