Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          g0+m3rc6dEXfjexbR8lKg+3s4SpjgZDR9pJi5N6IoXk=
Subject key identifier:   62:8B:2B:30:0C:22:31:17:46:D4:ED:E8:C5:E4:86:61:CF:03:91:96
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       71A4A6C8FCF6B25A571B218B67A03200E3DBEB50
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:45 +0000
ROA not before:           Sun 03 May 2026 03:03:45 +0000
ROA not after:            Sun 02 May 2027 03:08:45 +0000
asID:                     24525
IP address blocks:        114.199.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a4:a6:c8:fc:f6:b2:5a:57:1b:21:8b:67:a0:32:00:e3:db:eb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:45 2026 GMT
            Not After : May  2 03:08:45 2027 GMT
        Subject: CN=628B2B300C22311746D4EDE8C5E48661CF039196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:65:6e:02:bf:72:e4:27:e2:79:b6:d2:5b:
                    2a:39:38:7c:1f:cb:c0:dd:ac:9b:71:0a:7d:1d:2c:
                    a7:21:c8:37:88:5d:5e:3a:d6:80:8c:f3:1c:ab:c5:
                    c5:f9:91:67:5d:04:43:68:4a:51:72:52:8f:27:06:
                    57:26:80:b5:91:c7:72:f1:6c:6a:f8:1f:cd:c7:fc:
                    a9:ca:c6:ec:e3:9d:44:61:29:4f:7b:71:3a:f9:62:
                    11:13:0e:8e:ff:0d:a8:5c:05:87:c8:42:f4:42:89:
                    06:60:87:e7:1b:96:99:fc:fd:aa:86:2f:ac:d1:53:
                    30:55:11:1a:5e:0f:d2:40:21:57:fd:fe:4c:52:7c:
                    98:61:a3:f9:1b:22:31:12:13:73:a9:d3:f7:d5:5b:
                    f8:cf:9f:1d:e9:e6:5e:4b:ee:f3:96:93:0b:d0:dc:
                    bf:28:1b:54:c5:22:c0:96:82:65:c6:c4:b9:67:85:
                    21:f3:f3:11:77:25:6f:a5:0d:2d:7d:ee:45:17:c1:
                    4f:9e:66:76:44:14:e3:a2:1c:9c:db:03:83:bd:dd:
                    88:08:c7:59:97:33:02:48:aa:4d:c7:26:a4:69:a2:
                    2b:b6:3a:5f:c6:dc:4c:28:5d:e5:e9:b5:df:2d:d6:
                    4f:82:65:22:31:d7:2b:7d:8e:5c:b8:bf:56:63:aa:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:2B:30:0C:22:31:17:46:D4:ED:E8:C5:E4:86:61:CF:03:91:96
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:38:ed:95:f5:be:f2:0f:62:8e:d9:3e:65:0f:5c:ef:2f:
         be:0f:2f:05:89:77:33:9f:55:ed:7b:e9:f4:65:7a:f2:4f:2e:
         2d:fa:58:8f:2a:66:e4:25:d7:ee:14:32:74:62:f6:bb:dc:25:
         3f:41:b6:d4:a7:6b:eb:65:95:5a:e7:7a:93:6e:99:9d:85:78:
         3b:12:1c:51:01:b1:4f:dc:8b:e6:25:1a:4e:30:d9:52:48:f8:
         3e:07:e0:35:20:3b:fe:93:bb:79:4f:e6:89:17:c5:49:89:34:
         01:bc:c4:9d:d1:ae:33:81:ab:5a:58:67:d0:2d:9a:96:50:f7:
         53:f3:3c:1f:99:e5:3b:af:0f:2d:8a:3c:31:d1:06:a6:07:41:
         2c:44:d6:1f:2e:58:8c:b0:a0:13:90:76:ea:3f:9a:01:22:77:
         d8:e9:70:8a:92:35:06:09:25:31:ec:42:81:f1:c6:ac:f9:3d:
         ff:45:77:07:ff:d5:7f:60:43:0a:f2:c6:ca:92:40:0e:0c:01:
         eb:f7:72:e4:db:a4:48:5c:5e:1c:c2:c1:c5:ea:e4:9d:06:3f:
         3d:b4:e4:57:43:c5:0b:22:c0:c0:3d:0c:bd:50:8d:30:b8:c3:
         dd:bb:01:76:19:ca:6a:be:4a:27:11:f8:2e:d7:ff:ba:4e:8e:
         05:fd:c8:d7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcaSmyPz2slpXGyGLZ6AyAOPb61AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzNDVaFw0yNzA1MDIwMzA4NDVaMDMxMTAvBgNV
BAMTKDYyOEIyQjMwMEMyMjMxMTc0NkQ0RURFOEM1RTQ4NjYxQ0YwMzkxOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvE2VuAr9y5CfiebbSWyo5OHwf
y8DdrJtxCn0dLKchyDeIXV461oCM8xyrxcX5kWddBENoSlFyUo8nBlcmgLWRx3Lx
bGr4H83H/KnKxuzjnURhKU97cTr5YhETDo7/DahcBYfIQvRCiQZgh+cblpn8/aqG
L6zRUzBVERpeD9JAIVf9/kxSfJhho/kbIjESE3Op0/fVW/jPnx3p5l5L7vOWkwvQ
3L8oG1TFIsCWgmXGxLlnhSHz8xF3JW+lDS197kUXwU+eZnZEFOOiHJzbA4O93YgI
x1mXMwJIqk3HJqRpoiu2Ol/G3EwoXeXptd8t1k+CZSIx1yt9jly4v1ZjqnP/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYosrMAwiMRdG1O3oxeSGYc8DkZYwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdkMA0GCSqG
SIb3DQEBCwUAA4IBAQAJ1DjtlfW+8g9ijtk+ZQ9c7y++Dy8FiXczn1Xte+n0ZXry
Ty4t+liPKmbkJdfuFDJ0Yva73CU/QbbUp2vrZZVa53qTbpmdhXg7EhxRAbFP3Ivm
JRpOMNlSSPg+B+A1IDv+k7t5T+aJF8VJiTQBvMSd0a4zgataWGfQLZqWUPdT8zwf
meU7rw8tijwx0QamB0EsRNYfLliMsKATkHbqP5oBInfY6XCKkjUGCSUx7EKB8cas
+T3/RXcH/9V/YEMK8sbKkkAODAHr93Lk26RIXF4cwsHF6uSdBj89tORXQ8ULIsDA
PQy9UI0wuMPduwF2GcpqvkonEfgu1/+6To4F/cjX
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:01 2026 by rpki-client