Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          +tdA3tPWVUuJXtXFK2+X2qm29wHFAzRqLMCzvjYBTLU=
Subject key identifier:   4A:4C:7B:9F:A1:EF:6E:CB:9E:13:4B:80:FB:2C:CC:A3:56:26:0D:04
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       3C8136266D3D72DCC7100775A430EFB75C7A9DF9
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:55 +0000
ROA not before:           Sun 03 May 2026 03:03:55 +0000
ROA not after:            Sun 02 May 2027 03:08:55 +0000
asID:                     24525
IP address blocks:        114.199.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:81:36:26:6d:3d:72:dc:c7:10:07:75:a4:30:ef:b7:5c:7a:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:55 2026 GMT
            Not After : May  2 03:08:55 2027 GMT
        Subject: CN=4A4C7B9FA1EF6ECB9E134B80FB2CCCA356260D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:88:46:61:30:54:c3:9c:bb:03:2c:7d:6d:
                    dc:50:9f:5c:f6:0f:26:67:c8:e4:f1:0f:d6:d4:ee:
                    ba:30:94:d6:4e:de:4c:d8:fe:ad:d3:c0:99:6c:2f:
                    8d:50:ed:ad:a1:35:0f:e4:36:eb:af:43:51:72:76:
                    e4:97:02:9b:a1:1f:cd:4e:22:4e:94:36:03:65:c8:
                    75:c5:e1:96:d7:89:ca:7c:9b:f9:f3:46:64:4f:a4:
                    de:fd:7e:1d:eb:f1:a0:ae:e3:1e:a7:9c:23:51:d8:
                    fe:06:c4:80:f0:74:e2:c5:6b:10:b4:10:00:de:3a:
                    17:9a:50:8b:e3:a2:01:c3:bc:bd:d7:0a:af:53:68:
                    68:93:bd:3f:08:56:92:f0:54:73:22:1e:2e:c1:1d:
                    05:b6:d1:20:79:2a:58:34:cc:98:ab:42:34:36:5c:
                    46:65:9f:c5:bc:f0:7c:c7:cc:65:70:e0:40:bb:7a:
                    fd:2a:a3:15:78:25:6a:54:10:53:82:39:01:30:01:
                    a4:c6:1b:d7:78:34:e8:9f:0e:d7:e4:f0:24:b3:c2:
                    5d:d9:00:c5:c2:63:69:9c:87:b1:3d:d8:75:a4:8d:
                    68:3f:01:e2:9a:78:31:bf:07:c1:dc:29:c0:0c:47:
                    c2:53:a9:11:79:a4:05:aa:a1:3f:e8:f8:04:9e:81:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:7B:9F:A1:EF:6E:CB:9E:13:4B:80:FB:2C:CC:A3:56:26:0D:04
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:b2:63:d8:98:3c:bb:ca:2d:ac:83:9d:86:56:0c:76:31:
         06:ce:33:ef:3c:3c:5e:08:a4:dd:f3:88:8a:8c:eb:7f:fd:cd:
         83:50:66:dc:51:82:7e:cf:4e:8f:85:ee:50:c5:de:d3:17:53:
         02:60:7d:f9:67:86:16:25:28:1c:8f:d1:c3:b0:e6:78:ca:e3:
         50:a0:1f:16:6d:16:9a:af:a4:b3:f3:3e:5a:8f:1e:8d:56:f6:
         6c:8b:01:56:46:a1:b2:fb:5a:e9:f9:1a:46:a4:17:90:c9:83:
         95:c0:7a:69:ea:04:f9:0d:ad:63:cb:a7:0d:cc:6c:0f:7d:fd:
         75:bc:5a:5b:99:78:76:19:f6:ca:34:82:fb:05:77:3c:ac:41:
         2a:86:1c:c3:47:7e:6c:59:a8:94:80:e5:71:be:b4:6b:a4:1f:
         9c:0f:4e:ab:63:bd:d8:33:fe:ba:ad:c0:25:1f:8e:d5:a4:03:
         b7:d9:e4:84:eb:26:fb:de:02:45:7a:68:a9:32:94:82:d4:d3:
         b1:a9:f5:d2:86:4e:8b:36:87:4d:09:d1:b9:fa:c5:99:51:48:
         dc:3b:14:72:46:54:b7:d6:af:f3:e0:a7:47:56:e5:08:a0:88:
         ff:a5:9d:77:38:08:2a:d3:7d:dc:d4:a6:5c:c6:a9:9b:6b:de:
         a1:bd:6b:cf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPIE2Jm09ctzHEAd1pDDvt1x6nfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzNTVaFw0yNzA1MDIwMzA4NTVaMDMxMTAvBgNV
BAMTKDRBNEM3QjlGQTFFRjZFQ0I5RTEzNEI4MEZCMkNDQ0EzNTYyNjBEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NYhGYTBUw5y7Ayx9bdxQn1z2
DyZnyOTxD9bU7rowlNZO3kzY/q3TwJlsL41Q7a2hNQ/kNuuvQ1FyduSXApuhH81O
Ik6UNgNlyHXF4ZbXicp8m/nzRmRPpN79fh3r8aCu4x6nnCNR2P4GxIDwdOLFaxC0
EADeOheaUIvjogHDvL3XCq9TaGiTvT8IVpLwVHMiHi7BHQW20SB5Klg0zJirQjQ2
XEZln8W88HzHzGVw4EC7ev0qoxV4JWpUEFOCOQEwAaTGG9d4NOifDtfk8CSzwl3Z
AMXCY2mch7E92HWkjWg/AeKaeDG/B8HcKcAMR8JTqRF5pAWqoT/o+ASegeD/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSkx7n6HvbsueE0uA+yzMo1YmDQQwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsdyMA0GCSqG
SIb3DQEBCwUAA4IBAQAG9bJj2Jg8u8otrIOdhlYMdjEGzjPvPDxeCKTd84iKjOt/
/c2DUGbcUYJ+z06Phe5Qxd7TF1MCYH35Z4YWJSgcj9HDsOZ4yuNQoB8WbRaar6Sz
8z5ajx6NVvZsiwFWRqGy+1rp+RpGpBeQyYOVwHpp6gT5Da1jy6cNzGwPff11vFpb
mXh2GfbKNIL7BXc8rEEqhhzDR35sWaiUgOVxvrRrpB+cD06rY73YM/66rcAlH47V
pAO32eSE6yb73gJFemipMpSC1NOxqfXShk6LNodNCdG5+sWZUUjcOxRyRlS31q/z
4KdHVuUIoIj/pZ13OAgq033c1KZcxqmba96hvWvP
-----END CERTIFICATE-----
Generated at Wed May 13 00:43:46 2026 by rpki-client