Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa
File:                     31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (raw, json)
Hash identifier:          HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=
Subject key identifier:   36:AB:36:F6:69:D1:C3:14:A8:5A:38:D8:EC:A1:96:38:E9:0A:A0:EF
Certificate issuer:       /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial:       0888EFFEC6C0940A00F20F5B6E574409990C1D94
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa
Signing time:             Sun 03 May 2026 03:06:25 +0000
ROA not before:           Sun 03 May 2026 03:01:25 +0000
ROA not after:            Sun 02 May 2027 03:06:25 +0000
asID:                     55653
IP address blocks:        14.102.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
                          rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:88:ef:fe:c6:c0:94:0a:00:f2:0f:5b:6e:57:44:09:99:0c:1d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
        Validity
            Not Before: May  3 03:01:25 2026 GMT
            Not After : May  2 03:06:25 2027 GMT
        Subject: CN=36AB36F669D1C314A85A38D8ECA19638E90AA0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:f0:30:b5:a2:bd:90:df:f3:05:a6:6b:da:
                    8e:04:b0:12:46:aa:32:09:f1:b7:23:c4:a1:ef:29:
                    a9:d0:2b:4a:35:92:50:80:55:01:cc:c8:12:88:3a:
                    81:8f:94:ef:84:65:9f:f1:11:15:89:d8:14:a1:24:
                    6d:30:92:e3:aa:28:d7:9b:38:d2:c6:54:ab:f8:2a:
                    a2:a9:30:e3:82:38:8d:3c:dd:2c:44:71:68:76:ff:
                    6b:92:78:0f:26:94:00:e4:4c:b0:bd:ca:7d:1e:96:
                    21:df:2b:37:8e:a4:b2:8c:11:ca:72:12:2a:f0:30:
                    5e:f4:22:b2:4b:31:12:ac:99:0b:42:3a:c9:da:c6:
                    b6:cc:e9:bb:63:81:37:a7:ad:8f:25:d0:39:3e:fc:
                    67:92:87:d2:39:4b:6c:31:08:ac:6e:2b:63:79:68:
                    4c:1e:dd:2b:5c:36:41:0f:d8:74:12:f2:b2:c2:ed:
                    f5:8c:af:d3:aa:68:f7:d0:de:ab:da:fe:9a:a9:ed:
                    b5:5b:86:5b:1e:1c:d6:46:18:03:28:a5:a8:ff:08:
                    7b:5c:af:9c:a9:59:af:13:ec:ae:18:23:a8:21:46:
                    02:d7:45:89:26:3e:d5:20:ea:e5:e8:5b:ab:67:4c:
                    9b:9c:dc:62:09:0a:22:c8:ea:73:2a:a4:ce:97:59:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AB:36:F6:69:D1:C3:14:A8:5A:38:D8:EC:A1:96:38:E9:0A:A0:EF
            X509v3 Authority Key Identifier:
                keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:ab:b9:b6:9d:29:77:13:e0:cf:fc:b8:42:44:d0:2f:01:
         51:d0:72:fc:5c:6c:2b:ed:63:6d:1c:03:33:90:48:dd:09:da:
         87:6f:56:70:7c:4a:fc:ff:f7:8a:65:b1:20:35:04:ee:36:64:
         df:8c:68:0e:4a:ab:e5:d9:19:4b:32:09:ca:29:a2:a3:14:68:
         29:52:8f:9e:c8:94:fa:a2:5e:54:9c:d6:e9:ea:5d:c9:ea:05:
         de:ec:cf:e7:34:2f:65:7d:fa:6b:d5:09:2a:01:6d:f8:63:30:
         83:03:d9:67:b6:15:1c:8f:c2:eb:49:33:85:d0:e7:ae:e3:00:
         ed:90:b6:67:1c:99:bf:fb:32:ee:bf:ae:c4:b9:74:89:57:75:
         28:dd:33:16:35:db:a1:49:9d:7e:11:40:b3:ac:ed:5f:17:eb:
         af:c1:a7:dd:68:aa:7f:c1:94:9a:82:94:fa:be:0a:34:76:07:
         b4:de:82:09:28:e0:eb:9c:d2:5d:05:93:f9:53:fa:fb:27:42:
         b9:d5:2e:ab:75:60:90:3c:db:5c:eb:dd:65:be:8c:8e:bd:bc:
         6c:be:c8:20:ee:c4:c7:0a:51:0c:a8:01:67:2a:ab:01:da:20:
         0b:f6:73:e2:65:7d:f3:8e:4c:c6:b4:04:b5:d0:a9:23:16:4b:
         cc:c1:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:50 2026 by rpki-client