Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
File:                     36312e31342e3235312e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          2KsdWfrFKH8n1+iCvD2yflZsK1zKrA1Yr64VgbNXtt8=
Subject key identifier:   E0:60:5E:23:48:0F:CA:F2:01:E5:E7:BF:4E:88:2E:AA:62:D2:61:95
Certificate issuer:       /CN=92851265D2097C47E507D8C51B1077D0979AF464
Certificate serial:       3DB4846758F88BF9260B00430F9C87F439111913
Authority key identifier: 92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 03 May 2026 02:59:01 +0000
ROA not before:           Sun 03 May 2026 02:54:01 +0000
ROA not after:            Sun 02 May 2027 02:59:01 +0000
asID:                     63501
IP address blocks:        61.14.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl
                          rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b4:84:67:58:f8:8b:f9:26:0b:00:43:0f:9c:87:f4:39:11:19:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92851265D2097C47E507D8C51B1077D0979AF464
        Validity
            Not Before: May  3 02:54:01 2026 GMT
            Not After : May  2 02:59:01 2027 GMT
        Subject: CN=E0605E23480FCAF201E5E7BF4E882EAA62D26195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:e4:b0:06:33:c4:6d:80:36:ed:8e:af:61:
                    01:5c:d0:85:bc:66:61:b9:ac:88:ce:66:06:c4:74:
                    11:44:43:45:f1:fd:2f:29:a2:ea:a2:6f:9a:fc:4c:
                    bc:ba:67:2c:89:cf:e9:44:1d:e1:c3:5c:5b:31:6c:
                    55:2f:25:6f:1e:5e:70:19:78:f1:19:9c:71:dc:d0:
                    4d:0a:df:8f:d7:bf:cd:64:b9:07:65:ed:40:38:4c:
                    bb:97:9c:2f:3a:a8:be:0f:aa:25:8b:64:72:db:c7:
                    cf:d2:0f:a8:6d:04:36:99:e4:cf:18:7c:6c:d7:3d:
                    ca:88:fe:d1:6b:88:a9:6f:3e:33:34:e4:67:51:35:
                    d6:29:31:bc:db:20:4f:65:7c:af:7b:24:4a:90:5a:
                    d2:34:fc:2f:b5:9c:15:35:e0:b6:7e:25:5b:ee:c2:
                    4d:63:13:34:c1:be:c5:6d:3f:de:ba:36:34:b6:b6:
                    7f:14:13:02:d4:f8:78:75:0c:88:ea:cf:28:d3:38:
                    b4:16:25:6d:71:49:d6:36:b9:9b:26:e2:74:80:e6:
                    31:ae:d2:e0:b6:4d:96:a2:cf:b3:7a:04:64:29:2d:
                    22:ba:cb:34:ec:f8:29:92:f2:bf:0a:77:5c:6e:d2:
                    e3:ad:8b:7c:6f:3b:2a:de:b4:83:97:f8:21:09:a0:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:5E:23:48:0F:CA:F2:01:E5:E7:BF:4E:88:2E:AA:62:D2:61:95
            X509v3 Authority Key Identifier:
                keyid:92:85:12:65:D2:09:7C:47:E5:07:D8:C5:1B:10:77:D0:97:9A:F4:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/92851265D2097C47E507D8C51B1077D0979AF464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92851265D2097C47E507D8C51B1077D0979AF464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:80:94:9f:e8:e2:ca:75:46:9b:84:5c:61:5b:21:25:6f:
         f2:f0:77:46:f2:7f:28:a6:a1:30:9f:82:28:d3:38:ca:b1:b0:
         d8:22:9a:56:07:21:53:69:f6:53:23:fd:cc:ee:98:eb:6d:6e:
         29:30:70:7b:f7:c3:cc:ea:6f:34:50:ec:c9:37:d7:af:db:99:
         4f:9e:04:53:ba:17:dc:ec:d8:23:9a:43:34:c3:d7:55:e0:f3:
         4e:8a:1c:0a:5f:f9:d8:e2:11:11:8e:15:d6:9b:0e:39:6b:76:
         f2:fb:25:b0:26:ba:bb:90:51:cd:94:b3:12:7c:25:f4:b3:fa:
         d6:85:99:7a:ed:ed:15:c0:55:91:20:87:01:e1:12:1d:f7:f0:
         3c:50:e4:f8:60:09:c7:03:6e:70:d0:b4:f3:68:36:2b:42:3d:
         b7:fb:6e:99:19:d6:bd:b0:1b:e2:2a:0c:f6:75:b2:ca:08:25:
         18:95:34:d8:31:06:ee:3b:a0:09:da:df:ba:57:8a:77:11:91:
         d8:f2:31:03:a2:ec:28:c6:f8:ac:92:6d:da:ee:e2:ed:66:ac:
         89:3e:59:42:5a:10:b4:e7:4a:5f:f5:b5:a6:76:46:6f:ff:01:
         6d:6a:b3:fb:30:e5:73:ad:10:26:b3:bf:34:c4:1c:11:64:6f:
         19:6c:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:21 2026 by rpki-client