Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
File:                     3131342e3139392e38332e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          +uJgz0sDMIfnw57gWdBM6vRMBwFWiywFgZF65UnT2SQ=
Subject key identifier:   C1:7F:4A:AF:BE:1B:46:75:44:26:D2:88:91:4E:42:5F:75:29:7F:8C
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       70BCCC52066F3431F137F7F56C835C27A96CDC81
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:06 +0000
ROA not before:           Sun 03 May 2026 02:45:06 +0000
ROA not after:            Sun 02 May 2027 02:50:06 +0000
asID:                     17671
IP address blocks:        114.199.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bc:cc:52:06:6f:34:31:f1:37:f7:f5:6c:83:5c:27:a9:6c:dc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:06 2026 GMT
            Not After : May  2 02:50:06 2027 GMT
        Subject: CN=C17F4AAFBE1B46754426D288914E425F75297F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:d0:67:9c:5f:42:aa:0f:de:14:bb:48:28:
                    d4:67:d5:02:28:62:cd:fa:22:fb:90:07:d1:67:c8:
                    70:8a:6f:82:f9:4d:1d:bb:d4:aa:c4:e5:3e:bb:ff:
                    81:19:61:98:16:07:44:23:61:43:da:b8:78:81:67:
                    16:b3:67:11:34:fd:47:61:6c:b1:5d:6d:16:04:3e:
                    0f:98:40:06:f7:27:a5:69:6e:18:f9:64:a7:cc:27:
                    15:29:76:8c:87:7b:a0:37:cd:13:56:b1:af:55:a3:
                    28:d9:b9:88:5c:bd:e6:b6:74:2c:f9:d2:0b:68:13:
                    45:b8:b7:a5:b7:d0:4d:0c:d9:22:64:ce:e8:28:42:
                    bf:59:42:42:d3:7e:5b:10:78:d4:12:e9:a5:de:c2:
                    ef:ec:c4:84:d2:cf:85:27:f4:ad:35:98:eb:7b:01:
                    a8:6c:f3:fd:0d:ca:1f:72:fc:34:e1:61:15:0a:13:
                    2f:d1:fd:7a:55:3e:c9:91:bd:e3:b8:9d:12:e0:e0:
                    8f:d3:93:a6:27:f1:48:12:6b:35:ed:bd:a1:df:d4:
                    13:3e:ff:64:22:47:c1:f6:43:6b:17:d5:2a:ca:ee:
                    cf:03:9a:1a:1f:d9:63:7c:7e:e1:3a:d8:52:c2:93:
                    37:17:2c:4b:6c:ed:cb:da:72:3a:75:a9:00:61:39:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:4A:AF:BE:1B:46:75:44:26:D2:88:91:4E:42:5F:75:29:7F:8C
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38332e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9f:33:09:5f:99:ad:7b:6a:6d:64:8c:e1:74:8d:8d:c3:3a:
         69:4e:95:46:c9:51:28:c9:39:a3:8f:f0:f0:5c:8d:f9:99:8c:
         2c:8d:b7:74:9f:b9:3b:00:df:82:a1:71:13:67:0e:e5:8d:9e:
         16:a2:b6:8e:68:ae:24:55:d1:c0:49:65:c3:bb:da:23:61:a0:
         e7:cf:2a:13:ef:cf:23:eb:8d:b0:de:19:41:61:5e:bc:3b:c4:
         0f:d9:95:40:7a:30:78:2a:69:08:ab:68:eb:24:82:cb:2b:23:
         e3:9c:53:99:93:a9:13:b1:e5:b5:9b:38:42:12:2d:90:7e:42:
         21:10:ae:16:8b:49:0b:20:29:e1:49:fc:22:43:3c:71:ce:1a:
         14:70:b5:aa:c5:12:2a:f1:51:bb:01:b8:71:49:2e:54:ec:1b:
         68:28:40:38:c0:c2:62:df:06:6c:ff:67:3d:ef:1b:7f:4f:ff:
         55:da:3b:6d:e5:a0:fd:cf:db:ef:79:13:28:b7:ff:66:8b:93:
         35:fe:b6:c0:1f:0b:b8:52:00:5f:2a:99:54:61:8a:d6:b6:ca:
         72:52:76:45:34:a7:60:5e:3b:c3:19:b2:1c:e7:45:3f:77:92:
         19:3c:20:d1:8a:fe:8b:a7:e5:7a:e0:5f:e0:83:c6:71:3f:12:
         f8:d5:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:17 2026 by rpki-client