Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3130382e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          WVdDqZW8jLjLOWdygePq0D+lM7AIQa8gHkhWAQzI4O4=
Subject key identifier:   0A:64:24:F5:E4:87:44:AA:5C:04:99:55:12:DD:79:93:AA:81:FD:4C
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       4B41D4F3C2470587ABC45C8B30D94DE9FB8B2B95
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:58 +0000
ROA not before:           Sun 03 May 2026 03:03:58 +0000
ROA not after:            Sun 02 May 2027 03:08:58 +0000
asID:                     24525
IP address blocks:        114.199.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:41:d4:f3:c2:47:05:87:ab:c4:5c:8b:30:d9:4d:e9:fb:8b:2b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:58 2026 GMT
            Not After : May  2 03:08:58 2027 GMT
        Subject: CN=0A6424F5E48744AA5C04995512DD7993AA81FD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:71:ce:ba:91:ec:cd:ad:cf:05:ba:ab:fe:
                    32:3e:4f:cc:41:c5:ae:26:cf:a8:69:73:f8:56:a1:
                    c4:d8:ab:fa:42:e1:64:51:03:ef:37:4c:06:52:37:
                    ff:2d:20:9a:bd:13:63:05:eb:e6:4a:ea:4a:7e:8e:
                    bb:5d:16:f3:8a:c4:40:29:c6:0d:b0:3d:db:af:f8:
                    c5:6a:5c:a2:f8:25:b8:4f:62:6d:2d:ea:57:9d:cf:
                    6f:9f:52:8b:3f:31:e6:05:50:a4:fa:67:b8:39:2e:
                    78:38:ca:fa:03:02:ef:9c:5d:2d:c4:a1:c8:94:3b:
                    25:94:3b:80:d5:38:57:7e:18:4f:ae:a5:c8:0c:b2:
                    90:0c:5f:51:38:a5:04:2c:3d:cd:57:c5:11:f8:c5:
                    40:20:d5:d5:b1:18:7a:65:fb:41:68:c2:32:e4:db:
                    5c:65:6a:5f:9d:95:a6:4c:ff:56:54:9b:1d:91:00:
                    87:05:f1:cc:03:25:fd:e9:cc:c8:b3:bb:1b:72:f0:
                    1b:95:8a:ff:26:5f:18:8e:16:4d:43:ab:69:fc:d5:
                    a3:52:69:78:22:fa:ed:a6:c6:5c:4a:9c:67:66:ed:
                    9b:fb:87:a6:60:b9:cc:ee:7b:3e:19:07:59:16:e2:
                    2e:14:d8:8a:29:8b:9e:45:90:4c:f7:7a:ac:10:39:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:64:24:F5:E4:87:44:AA:5C:04:99:55:12:DD:79:93:AA:81:FD:4C
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130382e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:24:48:69:8d:40:51:48:42:4b:d6:e5:e3:ed:28:91:6c:7b:
         17:6e:36:52:95:24:06:04:51:62:d6:76:4c:75:50:c8:73:99:
         4e:19:f0:ae:48:c1:dc:31:1b:35:f7:c3:73:a2:93:58:59:01:
         df:38:e6:99:57:b5:62:4b:89:5f:7b:7a:a9:03:ea:a4:89:38:
         92:cb:4a:d0:19:fb:24:c7:c0:b5:89:15:92:af:ea:46:ba:45:
         ce:b2:35:bf:7b:a0:aa:2e:a7:ec:1c:45:13:9c:26:e9:33:6e:
         c8:92:99:72:0e:3a:62:70:95:57:55:e7:e6:82:5c:ee:d5:22:
         a7:c4:a0:19:c9:33:c0:0b:9e:bf:fb:e7:3c:63:b1:80:a5:f4:
         a7:df:6b:81:d3:40:97:6a:2b:0c:19:eb:53:e7:5d:77:25:d9:
         20:c7:ac:2d:41:c5:38:b4:14:57:58:80:01:a7:bd:17:c6:97:
         dd:10:7f:8a:ec:02:b2:1b:85:7c:7d:8d:2c:23:19:f9:62:73:
         9f:92:52:ab:a4:b3:bd:18:f9:5f:4f:b0:ae:44:66:8e:e6:2c:
         d3:20:93:35:77:d3:94:04:03:9f:8e:61:3b:2d:cb:61:de:73:
         9c:3d:f4:7b:61:7d:3a:93:aa:f0:d0:37:c0:15:5e:0c:56:b3:
         e2:79:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:12 2026 by rpki-client