Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3132342e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          JUpgpv7J7qlaFiRmgUTFsVQnG6JP6I7G2sJN9dqhJ7k=
Subject key identifier:   E6:30:82:F9:3E:B8:A5:FF:E2:99:4A:7B:48:95:DC:2A:C1:4D:10:37
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       7A2A69ED1BB6FC351F5EF2BFD1816D7BC6FE7274
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:41 +0000
ROA not before:           Sun 03 May 2026 03:03:41 +0000
ROA not after:            Sun 02 May 2027 03:08:41 +0000
asID:                     24525
IP address blocks:        114.199.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2a:69:ed:1b:b6:fc:35:1f:5e:f2:bf:d1:81:6d:7b:c6:fe:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:41 2026 GMT
            Not After : May  2 03:08:41 2027 GMT
        Subject: CN=E63082F93EB8A5FFE2994A7B4895DC2AC14D1037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:55:87:89:31:50:66:48:08:86:3a:b6:5f:
                    b8:76:96:e7:d1:79:d8:90:e6:7a:43:53:7a:40:ff:
                    70:2e:9c:8f:7c:7a:3d:a3:1d:67:2a:e7:9a:93:d3:
                    16:37:43:6a:8f:ba:3a:8f:de:19:fe:01:86:ec:b5:
                    df:36:a2:9e:e2:f8:f4:39:49:6a:6d:20:e6:1e:52:
                    2c:80:12:20:fa:09:48:8f:c7:4b:56:44:7a:f6:86:
                    29:fa:ee:52:12:13:14:b7:14:43:2e:36:a8:fc:d1:
                    63:8d:88:b2:30:c3:04:69:13:a4:d2:0e:a7:d7:5a:
                    0f:4f:02:a1:e7:5a:b9:67:e5:3c:ed:86:45:54:24:
                    f6:82:20:f7:d0:c9:33:fc:02:5d:58:ae:36:f7:31:
                    7e:18:f2:89:15:82:c2:a8:7c:de:2f:d2:ae:81:9e:
                    10:6e:10:5e:1c:f2:62:1d:45:ba:7f:02:59:1c:64:
                    29:63:a3:f7:74:5d:d8:47:71:12:b6:e8:c6:fa:e3:
                    75:0b:58:15:6b:4b:fd:00:51:d1:4f:5a:c4:82:b1:
                    af:6a:11:b2:46:a0:17:e8:40:8b:9f:bf:f2:07:3f:
                    3f:96:db:ce:f4:4f:28:b2:ae:94:a2:be:74:87:2e:
                    fd:4e:6c:35:6f:df:8e:ed:dd:c7:cb:67:c2:c1:92:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:30:82:F9:3E:B8:A5:FF:E2:99:4A:7B:48:95:DC:2A:C1:4D:10:37
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132342e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:0c:1b:32:fb:1b:20:be:47:ad:84:b3:1c:8e:0c:8f:7b:
         2d:06:8a:09:d0:ae:35:a8:bc:24:87:0f:d4:14:68:a7:3c:7e:
         6a:1c:be:69:4c:ce:44:a2:13:89:6c:27:65:92:ef:56:06:4e:
         25:51:48:a7:c5:d4:f3:25:76:18:9a:7f:e9:72:fa:6e:35:3b:
         d8:9a:62:35:fa:fa:70:2b:0a:89:2d:cd:22:16:50:99:d5:fe:
         51:ad:ed:43:d0:40:46:76:f1:4e:72:c5:b8:7d:80:65:c2:ec:
         44:13:02:9d:59:07:c5:ee:ed:f2:3a:50:21:41:bb:88:5c:7b:
         cb:3f:ea:9a:c7:a2:1b:6f:e9:43:9b:bf:a9:00:0f:91:4a:03:
         f9:fa:91:32:b1:44:0b:93:a4:f2:06:3c:57:fd:3b:9e:58:f2:
         9c:57:9b:0c:5f:8f:44:18:3c:8b:f6:f5:02:6d:bc:e0:3a:2a:
         e1:44:c4:34:b0:b7:43:1f:8d:f1:f1:36:9f:d5:30:a3:08:2e:
         e9:3f:3a:9f:8b:ec:6f:59:b5:d7:dc:ac:27:fa:3d:2b:ae:9a:
         39:50:c8:5c:d3:9a:0a:db:b5:0f:5b:af:9c:49:8f:34:a1:d8:
         a0:78:c3:2a:aa:e8:8f:36:59:b4:0f:dc:09:9d:13:59:24:d2:
         a5:bc:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:46 2026 by rpki-client