Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa
File:                     3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa (raw, json)
Hash identifier:          TdRTMcNm3SpdFGUJhpnwe75KMl8XWKlGQQwpE6XpXxI=
Subject key identifier:   7A:9E:03:39:5D:D1:B8:E4:A0:3D:C5:09:34:95:EF:42:88:52:FC:90
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       0A09CBAB3F97718036DB3CD9B0D60F8BD4D967A6
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 03:08:39 +0000
ROA not before:           Sun 03 May 2026 03:03:39 +0000
ROA not after:            Sun 02 May 2027 03:08:39 +0000
asID:                     4787
IP address blocks:        114.199.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:09:cb:ab:3f:97:71:80:36:db:3c:d9:b0:d6:0f:8b:d4:d9:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:39 2026 GMT
            Not After : May  2 03:08:39 2027 GMT
        Subject: CN=7A9E03395DD1B8E4A03DC5093495EF428852FC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:73:a1:92:76:d9:79:93:36:d3:1e:60:b1:
                    66:02:b7:33:db:38:52:1b:d0:07:cf:cf:ef:6a:bd:
                    63:0c:16:24:4f:d3:35:a3:6e:50:61:d6:57:39:29:
                    f3:13:b9:35:92:c1:c3:fb:a7:44:18:03:e7:ed:81:
                    93:b9:9b:d9:91:05:25:67:a1:ac:0c:36:0e:64:9a:
                    e8:5b:57:97:79:11:5a:ca:5f:34:06:7b:41:8f:36:
                    de:f4:53:2c:a7:a1:9d:08:d5:4e:71:2d:0b:40:bb:
                    fb:2d:2c:b3:9f:a5:a7:c1:45:7e:1e:f5:74:8f:5b:
                    ac:4a:a0:09:02:99:e3:1b:c0:11:c3:f3:a9:d2:5d:
                    37:39:73:01:a7:9d:5c:b2:2e:30:eb:4f:8e:15:b4:
                    fd:26:c5:62:9a:5a:84:d7:06:65:38:c3:b8:6e:45:
                    62:7a:9a:fd:98:2e:8d:95:c8:23:46:90:ef:6c:e5:
                    fb:09:8a:6f:bc:32:64:39:e5:ee:f5:e6:04:48:17:
                    dd:97:ef:39:2b:8a:fa:0a:31:13:de:6c:fd:ba:82:
                    af:bc:16:69:08:06:f7:53:4c:3d:e0:bc:12:69:1d:
                    71:f6:d9:42:68:cb:74:62:d1:2c:80:16:55:74:68:
                    80:b5:17:4b:13:79:3f:7e:42:d9:1e:9b:54:3a:26:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:03:39:5D:D1:B8:E4:A0:3D:C5:09:34:95:EF:42:88:52:FC:90
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:fc:16:cf:95:01:a0:a7:f9:30:04:26:c7:4e:57:60:d9:
         69:d2:b0:43:e9:e2:4e:bc:d0:3a:33:d2:5d:d7:fa:f4:63:64:
         2c:90:3b:ef:99:6a:d8:f5:b0:a7:6d:71:96:7c:05:d7:d0:4b:
         a2:11:30:8b:4f:f8:3d:a7:ad:5f:84:86:55:73:b5:3e:57:3f:
         1e:a0:2d:18:b6:a9:72:41:a8:35:00:c2:ca:f5:44:d9:13:ca:
         f2:80:23:71:41:31:23:9e:c3:27:7f:ed:db:ac:e5:48:19:28:
         6f:07:f5:44:47:d4:cf:57:db:46:70:25:98:cb:e9:1c:50:f5:
         cf:2d:4f:e7:6c:c6:a5:d9:59:f1:28:b7:9c:a0:3d:2b:23:5f:
         02:71:b7:b7:e6:b7:15:a0:91:44:b1:f3:9e:76:3d:5d:50:25:
         2a:ef:84:00:be:8e:a7:f8:8e:af:f4:d3:eb:75:8e:47:92:56:
         0b:2a:a4:d9:7e:8f:05:7c:47:14:e5:b7:3f:8c:65:52:6d:72:
         26:c8:f1:10:91:5c:a6:9d:f9:3b:33:2d:3b:2a:9a:f6:dd:92:
         ea:b8:99:24:33:47:e3:ef:df:6a:df:d8:33:d0:52:31:e1:f0:
         eb:df:7b:bd:c2:8c:6f:b1:ef:a5:3b:50:b2:40:48:a6:1f:d4:
         e9:a9:d5:bc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCgnLqz+XcYA22zzZsNYPi9TZZ6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzMzlaFw0yNzA1MDIwMzA4MzlaMDMxMTAvBgNV
BAMTKDdBOUUwMzM5NUREMUI4RTRBMDNEQzUwOTM0OTVFRjQyODg1MkZDOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwXOhknbZeZM20x5gsWYCtzPb
OFIb0AfPz+9qvWMMFiRP0zWjblBh1lc5KfMTuTWSwcP7p0QYA+ftgZO5m9mRBSVn
oawMNg5kmuhbV5d5EVrKXzQGe0GPNt70UyynoZ0I1U5xLQtAu/stLLOfpafBRX4e
9XSPW6xKoAkCmeMbwBHD86nSXTc5cwGnnVyyLjDrT44VtP0mxWKaWoTXBmU4w7hu
RWJ6mv2YLo2VyCNGkO9s5fsJim+8MmQ55e715gRIF92X7zkrivoKMRPebP26gq+8
FmkIBvdTTD3gvBJpHXH22UJoy3Ri0SyAFlV0aIC1F0sTeT9+Qtkem1Q6JieNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUep4DOV3RuOSgPcUJNJXvQohS/JAwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzIyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHLHcDANBgkqhkiG
9w0BAQsFAAOCAQEADQ38Fs+VAaCn+TAEJsdOV2DZadKwQ+niTrzQOjPSXdf69GNk
LJA775lq2PWwp21xlnwF19BLohEwi0/4PaetX4SGVXO1Plc/HqAtGLapckGoNQDC
yvVE2RPK8oAjcUExI57DJ3/t26zlSBkobwf1REfUz1fbRnAlmMvpHFD1zy1P52zG
pdlZ8Si3nKA9KyNfAnG3t+a3FaCRRLHznnY9XVAlKu+EAL6Op/iOr/TT63WOR5JW
Cyqk2X6PBXxHFOW3P4xlUm1yJsjxEJFcpp35OzMtOyqa9t2S6riZJDNH4+/fat/Y
M9BSMeHw6997vcKMb7HvpTtQskBIph/U6anVvA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:32 2026 by rpki-client