Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132322e302f32342d3234203d3e2034373837.roa
File:                     3131342e3139392e3132322e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier:          jKnLCBVVbSpnMa9rNL0JyLu4lZRw6uzyKdc0OFerHC4=
Subject key identifier:   FA:83:DE:56:DC:86:81:36:77:B9:D7:83:BF:C9:78:6B:C0:AA:87:CE
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       43B18FD6E9A5A8E4D27657810980FD3974AB0A53
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132322e302f32342d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 03:08:42 +0000
ROA not before:           Sun 03 May 2026 03:03:42 +0000
ROA not after:            Sun 02 May 2027 03:08:42 +0000
asID:                     4787
IP address blocks:        114.199.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b1:8f:d6:e9:a5:a8:e4:d2:76:57:81:09:80:fd:39:74:ab:0a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:42 2026 GMT
            Not After : May  2 03:08:42 2027 GMT
        Subject: CN=FA83DE56DC86813677B9D783BFC9786BC0AA87CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:5f:53:d5:b9:a9:59:e9:85:36:93:9c:20:
                    da:b7:d6:85:02:86:19:2f:ba:fa:d2:8f:c8:60:ae:
                    cc:49:81:b9:cd:48:f8:04:62:f1:d3:0f:7f:06:89:
                    97:cf:31:a8:51:0b:25:21:4f:82:c9:dd:6c:e4:52:
                    fd:26:99:bf:42:56:49:e1:e1:9f:38:fe:10:6d:ec:
                    57:88:39:60:bd:48:65:94:53:d8:96:14:63:16:ac:
                    07:66:80:8e:1b:25:8c:d8:fc:01:a9:05:5c:63:31:
                    94:35:d1:bf:07:c8:f7:0b:88:9a:70:db:98:8b:d2:
                    74:76:90:a6:bf:3e:c2:ed:f7:03:0f:ee:57:85:46:
                    5b:b9:06:6a:17:b0:89:d1:94:09:e1:f6:61:db:2e:
                    51:e7:48:55:f5:a8:8a:ce:d6:51:bc:fa:d9:5b:d1:
                    7e:5b:a3:3b:8a:c3:ae:31:38:eb:2f:5e:f0:b5:f4:
                    b2:83:84:ea:ec:6c:c6:f7:27:f3:43:69:5b:17:26:
                    76:c1:8e:84:e1:cf:7a:02:28:b7:0d:ee:76:d2:09:
                    b7:e2:25:4a:fa:9a:12:17:57:4f:f9:a2:29:7a:e7:
                    9e:e6:52:d6:69:ab:72:59:f7:27:a4:c9:de:02:41:
                    f8:30:8a:41:cf:66:7e:d5:b6:3c:6c:7d:b9:8d:49:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:DE:56:DC:86:81:36:77:B9:D7:83:BF:C9:78:6B:C0:AA:87:CE
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132322e302f32342d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:b3:ef:7b:ad:1d:05:ee:8b:42:6b:94:81:50:f0:04:dc:
         17:6e:89:65:53:7b:55:10:45:3c:26:5a:8f:21:dd:a2:c4:25:
         ab:4d:7a:a2:9e:ad:13:5f:5f:18:f5:51:38:3e:fe:12:85:af:
         35:01:b0:b0:0e:84:ab:2e:54:d4:fd:81:df:5c:f9:44:9b:ad:
         54:70:b2:d6:a5:a2:97:ea:d8:99:e8:9b:1b:2c:1f:f3:9a:c8:
         25:ff:8b:22:48:46:59:39:38:41:a3:22:a7:c3:f7:9f:6e:db:
         41:15:ad:0a:a6:4c:a2:67:d2:9e:1f:be:9b:60:b0:fd:aa:49:
         cd:a8:e3:8b:6a:2b:62:ea:94:7e:b8:9c:61:08:78:f0:78:ae:
         9a:1a:c4:70:d3:48:35:6e:d1:db:fa:96:9f:6f:d4:33:9b:49:
         ea:30:99:06:92:09:73:1d:eb:c7:ec:e6:aa:2a:26:83:91:70:
         e6:94:7f:e4:86:1d:bf:34:ea:43:ca:6d:00:36:3f:de:66:93:
         3d:d1:25:ff:09:24:bc:59:0f:58:08:1d:e7:5c:eb:f5:f7:28:
         87:66:7e:9e:f6:0e:3b:6f:36:e9:16:86:ae:aa:ba:4f:b3:8d:
         9c:67:55:4e:57:14:23:a2:2a:68:e9:12:9d:06:75:81:55:03:
         ff:fc:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:37 2026 by rpki-client