Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132332e302f32342d3234203d3e2034373837.roa
File:                     3131342e3139392e3132332e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier:          9jdP+xlke8x9h8qji25ABzjeTwVYgFLvMrsY4fn7DCI=
Subject key identifier:   DD:FA:30:40:97:84:14:D9:25:49:1D:1E:40:E1:48:B6:45:22:ED:15
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       0B0E8EAA0B9D099D063EB0F6671D3E3378549E79
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132332e302f32342d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 03:08:44 +0000
ROA not before:           Sun 03 May 2026 03:03:44 +0000
ROA not after:            Sun 02 May 2027 03:08:44 +0000
asID:                     4787
IP address blocks:        114.199.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0e:8e:aa:0b:9d:09:9d:06:3e:b0:f6:67:1d:3e:33:78:54:9e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:44 2026 GMT
            Not After : May  2 03:08:44 2027 GMT
        Subject: CN=DDFA3040978414D925491D1E40E148B64522ED15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:e5:bf:ae:20:e0:8a:15:08:5c:4d:13:b0:
                    f0:ee:76:1b:62:97:3e:eb:c3:6c:d1:b2:a3:fa:f6:
                    a7:c6:3b:2e:73:26:54:7a:88:b4:80:3b:eb:76:dd:
                    e4:dd:c5:95:c2:3b:dd:3c:f9:5c:7e:d3:82:a1:69:
                    fc:8f:5b:32:35:44:b7:9c:1c:9f:5d:bd:2d:4d:38:
                    0d:fc:f3:14:28:44:65:dd:b3:a9:57:81:b9:28:65:
                    63:77:0f:81:ed:75:80:84:9d:c9:1c:6e:62:91:b8:
                    c7:8e:2d:5a:06:1d:d2:55:d8:47:29:3d:6f:e2:bc:
                    b5:2d:26:33:af:94:6b:11:09:c4:79:38:6b:dd:6b:
                    ba:97:72:57:46:92:3b:86:6f:b3:8a:5c:b8:da:e7:
                    b5:66:ee:2a:70:2a:69:b1:a6:cc:7b:73:3c:cd:b8:
                    b7:6d:3c:c6:70:ed:e6:5f:58:77:11:8a:21:aa:8f:
                    21:92:62:b2:d1:1a:8a:d2:48:37:27:c1:cd:cd:a0:
                    63:01:41:e8:7b:cd:1b:40:fc:d8:3e:53:d0:11:e5:
                    79:d2:ab:ac:01:31:e7:92:4f:42:39:c7:92:09:17:
                    28:21:b5:f4:d5:50:6a:19:a6:c9:70:84:77:55:3e:
                    23:7e:5a:56:ab:aa:e1:fd:e1:18:79:be:83:fb:77:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:30:40:97:84:14:D9:25:49:1D:1E:40:E1:48:B6:45:22:ED:15
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132332e302f32342d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:ca:56:69:30:d0:01:f3:07:1a:f8:84:27:6a:62:95:c3:95:
         70:8b:40:a9:b1:92:5c:70:60:04:1e:b2:35:19:da:63:61:48:
         00:0b:2d:58:6d:96:f4:25:0d:b6:e5:e1:f5:3b:e4:59:dd:39:
         95:88:0a:16:8c:0f:2c:0f:dc:59:37:25:c9:4b:22:ae:7b:60:
         91:cd:e5:a1:c9:34:c8:20:21:16:b6:79:75:12:79:f8:05:b8:
         17:c9:ac:32:ff:7c:72:65:44:5e:f5:b0:64:d2:fc:98:e2:f6:
         bb:a9:fc:e5:f3:f5:b3:53:1f:7a:e8:0b:99:bb:0e:26:a7:3a:
         8a:6d:39:d3:8d:e5:cd:07:b0:04:0c:3e:76:f4:ac:3b:b7:29:
         d3:45:39:45:1a:ce:5f:1b:76:7c:db:8f:a4:6d:ce:e9:ce:db:
         de:99:bb:d1:56:98:6c:52:cd:c3:98:f6:a7:81:85:77:d4:ad:
         2a:39:09:42:62:e7:13:11:6b:de:63:dc:62:7e:7e:f3:07:14:
         a8:bb:71:61:0e:a7:6a:83:a8:05:64:e0:85:6e:93:7c:99:62:
         91:2f:6f:46:21:b0:de:1d:20:ad:24:e8:ec:22:42:b1:ec:ea:
         02:ca:89:fe:60:1f:87:57:50:23:a2:38:a7:8b:04:22:c5:5b:
         ef:56:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:41 2026 by rpki-client