Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3130342e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          MOVhRuy1jA3Pa5OmoVsEbNoOr0ZqryFeMyg2a+8hAoE=
Subject key identifier:   07:C6:E5:D0:57:39:B4:46:A4:CC:6B:70:D3:DE:4F:B5:43:9E:B3:37
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       043E0441477D2806B0EE810D2C5649E44FC04DA0
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:35 +0000
ROA not before:           Sun 03 May 2026 03:03:35 +0000
ROA not after:            Sun 02 May 2027 03:08:35 +0000
asID:                     24525
IP address blocks:        114.199.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3e:04:41:47:7d:28:06:b0:ee:81:0d:2c:56:49:e4:4f:c0:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:35 2026 GMT
            Not After : May  2 03:08:35 2027 GMT
        Subject: CN=07C6E5D05739B446A4CC6B70D3DE4FB5439EB337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:d0:ea:eb:c6:7c:63:90:e6:1e:06:e4:48:
                    fb:aa:3f:47:65:b8:49:0a:53:6a:88:d4:50:dd:18:
                    59:44:ae:1c:33:a5:88:c3:0b:cd:9b:dc:91:67:a1:
                    73:95:cd:8e:5a:6a:81:52:67:cf:a1:75:25:af:46:
                    6a:15:c3:aa:6f:76:df:8f:d7:01:eb:49:c0:f1:e5:
                    75:a8:cf:4a:6c:5b:a9:a8:1e:f6:64:e5:b2:0b:4e:
                    22:8f:19:d3:e6:cc:60:71:0f:06:1a:93:41:5c:22:
                    a6:42:96:b6:62:85:bc:8e:12:13:f8:52:37:00:53:
                    d6:b9:70:6e:82:7f:cb:43:9c:1a:01:f0:30:8b:d7:
                    76:2d:43:94:a7:ce:35:c3:96:aa:aa:f1:a0:ef:58:
                    ea:bb:ec:86:54:df:2e:99:86:ab:29:be:bd:45:b6:
                    f1:21:14:11:1b:cb:b7:e3:e6:1d:01:40:8e:6b:8a:
                    86:53:8a:24:6e:94:95:29:0c:92:43:29:3b:0c:60:
                    3a:de:e7:7b:38:b5:f9:5f:60:21:2a:44:a3:de:be:
                    95:6f:be:9e:fa:ed:88:cf:b8:cb:b4:34:6a:a0:68:
                    95:20:71:55:94:b8:21:6c:b3:68:dd:86:c4:28:74:
                    5d:17:81:5b:2f:1e:15:cb:54:cd:0b:b3:17:6d:6f:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C6:E5:D0:57:39:B4:46:A4:CC:6B:70:D3:DE:4F:B5:43:9E:B3:37
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:73:c5:0b:c4:6f:8c:99:b1:67:08:d2:62:31:cb:8d:51:
         3a:fb:17:ba:a0:be:1a:e3:fd:91:dd:11:77:4e:c5:dc:a2:f5:
         79:44:06:80:4d:b5:f4:76:5b:79:de:f3:69:ec:70:c2:29:41:
         3f:f5:3f:9b:5c:ed:50:b0:cd:4f:5a:04:c5:f9:f9:97:b4:f0:
         47:41:1a:13:71:dd:fd:53:4c:f8:25:7e:4e:41:c7:be:79:13:
         f3:1c:bb:5f:ee:b8:7b:2e:e7:46:e6:9e:4b:e6:7c:a4:df:79:
         1f:1c:80:12:d6:2a:da:e9:03:63:38:21:51:a9:f7:84:b1:09:
         08:57:c5:11:aa:68:02:a6:d2:29:73:9c:cd:31:7d:09:f5:9a:
         d7:6a:2a:49:93:21:86:0d:1c:76:3d:4b:12:ef:58:62:da:b4:
         7e:ac:3b:d8:b6:20:01:91:b2:c1:a3:ec:3d:c7:75:91:db:49:
         f9:3e:38:a8:9d:95:4a:fc:51:76:b6:08:b9:74:d9:17:1d:85:
         57:d4:97:5f:27:2a:d8:0a:ce:13:79:38:09:a1:36:54:d7:45:
         3e:a6:90:84:3e:4a:ad:f6:81:bb:8b:5f:71:6a:2d:c8:be:38:
         ed:a6:20:46:b0:3f:32:f8:f7:05:4b:c0:02:11:0c:e4:45:7b:
         86:0d:3b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:10 2026 by rpki-client