Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa
File:                     3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier:          hxx+zzHOfgExTL55vay0L0ndhv+lLqpVmio5aDK8mOs=
Subject key identifier:   47:53:1C:88:26:59:83:5F:D5:7D:44:3E:C4:64:4A:9C:94:17:60:37
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       62AEB22A03DEA8CDEDE4B719EAAC52C8A81DD1E0
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:35 +0000
ROA not before:           Sun 03 May 2026 03:03:35 +0000
ROA not after:            Sun 02 May 2027 03:08:35 +0000
asID:                     24525
IP address blocks:        114.199.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ae:b2:2a:03:de:a8:cd:ed:e4:b7:19:ea:ac:52:c8:a8:1d:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:35 2026 GMT
            Not After : May  2 03:08:35 2027 GMT
        Subject: CN=47531C882659835FD57D443EC4644A9C94176037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:fd:43:a8:43:0f:5b:7b:98:d6:5f:a8:f6:
                    10:07:7d:20:eb:9e:bc:db:15:d9:a3:ec:9e:aa:7c:
                    9a:84:6d:74:42:7e:1b:4c:29:41:69:b1:cc:f7:d8:
                    97:d6:cc:2e:b3:85:f6:64:20:4a:eb:00:3c:2b:4a:
                    54:03:01:f7:67:69:45:6b:2e:e1:c4:81:11:a6:28:
                    c9:fb:91:e6:fb:57:a1:8a:30:e5:5d:39:ab:54:43:
                    32:27:4c:ef:a9:dd:ee:d9:91:af:16:af:8a:a7:10:
                    c1:b2:43:af:6e:9f:30:4a:e1:b5:7a:0a:dc:44:17:
                    d0:77:14:72:9d:2e:02:88:06:7a:bf:a1:8f:76:05:
                    a9:9a:bd:6c:bc:9d:0f:0a:d5:1b:eb:86:f3:1d:a3:
                    52:1e:f7:15:af:c4:a0:2d:28:3c:f0:0a:dd:3d:19:
                    57:de:3a:79:bc:59:7d:6f:63:91:91:d3:38:f7:ff:
                    bc:0b:a8:49:43:14:56:69:9b:67:1c:e3:0a:34:16:
                    1f:39:8c:c3:e5:2e:aa:4a:6d:d4:56:40:a4:73:1c:
                    f8:ee:7e:a6:28:ec:7d:af:78:c3:48:33:c4:20:db:
                    47:a2:4d:dd:9b:5c:5b:6c:fc:fe:e0:0a:a3:ea:e2:
                    f0:34:44:5a:fe:aa:e0:a4:da:9b:1f:8c:78:b7:9e:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:1C:88:26:59:83:5F:D5:7D:44:3E:C4:64:4A:9C:94:17:60:37
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:37:28:1a:88:1d:62:6d:7c:6a:de:4e:55:4f:1a:3f:18:
         15:fd:49:84:14:bf:a2:41:69:23:b7:e4:03:cc:02:04:ea:d9:
         5e:5b:82:61:c1:13:c9:a5:7a:27:25:d0:3a:30:e7:11:e1:8b:
         f7:94:02:76:aa:19:ab:6f:b6:dd:c2:c9:62:6d:9a:86:c2:05:
         f3:53:62:9c:c6:8c:42:14:c9:6d:1d:db:5b:19:76:18:ad:c2:
         a7:8b:ea:d1:fb:56:07:3f:ca:a2:1c:57:3e:f2:a2:64:92:27:
         8c:ae:83:73:90:3b:8f:23:b8:2f:e6:3b:17:31:66:61:7d:49:
         2e:a8:2b:17:e7:46:c9:d1:90:22:0f:64:57:cd:87:33:0e:b5:
         bc:77:97:bf:77:a1:e6:c2:65:f9:32:75:0a:97:ef:4d:b3:c8:
         3a:d7:c3:33:9e:02:8a:5a:42:22:fd:d8:6d:d4:7e:e3:fc:ae:
         43:f1:2b:30:02:84:8c:87:9b:4d:32:70:bd:21:5f:f0:05:3f:
         1c:83:cf:22:4d:05:03:99:f8:ea:58:c8:83:69:62:65:e1:83:
         35:f2:4f:54:9e:f1:76:e7:3f:f7:bf:5a:99:a9:57:df:9d:64:
         b5:7f:58:25:b3:32:4d:ab:e4:f6:42:75:42:d8:02:aa:22:6c:
         b1:f7:a7:35
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYq6yKgPeqM3t5LcZ6qxSyKgd0eAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzMzVaFw0yNzA1MDIwMzA4MzVaMDMxMTAvBgNV
BAMTKDQ3NTMxQzg4MjY1OTgzNUZENTdENDQzRUM0NjQ0QTlDOTQxNzYwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPP1DqEMPW3uY1l+o9hAHfSDr
nrzbFdmj7J6qfJqEbXRCfhtMKUFpscz32JfWzC6zhfZkIErrADwrSlQDAfdnaUVr
LuHEgRGmKMn7keb7V6GKMOVdOatUQzInTO+p3e7Zka8Wr4qnEMGyQ69unzBK4bV6
CtxEF9B3FHKdLgKIBnq/oY92BamavWy8nQ8K1RvrhvMdo1Ie9xWvxKAtKDzwCt09
GVfeOnm8WX1vY5GR0zj3/7wLqElDFFZpm2cc4wo0Fh85jMPlLqpKbdRWQKRzHPju
fqYo7H2veMNIM8Qg20eiTd2bXFts/P7gCqPq4vA0RFr+quCk2psfjHi3nkyvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUR1MciCZZg1/VfUQ+xGRKnJQXYDcwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzIyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCcsdwMA0GCSqG
SIb3DQEBCwUAA4IBAQC/MjcoGogdYm18at5OVU8aPxgV/UmEFL+iQWkjt+QDzAIE
6tleW4JhwRPJpXonJdA6MOcR4Yv3lAJ2qhmrb7bdwslibZqGwgXzU2KcxoxCFMlt
HdtbGXYYrcKni+rR+1YHP8qiHFc+8qJkkieMroNzkDuPI7gv5jsXMWZhfUkuqCsX
50bJ0ZAiD2RXzYczDrW8d5e/d6HmwmX5MnUKl+9Ns8g618MzngKKWkIi/dht1H7j
/K5D8SswAoSMh5tNMnC9IV/wBT8cg88iTQUDmfjqWMiDaWJl4YM18k9UnvF25z/3
v1qZqVffnWS1f1glszJNq+T2QnVC2AKqImyx96c1
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:35 2026 by rpki-client