Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa
File:                     3131342e3139392e39332e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          WSE7UWYQTgkjs2gMsQiNrdNfMxdKJX+27h0VvNOSsU0=
Subject key identifier:   B9:44:52:7C:6B:16:35:35:CD:4A:4B:0E:93:5B:3B:92:59:87:B9:8D
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       6DC22E6300D1089994C48B473D779D78B792EF76
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa
Signing time:             Sun 03 May 2026 02:50:19 +0000
ROA not before:           Sun 03 May 2026 02:45:19 +0000
ROA not after:            Sun 02 May 2027 02:50:19 +0000
asID:                     17671
IP address blocks:        114.199.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c2:2e:63:00:d1:08:99:94:c4:8b:47:3d:77:9d:78:b7:92:ef:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: May  3 02:45:19 2026 GMT
            Not After : May  2 02:50:19 2027 GMT
        Subject: CN=B944527C6B163535CD4A4B0E935B3B925987B98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:ff:6c:11:83:7a:cb:aa:8e:22:a6:ee:bb:
                    45:15:9d:53:fd:af:22:d7:5d:fa:f4:b0:a0:ae:28:
                    b4:47:54:64:54:20:3f:61:96:9b:6b:b2:58:ca:49:
                    77:92:fa:d3:c5:10:2c:1a:49:11:ec:9b:30:58:a1:
                    b4:d5:7d:1b:96:c0:c8:d4:2f:90:8b:1e:48:35:ce:
                    6e:7b:8d:77:8e:c8:7f:cc:4f:99:c6:62:91:94:6d:
                    62:65:ee:e3:6f:92:21:4f:db:14:7d:f3:d6:d2:ff:
                    c9:4a:17:bb:be:64:85:9f:ea:75:d9:b6:af:98:35:
                    a1:21:03:7e:17:cd:bc:72:bd:5d:ad:7d:bf:4c:bb:
                    c6:9c:85:44:75:0b:31:7a:54:3f:33:ba:b4:8c:c3:
                    62:4e:68:ed:6b:ae:84:ca:71:c7:7e:83:12:34:2f:
                    34:e7:8d:2c:0f:38:3e:93:2e:8e:76:5f:37:5e:e7:
                    37:44:1a:a8:17:85:01:6f:4a:7e:11:89:59:d6:a4:
                    8f:39:1c:6b:f8:49:41:b6:08:b4:e4:51:72:40:69:
                    c4:bf:e1:12:d3:9c:f0:10:b9:a9:9c:b7:0b:17:2d:
                    ff:e0:bd:c9:14:47:b6:76:67:ce:f5:5d:bd:fb:de:
                    d4:da:de:b4:f6:09:31:ed:92:a5:74:7e:44:d3:e6:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:44:52:7C:6B:16:35:35:CD:4A:4B:0E:93:5B:3B:92:59:87:B9:8D
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:95:6b:92:a2:2a:e8:0a:43:b2:71:01:1c:aa:00:99:cd:
         38:c9:4e:cd:c2:e8:59:61:19:1d:af:02:20:fa:25:7b:a4:87:
         d5:a1:f3:18:35:03:9b:df:d1:75:cc:81:67:45:73:15:ca:7b:
         3d:cc:f9:1d:f0:44:3b:4a:02:71:92:30:89:7c:76:37:ea:88:
         9c:1d:23:d6:a7:7b:45:32:1d:b1:7d:45:33:4f:c4:ee:d2:3e:
         53:c3:6e:9f:61:8f:a0:53:4a:2f:85:80:25:29:c8:a0:37:2f:
         d9:7d:0a:ab:82:91:69:f7:28:94:19:f0:d9:83:96:19:e4:62:
         22:f4:ac:ab:a2:40:2d:8d:59:30:97:1b:03:16:fe:1a:bb:c7:
         a4:33:69:32:57:f6:c4:01:26:3b:15:0e:d1:29:4a:c8:17:8a:
         bd:ba:0d:2b:cf:65:8c:91:c3:38:0d:1c:06:bb:2b:95:dd:c0:
         c1:01:70:b2:e1:6f:3e:96:30:f4:36:53:69:28:ad:c5:12:7a:
         77:27:53:81:7c:5a:3e:27:82:7b:a4:66:72:22:ac:87:78:79:
         2d:8b:22:dd:00:ae:66:b4:32:9f:ba:3b:a5:7e:7e:c1:fd:1e:
         eb:ea:dd:5e:c6:28:7b:7b:16:00:39:a6:b0:f8:ad:ca:89:b4:
         d9:04:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:17 2026 by rpki-client