Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154716.roa
File:                     AS154716.roa (raw, json)
Hash identifier:          cYYSnoCtr2+yP9y1c4MwELNIGGKw+t1Mu2hU0buEyXo=
Subject key identifier:   E0:52:8C:A4:6F:08:28:C1:82:C7:3A:74:45:4C:ED:29:58:0A:1A:8C
Certificate issuer:       /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial:       23D3BF2DFED122CC5CD69075BA7669906DA51CBC
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154716.roa
Signing time:             Fri 19 Jun 2026 02:46:14 +0000
ROA not before:           Fri 19 Jun 2026 02:41:14 +0000
ROA not after:            Fri 18 Jun 2027 02:46:14 +0000
asID:                     154716
IP address blocks:        162.4.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d3:bf:2d:fe:d1:22:cc:5c:d6:90:75:ba:76:69:90:6d:a5:1c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
        Validity
            Not Before: Jun 19 02:41:14 2026 GMT
            Not After : Jun 18 02:46:14 2027 GMT
        Subject: CN=E0528CA46F0828C182C73A74454CED29580A1A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:09:2d:02:76:8f:ac:d8:92:27:b1:18:2c:
                    11:06:a7:fa:c8:86:a9:62:dd:af:94:69:2f:11:18:
                    d9:a0:3b:43:7a:0f:83:3c:05:03:f4:19:83:4a:7f:
                    a7:19:82:3d:ac:09:73:16:c5:05:70:2c:d3:f7:b5:
                    b4:f6:56:d1:79:7f:f2:ce:2b:95:91:db:e7:77:db:
                    e5:40:24:b8:98:2e:29:0b:07:9d:58:c7:58:43:48:
                    bd:2c:3c:b2:92:95:ea:ce:ef:58:91:f9:52:66:68:
                    38:b8:fb:0c:8c:07:9d:9a:5a:d7:5d:06:42:c3:4c:
                    76:8b:57:0f:da:19:13:dc:76:b8:9b:8e:d3:53:15:
                    b9:fe:82:13:fb:2a:0b:61:13:fc:86:0b:02:a7:8f:
                    63:cb:19:e0:f1:a4:c4:6d:66:71:f8:e8:7c:0a:f3:
                    d5:de:7f:9b:f7:ae:7d:6c:88:ee:f1:5a:3b:ac:10:
                    80:b8:03:93:bb:a9:a3:17:63:c0:7b:c9:f8:9e:47:
                    98:19:f9:a9:77:81:6c:44:98:91:11:07:96:6a:8f:
                    e9:a9:2c:5b:f5:83:22:47:0e:b4:fb:6b:f0:5c:8c:
                    5a:09:e6:3b:f8:5b:61:41:a6:d9:3a:3e:14:b5:5f:
                    59:16:fa:85:95:39:4a:19:a2:03:b5:38:19:f6:74:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:52:8C:A4:6F:08:28:C1:82:C7:3A:74:45:4C:ED:29:58:0A:1A:8C
            X509v3 Authority Key Identifier:
                keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154716.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:59:5c:a0:81:39:68:51:9f:a5:9f:72:a5:5b:7f:1f:54:
         aa:b0:93:2b:7c:a7:5d:d9:77:54:e8:ba:ab:72:20:52:0d:00:
         90:33:33:40:52:14:33:af:45:ba:61:6e:b8:af:ab:11:8a:78:
         53:ad:3a:ea:af:be:d6:8a:0a:0c:82:8a:a7:2c:e4:65:95:ef:
         51:9d:b7:69:03:c6:76:b4:6d:b6:3b:9b:72:a2:47:ff:9d:c5:
         7a:cf:2f:31:b8:39:04:83:23:58:84:22:00:bc:52:f3:45:f4:
         3a:41:97:77:28:a2:0e:2f:9b:5b:7f:e1:d3:0d:c3:18:68:e1:
         66:fb:f0:6b:41:11:15:54:95:2d:2f:30:a4:a7:95:a7:61:0c:
         8c:61:dc:9e:48:b5:af:58:45:90:c6:3b:14:1d:81:52:46:af:
         28:8b:1f:39:d4:c0:f1:d9:1d:ff:f8:83:70:3a:c4:57:27:ac:
         1d:31:cf:dd:eb:a6:ab:aa:dc:6e:ad:32:ab:be:f2:d7:99:e5:
         01:cf:16:67:2a:4f:04:ba:99:ca:e8:3e:d0:1a:7e:b7:80:05:
         6a:9e:68:10:52:fc:cb:4d:3a:35:22:f2:1b:40:14:a4:f0:e9:
         4b:c1:9b:1c:0e:ba:53:e4:e4:bc:dd:cc:a5:48:e3:82:76:5e:
         f3:7e:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:31 2026 by rpki-client