Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa
File:                     36312e31342e3235302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          dE9E7ZbANE3cuBzB09y8jWgIFWj/A2L+YWRAt0X1yNw=
Subject key identifier:   88:30:F9:E9:3C:2F:1C:AF:DA:42:E0:C8:DB:63:E4:19:6B:84:F3:67
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       1C12BAF1C7FE94B555325AA0817758F2C053D521
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:01 +0000
ROA not before:           Sun 03 May 2026 02:54:01 +0000
ROA not after:            Sun 02 May 2027 02:59:01 +0000
asID:                     63501
IP address blocks:        61.14.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:ba:f1:c7:fe:94:b5:55:32:5a:a0:81:77:58:f2:c0:53:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:01 2026 GMT
            Not After : May  2 02:59:01 2027 GMT
        Subject: CN=8830F9E93C2F1CAFDA42E0C8DB63E4196B84F367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:56:27:36:c5:e2:d2:f2:e0:c4:8c:88:75:
                    d2:7e:2f:2f:f9:83:81:4b:d9:71:a1:a5:e3:82:78:
                    b3:14:41:a8:5d:ec:89:76:de:8d:d5:26:03:c1:a0:
                    9d:ff:a7:65:00:48:f6:7a:eb:30:d6:fc:20:6f:06:
                    fa:83:81:54:fc:20:22:93:b4:e3:a5:3e:7d:c6:83:
                    a1:6c:60:db:57:ef:5e:a8:50:b4:b2:02:2f:4e:33:
                    31:e6:2c:f7:0b:50:8c:de:6d:72:ff:f7:6b:76:4f:
                    3a:19:89:d7:64:78:d8:7f:0a:cf:79:da:cc:7a:5d:
                    d6:0f:2c:ce:64:bc:41:aa:bd:5f:dc:6e:d2:91:23:
                    9a:8f:ee:2f:6f:88:bc:f3:e2:43:3b:58:4f:6f:90:
                    ae:13:d4:d2:96:25:8f:9c:d6:a8:90:53:7e:1a:7c:
                    c6:19:19:01:14:2e:f4:2a:d5:a6:87:57:b8:f9:46:
                    80:dd:fe:42:a0:04:c2:d3:e4:d7:91:cc:ab:b2:b8:
                    1d:4d:5f:81:6b:40:5e:aa:94:e6:b9:46:d9:cf:8e:
                    ab:e0:c2:5b:da:b5:87:fd:75:ec:6c:a4:ef:d2:82:
                    81:21:46:dc:46:f4:1b:d8:9c:25:d1:f7:a4:8b:66:
                    d2:a6:33:f8:70:de:b3:d6:0f:fe:e5:5f:ac:27:ea:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:30:F9:E9:3C:2F:1C:AF:DA:42:E0:C8:DB:63:E4:19:6B:84:F3:67
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:cc:7d:80:25:db:89:9c:cc:d2:ed:68:46:92:18:12:17:a6:
         2b:b1:8b:49:ca:a2:f5:ae:41:c7:26:e8:40:10:51:8e:21:c1:
         82:9a:1c:77:eb:f0:7f:b0:88:20:77:de:9d:fb:2e:64:71:87:
         bf:4e:bd:65:8b:11:59:c9:42:dd:bd:3f:09:dc:d3:71:3b:5e:
         45:5d:36:35:67:a9:d9:63:f4:3c:d3:aa:e1:c3:71:0b:aa:6c:
         c7:4f:8e:65:e4:c8:b1:ab:c9:bf:1e:db:32:83:01:ae:26:72:
         b3:51:3b:6b:3d:21:ed:20:a6:70:28:0c:de:43:1b:f1:65:60:
         f1:21:71:9d:1a:8a:85:6d:d1:ef:4f:78:f1:20:01:f3:37:90:
         ad:90:28:0f:b5:7c:1e:c8:36:f0:35:de:62:47:68:82:ab:c3:
         96:89:a0:52:db:04:65:63:bb:9b:40:b1:53:9e:6f:67:a3:36:
         58:20:72:21:00:82:19:9f:ff:9e:97:aa:f3:19:be:3d:ec:4e:
         b0:dc:fb:de:5d:4a:4f:86:13:30:7a:a4:2e:50:fa:c1:2c:b5:
         8d:81:dd:4d:a9:b0:ef:e4:34:9f:dd:f0:48:90:c3:0b:5b:3a:
         a0:83:2d:87:3f:ba:57:f8:7c:4b:e8:9e:bf:a9:8d:50:e6:cf:
         a6:b9:23:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:05 2026 by rpki-client