Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa
File:                     3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (raw, json)
Hash identifier:          EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=
Subject key identifier:   CC:82:4A:54:CC:D3:60:8B:15:2E:F2:66:DE:61:3F:64:BA:6F:09:4F
Certificate issuer:       /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial:       785F431906911BD8D32E7B92DC7EFA37FED6E1F0
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa
Signing time:             Sun 03 May 2026 02:39:39 +0000
ROA not before:           Sun 03 May 2026 02:34:39 +0000
ROA not after:            Sun 02 May 2027 02:39:39 +0000
asID:                     139997
IP address blocks:        114.141.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
                          rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5f:43:19:06:91:1b:d8:d3:2e:7b:92:dc:7e:fa:37:fe:d6:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
        Validity
            Not Before: May  3 02:34:39 2026 GMT
            Not After : May  2 02:39:39 2027 GMT
        Subject: CN=CC824A54CCD3608B152EF266DE613F64BA6F094F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:0a:d8:03:ce:5f:ef:ad:87:01:2f:82:80:
                    20:92:cf:4e:ab:44:41:ad:24:0c:d3:5d:74:fe:7b:
                    1d:0d:25:ad:29:75:19:cd:fb:f7:cd:78:05:6a:74:
                    4f:2a:6d:ef:1b:ef:f4:da:b9:b7:7c:cf:45:35:dd:
                    57:6a:48:b0:02:32:91:ca:32:72:0e:7d:da:3b:09:
                    3e:4b:5f:80:b7:37:10:69:92:d3:8c:97:12:9c:76:
                    0b:86:09:2d:6e:69:3b:f1:75:99:56:5f:ae:d2:85:
                    74:f4:2a:44:66:d2:23:29:38:71:59:fc:fd:4e:29:
                    aa:ea:45:a3:1f:7f:e2:b5:5b:c4:29:1e:12:db:66:
                    1a:e1:0c:74:3c:38:2b:42:53:c4:c1:79:20:53:c4:
                    cc:11:c5:c1:2a:fc:3d:85:78:86:c6:9b:ac:ee:c1:
                    6c:7a:ef:d6:7e:cd:5a:6d:ad:d4:58:3e:ec:76:8a:
                    87:8f:73:56:8d:72:25:05:6d:2c:3e:3b:73:b9:a7:
                    33:1f:99:f0:38:05:ab:a2:d1:83:58:61:b3:0b:dd:
                    d9:3c:f7:de:d6:ed:6f:d0:21:1b:2d:a4:da:d4:ef:
                    1d:42:9e:3b:0e:7a:d6:1d:66:f4:7b:84:f0:53:2d:
                    a0:cf:33:ca:a9:b2:61:ef:24:eb:7e:eb:cf:13:59:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:82:4A:54:CC:D3:60:8B:15:2E:F2:66:DE:61:3F:64:BA:6F:09:4F
            X509v3 Authority Key Identifier:
                keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:13:d1:81:1a:07:72:ae:3c:e2:26:ab:6d:22:d7:4d:7a:
         b6:b0:41:63:66:ec:44:6f:80:55:12:f0:2d:f7:3c:57:ac:a6:
         df:63:fb:7d:3b:a3:9a:d4:8f:ca:8d:1d:c5:4a:f3:0e:54:a2:
         f8:7d:78:cf:d7:7d:5e:92:47:22:56:b3:ba:27:b3:c5:75:91:
         40:4b:06:a4:f1:31:c7:4f:e0:0a:80:d3:a9:02:b2:3e:f8:22:
         bc:dd:5a:3d:f9:82:25:3e:6d:36:e4:4b:1d:9f:51:7c:14:b3:
         8a:d4:49:e7:af:61:31:72:30:ff:c2:ed:65:3a:9a:92:f4:fd:
         60:d8:8a:9a:a2:2f:c9:fc:1f:1a:8c:ef:80:fa:f6:91:91:3c:
         18:24:7e:1d:94:c7:91:0b:03:6c:c9:1c:54:0f:42:d6:5c:71:
         15:a5:0b:87:1e:8d:42:34:13:fc:50:37:71:57:35:18:93:c9:
         3c:a2:ff:ca:34:6e:a6:f6:49:3c:6d:d4:cf:7a:17:b1:52:86:
         52:fb:ad:a7:dd:d7:71:1d:5d:80:e3:66:86:24:18:30:3f:91:
         26:c6:36:6c:d2:5f:02:d9:1f:7c:45:c2:44:f4:82:7f:51:56:
         8b:d2:25:07:9b:59:2b:73:92:57:e7:ba:4a:ad:8e:dc:39:e8:
         77:be:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:31 2026 by rpki-client