Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          tLpuYVfyn9HFGGj4E00RgAw1halAD214fY9gpsYky1U=
Subject key identifier:   86:9B:F5:84:D4:E4:40:5D:4B:5F:A3:34:74:2D:5A:C2:B1:3C:A0:9E
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       30041EE2C7A740D32BE82EAC08A74BDFE1D94389
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:40 +0000
ROA not before:           Sun 03 May 2026 03:03:40 +0000
ROA not after:            Sun 02 May 2027 03:08:40 +0000
asID:                     24525
IP address blocks:        114.199.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:04:1e:e2:c7:a7:40:d3:2b:e8:2e:ac:08:a7:4b:df:e1:d9:43:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:40 2026 GMT
            Not After : May  2 03:08:40 2027 GMT
        Subject: CN=869BF584D4E4405D4B5FA334742D5AC2B13CA09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:64:bb:61:72:a5:c8:7d:53:e1:4b:e2:82:
                    5e:9d:be:e7:f7:3d:c7:56:71:b8:b4:df:cb:d1:17:
                    95:fd:24:33:c9:5b:43:43:e5:e2:86:7e:49:9c:e4:
                    92:5f:1f:c8:b8:29:a2:10:f9:5a:d5:4a:98:ab:fc:
                    75:db:50:27:11:c0:9c:e1:17:41:34:b5:50:f3:0f:
                    60:0a:db:4a:df:e0:5d:e3:27:4a:16:b8:bd:72:22:
                    0a:3d:91:57:c0:53:4b:4b:73:c4:57:d3:45:ce:67:
                    ac:a9:af:ee:5c:75:1d:06:67:ec:42:2c:cc:95:36:
                    a6:99:80:0d:45:0e:77:ce:0b:72:47:a9:d0:b6:a5:
                    ba:87:60:2a:c2:db:8d:c3:00:7f:b4:79:ba:69:06:
                    ab:b1:2d:38:a0:b7:59:f2:b6:ad:40:d7:54:e6:5e:
                    5c:75:95:59:51:48:60:cc:ea:b2:ff:b6:d4:b1:88:
                    e3:c5:52:02:d8:b9:7f:ae:bc:9d:81:d5:b9:2c:82:
                    56:db:cf:d5:47:bc:32:d7:5c:6a:bd:96:98:50:d8:
                    33:5a:88:32:a4:e0:90:20:b9:bd:d6:49:27:8b:e5:
                    b9:2d:e9:b6:e8:33:22:fc:77:74:4d:21:47:36:02:
                    bc:95:87:ff:56:52:18:7d:27:07:85:c8:84:56:c4:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:F5:84:D4:E4:40:5D:4B:5F:A3:34:74:2D:5A:C2:B1:3C:A0:9E
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:c7:5f:75:91:ab:27:04:a6:d9:32:30:22:60:eb:b4:ac:
         4e:83:38:8b:cf:e9:b7:da:29:e0:c6:7e:d5:54:86:87:1e:41:
         59:c9:3f:a7:fb:82:76:7b:d4:b5:84:f1:cc:95:41:96:a2:fe:
         9a:fe:90:b6:90:57:9d:48:82:82:79:d0:97:6b:eb:60:92:6a:
         e2:22:33:98:d6:ba:44:c6:b1:e6:5e:ef:f0:8d:e5:4b:84:33:
         66:72:c4:55:b9:f5:21:39:a0:ce:cd:2f:d0:95:d0:81:11:f6:
         a3:88:78:f8:c9:b7:a5:e9:e3:12:c2:70:57:ac:d4:bf:43:0c:
         89:a5:45:d0:ff:aa:e3:42:d3:85:a5:aa:a7:f6:0e:43:7d:42:
         eb:55:d3:1e:ea:e8:1e:bc:78:8e:02:53:88:21:f1:90:9b:65:
         85:86:34:40:7a:5e:f3:15:a5:2d:30:d2:a2:92:da:0a:d5:9e:
         f4:2d:e0:48:31:06:2a:8a:d7:3e:c7:39:be:ca:ef:2e:70:28:
         92:3d:28:bb:76:df:a7:a7:38:7b:e5:86:46:c0:27:04:65:09:
         f2:fc:ec:31:7b:31:ba:93:ba:5f:1c:90:b2:85:4e:3a:0e:bd:
         95:66:2b:2a:d0:4a:72:30:ef:6e:2a:7a:60:e3:db:4b:f4:df:
         60:ec:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:18 2026 by rpki-client