Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3131302e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          I833v4Ep0KKk9tVzVt7dYn9+6JK0pU7cjMfBeum43DE=
Subject key identifier:   A8:33:4E:9E:6E:80:8D:DF:32:AB:1A:85:61:3D:DF:0E:15:D8:8B:04
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       55476E91207DF0D032D5138D2145AE6C13BC1481
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:46 +0000
ROA not before:           Sun 03 May 2026 03:03:46 +0000
ROA not after:            Sun 02 May 2027 03:08:46 +0000
asID:                     24525
IP address blocks:        114.199.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:47:6e:91:20:7d:f0:d0:32:d5:13:8d:21:45:ae:6c:13:bc:14:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:46 2026 GMT
            Not After : May  2 03:08:46 2027 GMT
        Subject: CN=A8334E9E6E808DDF32AB1A85613DDF0E15D88B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:1c:80:d3:a1:eb:63:b2:07:12:1f:0f:20:
                    50:e7:b8:6b:7e:60:a6:01:12:7b:99:a2:84:d2:43:
                    45:18:6e:7d:da:05:74:0f:a5:40:bb:60:98:91:78:
                    5d:75:0c:0a:93:11:5a:03:b6:80:bb:cc:63:00:63:
                    a3:64:de:04:50:0c:0e:cf:c1:db:8a:c0:c4:0c:2f:
                    14:98:e7:a2:3c:23:61:1b:d1:55:8d:eb:5f:00:7f:
                    f0:dc:e1:79:14:bf:0d:d4:5c:8d:a1:b6:23:fc:b0:
                    b2:d2:68:98:51:f6:31:31:dc:00:ee:4c:a1:75:e7:
                    02:07:77:d5:c4:da:61:ce:32:73:fe:7a:03:51:d0:
                    17:69:96:30:49:a7:0a:3a:ff:91:d6:35:36:12:b4:
                    d8:6d:98:88:c4:2e:da:86:47:5f:14:78:78:9d:41:
                    35:3a:59:25:e5:c0:62:61:11:67:e5:64:d2:71:4f:
                    93:46:61:54:6a:77:60:bd:22:a9:c0:cb:1d:68:15:
                    27:e9:1f:23:08:e4:26:53:f5:ff:8e:bc:6b:ea:05:
                    fa:22:50:53:3d:47:91:77:92:37:ca:8d:91:44:b0:
                    e2:ff:6d:8a:2e:1f:e5:55:80:7b:a0:76:0e:00:5e:
                    62:f2:a1:46:34:4a:a6:10:6a:f2:88:76:c8:7c:ce:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:4E:9E:6E:80:8D:DF:32:AB:1A:85:61:3D:DF:0E:15:D8:8B:04
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131302e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:aa:02:eb:01:23:8c:3c:80:73:a5:16:6f:94:9a:70:d0:51:
         24:93:01:82:64:f5:4a:6f:b8:df:de:15:0c:99:99:06:39:66:
         33:92:a8:bc:eb:4f:e1:df:fd:5a:38:aa:39:be:84:9d:5a:4b:
         37:38:40:f2:c2:65:12:4f:bb:e9:c2:51:55:81:42:90:22:9e:
         1e:dd:1e:bb:c2:56:d1:a9:07:73:4b:60:16:ca:ea:e4:8a:e4:
         ea:ae:19:96:cc:12:53:40:af:11:a3:8a:da:78:6d:16:f6:c9:
         9c:67:73:fa:17:b1:79:cb:d0:aa:08:2b:41:c5:b0:77:40:a5:
         7b:ec:02:8c:42:a1:f6:2d:54:02:8c:16:99:15:7d:af:88:15:
         45:b5:11:22:b7:5a:67:47:07:18:a9:b6:87:f7:68:61:e9:74:
         a9:9b:23:a7:59:5f:eb:7b:f8:c5:9c:84:0e:3a:86:65:63:e3:
         a4:dc:4d:0e:4e:ac:50:ca:6d:cd:20:60:0d:88:98:8b:34:d9:
         5d:7e:c0:96:6d:64:0b:41:19:6b:f3:6a:66:9f:5e:f3:00:c7:
         b3:51:5a:f0:78:e8:28:37:ad:ce:d7:c3:eb:42:50:5b:e1:50:
         30:6f:f4:c5:09:f2:8e:d9:75:d7:2d:20:40:d8:67:5e:b3:a7:
         fa:dd:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:27 2026 by rpki-client