Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa
File:                     3131342e3139392e38302e302f32302d3234203d3e203137363731.roa (raw, json)
Hash identifier:          QcvMzfP11+MzUtUrcKvRjyPosb1C6wsEEuvZlJY2OtU=
Subject key identifier:   22:D5:54:BC:01:4F:D5:DB:E6:54:CD:2E:5F:D9:14:2E:9A:62:C3:54
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       7EC0ACEE849D90632B55FDE377805D84FDDD99AB
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:22 +0000
ROA not before:           Sun 03 May 2026 02:45:22 +0000
ROA not after:            Sun 02 May 2027 02:50:22 +0000
asID:                     17671
IP address blocks:        114.199.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c0:ac:ee:84:9d:90:63:2b:55:fd:e3:77:80:5d:84:fd:dd:99:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:22 2026 GMT
            Not After : May  2 02:50:22 2027 GMT
        Subject: CN=22D554BC014FD5DBE654CD2E5FD9142E9A62C354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:56:16:28:9d:92:15:6e:bb:50:42:92:69:
                    e4:2e:fd:79:c6:4a:f5:f8:6b:09:89:d4:a0:47:10:
                    d0:05:9a:d6:6f:32:ef:08:71:b2:78:c8:fc:90:6c:
                    f9:d1:fc:bb:80:4e:2b:67:3e:ae:c6:f7:b5:f9:c7:
                    e1:3d:60:bb:32:4d:b8:3b:c9:0c:70:ae:0e:0d:27:
                    62:81:c1:13:91:df:78:45:8b:11:e7:20:b5:62:46:
                    69:1c:30:4d:49:10:ef:27:84:f2:6b:a7:3f:5e:bb:
                    b5:2b:2f:08:b3:05:a0:7b:26:dc:e5:35:10:9a:a5:
                    4c:a8:e9:ba:b3:22:99:7d:84:fb:ad:1a:af:51:e3:
                    70:b0:00:b6:7a:66:c8:6e:80:95:93:9c:98:6f:57:
                    35:1e:c5:51:c1:1c:08:74:2c:69:0d:30:68:67:50:
                    77:7d:e7:1d:ce:87:db:38:87:65:5e:b2:6f:34:1e:
                    d0:bb:2f:22:1c:98:b7:1d:73:b8:34:9b:d8:a2:34:
                    6e:dc:92:95:5d:9c:03:cc:72:b2:17:35:79:9f:d4:
                    26:5c:66:4c:86:09:f7:8c:38:16:51:c0:c9:a8:7c:
                    70:6b:a3:8d:dc:72:6d:b8:12:1e:98:87:2e:f0:0b:
                    74:90:48:0b:63:8a:d6:7a:e2:cb:1c:2a:04:3a:cd:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:54:BC:01:4F:D5:DB:E6:54:CD:2E:5F:D9:14:2E:9A:62:C3:54
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32302d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:86:91:a2:98:2c:03:b4:00:10:f9:0e:8f:33:e3:a3:86:b9:
         ee:c9:cd:c0:4a:c2:df:00:dd:9d:bd:80:4e:42:7c:be:09:26:
         60:60:49:86:37:5b:25:f5:ec:ff:b0:54:58:90:a3:14:33:74:
         f2:3e:77:59:73:2a:2b:8b:fa:b8:98:85:c8:b5:1d:87:2e:ef:
         9d:96:c2:0a:ba:a1:88:40:57:ed:c2:a4:5a:60:06:e0:10:2e:
         79:c4:cb:08:50:32:5d:b1:53:4f:39:14:17:90:1c:36:f7:10:
         f3:88:5a:ab:ac:48:7e:46:76:0e:68:4e:92:1c:87:28:c0:57:
         9f:6d:15:fc:b4:5f:01:b6:9b:93:92:cc:1e:45:23:86:5e:42:
         c4:14:d1:cd:06:79:0b:82:02:54:6b:48:d5:15:62:c3:46:df:
         87:3e:f3:35:35:54:86:f7:7f:ac:a7:0e:a3:88:43:fe:07:9a:
         ee:14:d4:08:7b:aa:5b:f5:5b:94:12:03:d3:58:f9:da:4e:ee:
         76:2c:5c:65:96:50:1b:e5:c4:f7:ab:fc:0c:34:e4:89:4f:7d:
         ab:bf:39:49:60:98:ea:28:ac:5f:ce:e5:cf:7f:b4:33:d1:ef:
         69:cc:37:68:3c:f9:9c:f2:d1:b1:dc:46:bd:ae:96:4f:e3:5c:
         6b:a2:00:d0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfsCs7oSdkGMrVf3jd4BdhP3dmaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E1NDdGMDA1RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhF
OEU0NDY0NDAeFw0yNjA1MDMwMjQ1MjJaFw0yNzA1MDIwMjUwMjJaMDMxMTAvBgNV
BAMTKDIyRDU1NEJDMDE0RkQ1REJFNjU0Q0QyRTVGRDkxNDJFOUE2MkMzNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nVYWKJ2SFW67UEKSaeQu/XnG
SvX4awmJ1KBHENAFmtZvMu8IcbJ4yPyQbPnR/LuATitnPq7G97X5x+E9YLsyTbg7
yQxwrg4NJ2KBwROR33hFixHnILViRmkcME1JEO8nhPJrpz9eu7UrLwizBaB7Jtzl
NRCapUyo6bqzIpl9hPutGq9R43CwALZ6ZshugJWTnJhvVzUexVHBHAh0LGkNMGhn
UHd95x3Oh9s4h2Vesm80HtC7LyIcmLcdc7g0m9iiNG7ckpVdnAPMcrIXNXmf1CZc
ZkyGCfeMOBZRwMmofHBro43ccm24Eh6Yhy7wC3SQSAtjitZ64sscKgQ6zSPBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUItVUvAFP1dvmVM0uX9kULppiw1QwHwYDVR0j
BBgwFoAUylR/AF6Egj5qikcXI8FxaOjkRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGNlYmYxMTYtZmUyYS00OTFiLWFhYzgtMjIwZWFkMGI1NGUyLzAvQ0E1NDdGMDA1
RTg0ODIzRTZBOEE0NzE3MjNDMTcxNjhFOEU0NDY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQTU0N0YwMDVFODQ4MjNFNkE4QTQ3MTcyM0MxNzE2OEU4RTQ0
NjQ0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODMwMmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHLHUDANBgkqhkiG
9w0BAQsFAAOCAQEAUYaRopgsA7QAEPkOjzPjo4a57snNwErC3wDdnb2ATkJ8vgkm
YGBJhjdbJfXs/7BUWJCjFDN08j53WXMqK4v6uJiFyLUdhy7vnZbCCrqhiEBX7cKk
WmAG4BAuecTLCFAyXbFTTzkUF5AcNvcQ84haq6xIfkZ2DmhOkhyHKMBXn20V/LRf
Ababk5LMHkUjhl5CxBTRzQZ5C4ICVGtI1RViw0bfhz7zNTVUhvd/rKcOo4hD/gea
7hTUCHuqW/VblBID01j52k7udixcZZZQG+XE96v8DDTkiU99q785SWCY6iisX87l
z3+0M9Hvacw3aDz5nPLRsdxGva6WT+Nca6IA0A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:51:19 2026 by rpki-client