Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa
File:                     36312e31342e3234382e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          zD92u6Min98HVJeZex8glTuo6oTtW1kOFyne3wFcWiQ=
Subject key identifier:   FF:5F:71:FB:DB:87:7D:9C:CD:88:E9:60:AE:59:CA:45:70:B0:9A:4E
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       0E86E59D8EE88B29074D7217947DF346AF5E51B2
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:01 +0000
ROA not before:           Sun 03 May 2026 02:54:01 +0000
ROA not after:            Sun 02 May 2027 02:59:01 +0000
asID:                     63501
IP address blocks:        61.14.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:86:e5:9d:8e:e8:8b:29:07:4d:72:17:94:7d:f3:46:af:5e:51:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:01 2026 GMT
            Not After : May  2 02:59:01 2027 GMT
        Subject: CN=FF5F71FBDB877D9CCD88E960AE59CA4570B09A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:d6:ca:ee:e2:3b:ef:9f:36:00:80:a9:ad:
                    70:92:73:df:2d:9e:c7:3e:42:9f:cd:9f:10:66:d8:
                    cd:b8:94:86:57:4b:82:cd:5e:9a:e6:50:92:88:22:
                    15:a9:22:a1:e3:50:d3:d0:a1:c4:ab:0e:6b:96:cf:
                    7b:48:2f:46:25:fa:0d:3f:79:e2:ac:9c:04:2d:ea:
                    c2:be:fa:f1:82:cd:4a:40:57:18:cc:11:e4:dd:92:
                    a3:8a:52:80:44:d0:fb:3f:b9:61:57:30:8a:fa:d9:
                    75:a8:fe:db:1f:b1:34:08:26:19:bb:9d:bc:a9:77:
                    63:90:62:ab:7b:ca:3f:17:f1:d4:9c:56:e3:53:ef:
                    43:9e:c8:07:ac:f3:e8:02:a2:d6:05:bd:2e:ae:11:
                    99:00:01:9c:81:eb:97:70:ed:00:3f:f6:38:15:f4:
                    be:d1:02:b1:00:85:be:5a:50:68:04:5a:a0:3d:f4:
                    1f:c1:55:f0:76:72:c0:cd:41:0c:a0:5d:34:10:0a:
                    fc:c9:32:7a:17:47:12:27:d5:bf:b2:85:cc:14:6a:
                    e2:54:15:e3:0f:32:c7:ed:53:6a:ee:78:8c:48:e6:
                    63:56:e5:d2:33:ad:8a:2d:df:52:07:a8:9b:1c:80:
                    2d:b8:34:1c:7a:b1:94:6a:ca:f6:4c:c4:e6:86:ff:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:71:FB:DB:87:7D:9C:CD:88:E9:60:AE:59:CA:45:70:B0:9A:4E
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:aa:39:6a:0b:47:2d:12:0a:f6:40:30:fd:2a:d0:a0:35:f9:
         83:d6:9b:59:77:8d:04:13:f4:0b:77:df:3d:88:60:f5:67:77:
         27:4c:e7:41:18:84:07:ef:f8:07:25:cb:ac:43:b1:a9:41:f9:
         39:fe:29:4b:e2:2c:2e:05:60:b7:02:28:d0:62:26:85:c5:ea:
         7f:28:55:fc:42:53:5d:1c:89:8b:ce:bf:24:b6:aa:2f:58:2d:
         49:38:68:fa:34:46:83:2a:76:5a:76:9b:3b:75:a1:ab:e5:cf:
         d0:19:d0:c9:8f:e9:db:e8:84:64:ce:bb:d4:76:c0:ad:91:ed:
         b0:8c:58:31:b5:eb:34:be:d8:35:6e:0a:c2:68:30:44:00:77:
         70:79:55:ce:c8:30:db:eb:dc:31:22:3d:06:01:de:f0:dd:19:
         ef:a3:27:d0:40:53:1c:20:94:10:84:70:c6:d0:9f:a1:03:23:
         81:b3:f9:bc:64:de:fc:7b:42:91:b8:7e:f6:2a:d7:e5:8a:c8:
         bf:c5:2f:bd:36:ac:ed:d7:ce:12:01:d2:f6:46:8f:f3:40:c0:
         b2:f2:ab:71:22:96:5c:7c:4c:fa:30:12:e4:75:fb:c5:86:9f:
         53:26:1e:aa:6b:04:ec:7e:37:2c:5c:e7:58:2b:2c:28:65:5d:
         9f:a5:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:26 2026 by rpki-client