Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          U404pZNz0FmB0P3CNbaRYQcMwtnfGAXkbVfEKKlzX7A=
Subject key identifier:   3A:94:A4:01:D2:92:3E:61:24:F5:37:0E:B3:4D:97:86:54:D9:40:23
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       51E945E3338BA0BBE24DE729470B94ABBAA6120A
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:48 +0000
ROA not before:           Sun 03 May 2026 03:03:48 +0000
ROA not after:            Sun 02 May 2027 03:08:48 +0000
asID:                     24525
IP address blocks:        114.199.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:45:e3:33:8b:a0:bb:e2:4d:e7:29:47:0b:94:ab:ba:a6:12:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:48 2026 GMT
            Not After : May  2 03:08:48 2027 GMT
        Subject: CN=3A94A401D2923E6124F5370EB34D978654D94023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:b6:d8:7d:83:c9:54:b3:80:0f:e5:4f:fc:
                    e5:0f:d4:b7:79:83:e8:d0:76:ac:4d:b5:ed:7a:c7:
                    9f:72:0d:43:30:57:c1:16:11:61:5e:2f:5e:86:b6:
                    a7:dc:56:04:9d:16:92:14:04:61:08:e6:8b:cb:aa:
                    c8:7b:7e:cc:28:a9:4d:dc:3c:80:54:ab:51:a7:d6:
                    2e:33:e9:3f:b4:4e:d8:45:ee:92:54:b8:77:64:98:
                    85:7c:65:75:ea:7d:b2:1f:6b:f7:a0:7c:88:df:b7:
                    d4:35:d2:88:b6:23:89:1e:d8:d6:ff:e2:4e:30:99:
                    72:f4:2c:22:b7:44:78:f1:f0:78:ba:ca:bb:03:7a:
                    8a:f1:6d:fa:f0:be:0c:1d:0c:d0:16:94:ea:c9:c6:
                    e7:62:48:fb:58:c1:29:10:96:9c:7b:e0:fe:70:16:
                    37:1e:ec:f6:fc:55:99:7d:a0:b2:b1:9a:42:6f:6e:
                    64:34:00:07:7b:87:7c:16:9a:e4:fa:3c:98:4f:cc:
                    16:da:b8:1a:6c:8e:9e:f0:fb:1d:8c:2f:6f:b7:35:
                    28:2c:af:93:44:51:0d:19:53:cd:4c:5d:3b:83:33:
                    ca:c4:b0:bc:89:f3:eb:3f:58:64:a0:78:14:05:94:
                    fc:e3:d7:da:d0:54:38:52:4b:87:f3:39:ca:f7:dc:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:94:A4:01:D2:92:3E:61:24:F5:37:0E:B3:4D:97:86:54:D9:40:23
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:b7:75:15:82:ba:6a:bc:18:11:f6:a7:88:c4:aa:45:d7:
         50:b1:05:f5:55:4d:b0:1e:fb:2a:4a:6f:b8:33:83:1e:0e:30:
         66:c3:8d:76:60:09:c7:11:65:38:7d:d0:9a:7e:af:59:55:fe:
         59:8f:af:40:1c:c1:fe:63:a0:cc:fe:77:06:c0:50:e1:e9:bb:
         09:3b:ff:86:ae:f2:71:04:50:b7:ef:ae:a0:9d:0d:1d:d0:68:
         1b:2d:98:69:a3:87:2b:6e:c3:fe:60:40:79:ee:38:c6:e0:b9:
         a8:59:8f:68:ff:c0:30:40:65:d2:b9:9b:d8:9a:5d:6f:b4:90:
         98:0f:7f:96:48:1b:d1:c7:f5:22:31:fe:06:6f:12:ba:5d:d2:
         06:91:f7:5f:ef:24:8b:ff:4b:40:05:68:ca:bd:7a:06:1c:8f:
         8f:66:1f:87:63:6b:f1:4f:d9:2f:4a:37:97:b3:53:7c:a1:d0:
         17:21:1d:67:50:04:e7:c5:d9:42:6b:d9:ba:6c:5d:33:0a:dd:
         2d:fe:96:65:bb:e3:3e:55:17:e5:ce:39:e9:1c:da:c2:de:8d:
         88:2b:3a:92:f4:06:e8:2e:28:dd:92:c7:bb:bc:12:9c:88:a3:
         77:63:48:78:28:89:e9:4c:1f:d2:ae:b5:b5:c4:34:7e:c6:cc:
         66:1c:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:17 2026 by rpki-client