Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa
File:                     3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (raw, json)
Hash identifier:          2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=
Subject key identifier:   DD:35:8F:B5:71:0F:0C:CD:8A:EB:B1:B7:9D:91:06:B6:02:1B:46:AD
Certificate issuer:       /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial:       7B7506851C6F2746959FD24293741AC4C189389B
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa
Signing time:             Sun 03 May 2026 02:39:38 +0000
ROA not before:           Sun 03 May 2026 02:34:38 +0000
ROA not after:            Sun 02 May 2027 02:39:38 +0000
asID:                     142362
IP address blocks:        114.141.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
                          rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:75:06:85:1c:6f:27:46:95:9f:d2:42:93:74:1a:c4:c1:89:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
        Validity
            Not Before: May  3 02:34:38 2026 GMT
            Not After : May  2 02:39:38 2027 GMT
        Subject: CN=DD358FB5710F0CCD8AEBB1B79D9106B6021B46AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:d5:d8:4f:ac:a0:57:48:68:88:ad:2a:5a:
                    6c:1c:46:0f:e4:d2:9f:d1:22:89:de:af:44:9c:e2:
                    bb:42:4b:43:a5:0a:75:4e:19:73:a4:5b:21:cf:19:
                    5c:6b:17:3a:3d:aa:73:0d:f4:1f:02:bc:b7:ca:bd:
                    bd:7f:bd:13:5a:31:65:e4:0f:48:09:57:c3:6b:cc:
                    0c:c2:cf:4f:6d:c4:d3:a6:aa:54:e8:71:4f:39:19:
                    06:84:e6:09:00:b7:c4:57:c5:39:69:52:d9:a5:c4:
                    56:30:6b:80:cd:9e:8c:a6:15:39:19:bf:ef:3a:d0:
                    c1:e2:23:ab:be:88:e8:4d:68:60:bb:47:fe:18:4e:
                    21:06:8c:05:f6:5d:7d:a8:8b:9f:00:9b:c4:b4:58:
                    ae:7a:fc:8e:4b:98:63:b3:d4:13:e3:5a:e6:d4:6d:
                    4a:b2:dc:01:ab:07:8b:63:c2:9a:5d:c9:17:53:b1:
                    e6:f6:ee:d0:ed:10:a4:fa:f4:cd:f8:af:4f:d2:38:
                    5d:eb:ca:cd:d1:c5:bb:17:fb:97:cf:2f:34:34:ad:
                    b6:34:75:44:c1:f3:06:f1:0f:30:ee:0c:b3:72:56:
                    db:7c:fc:15:51:7e:6f:40:5f:4f:a9:32:23:02:ad:
                    ed:6e:89:c5:a6:46:3b:0d:04:8d:7d:e9:83:91:20:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:35:8F:B5:71:0F:0C:CD:8A:EB:B1:B7:9D:91:06:B6:02:1B:46:AD
            X509v3 Authority Key Identifier:
                keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1b:af:e8:5b:3e:41:ee:8b:9f:04:7b:d3:86:51:60:ca:27:
         eb:ba:b5:bd:df:cd:f2:80:32:67:13:54:f2:58:12:d1:80:85:
         93:2a:f5:aa:ba:db:0e:72:29:26:f0:d1:5b:86:61:e7:47:e1:
         77:a4:7a:cd:de:d0:25:80:2e:b5:ea:b2:41:e3:cd:2b:91:1d:
         9d:6e:7e:43:26:da:92:2b:90:25:9e:80:6e:5a:63:1e:a7:9c:
         a0:20:b5:30:8a:54:73:51:15:d5:92:8b:71:fb:10:dd:8b:80:
         2c:30:50:a0:7b:63:42:d6:77:c1:78:c3:26:68:0c:21:c1:f2:
         eb:0f:3c:2f:ee:bf:67:7a:7f:38:c5:fc:49:9b:f6:5d:1c:5b:
         b0:9b:1c:ec:a7:6d:0b:24:c7:27:90:b1:f8:87:10:fc:e4:7e:
         f6:4e:aa:08:06:a2:ed:48:07:3f:19:fc:14:06:17:d5:94:b3:
         bf:df:ef:b3:83:6c:34:f4:d8:c1:34:d8:58:38:d6:89:4e:70:
         7c:9e:26:3c:4d:ee:7e:46:98:7b:b7:9e:a9:45:40:ae:b3:51:
         ad:84:9a:c2:b1:7d:0d:63:a5:7c:3c:bf:19:0d:a3:39:01:bc:
         c6:00:0f:45:ba:11:72:16:00:81:b1:ca:b7:ca:2d:5e:65:63:
         ed:cc:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:11 2026 by rpki-client