Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e2034373837.roa
File:                     3131342e3139392e3132362e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier:          IT+S38nFXudrM5zHrnwSayOt4xVnmDgZXY6YMLTVcGQ=
Subject key identifier:   D5:10:D5:3D:61:B9:9C:22:33:42:A6:68:CD:CB:67:BE:29:B1:37:6E
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       5BD76EFDF449B72E48625E5F86348B6756E360EA
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 03:08:38 +0000
ROA not before:           Sun 03 May 2026 03:03:38 +0000
ROA not after:            Sun 02 May 2027 03:08:38 +0000
asID:                     4787
IP address blocks:        114.199.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d7:6e:fd:f4:49:b7:2e:48:62:5e:5f:86:34:8b:67:56:e3:60:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:38 2026 GMT
            Not After : May  2 03:08:38 2027 GMT
        Subject: CN=D510D53D61B99C223342A668CDCB67BE29B1376E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:fb:3d:84:20:e6:17:49:83:fd:87:b1:4c:
                    82:31:aa:c5:ff:69:5c:5a:a0:86:31:52:f3:a0:49:
                    45:e8:e9:13:a0:2c:15:48:c3:c9:92:dc:c2:44:dc:
                    5b:a9:09:9e:a9:4e:78:32:6b:60:b1:6c:2b:2e:ca:
                    0a:77:68:21:43:4b:2e:23:64:11:3c:21:9b:79:f9:
                    eb:4d:8d:11:94:35:5b:5b:8b:fc:31:52:95:9c:12:
                    45:5d:6c:a2:2f:df:d0:f2:d9:65:ef:7f:13:19:55:
                    2c:15:5c:af:6d:df:a9:ff:1e:19:35:b5:52:c3:a1:
                    79:86:f8:74:fb:63:1d:4d:c6:a2:09:73:27:ff:bd:
                    98:7b:38:a0:3f:ef:3f:fb:0f:30:80:6b:2b:ed:51:
                    46:dc:13:13:cf:02:43:b1:27:8f:f1:bc:9a:dd:f8:
                    18:d8:f0:c3:6a:4c:3d:7e:d3:ef:8d:4f:29:61:61:
                    d8:d3:a9:d1:6d:ea:76:c8:df:1d:31:82:a3:01:67:
                    9d:dd:fa:75:4b:6e:7e:df:8b:d8:14:61:a5:72:c9:
                    b5:a7:da:68:d5:f0:f5:11:b9:f8:2b:25:c6:93:cb:
                    44:b9:ff:fd:ed:e9:ed:9f:29:aa:0c:91:7c:eb:ca:
                    22:24:a7:ae:03:05:b8:f5:61:c8:37:77:7b:34:f0:
                    53:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:10:D5:3D:61:B9:9C:22:33:42:A6:68:CD:CB:67:BE:29:B1:37:6E
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:87:5e:f8:e7:69:11:4f:7a:36:69:56:90:8e:46:d3:a0:88:
         b2:bb:ed:f7:32:f0:9f:ad:f3:63:3e:09:2a:01:82:44:c8:15:
         d2:2f:87:68:b8:62:8f:f0:90:e0:44:c5:9f:04:2e:d1:f7:40:
         3b:21:0a:d1:82:d9:18:71:23:d4:81:da:8a:53:75:54:69:b7:
         8b:32:c7:bc:0e:c8:de:2d:73:6f:c7:67:6e:89:74:d5:2c:8a:
         a8:1b:71:dd:6f:b2:74:bb:46:34:cc:48:b6:3f:1c:ab:ef:c1:
         18:01:8e:bc:ea:1d:df:bd:43:98:51:ef:ae:06:f1:85:73:90:
         cb:5e:ff:e8:a8:c5:18:6c:3c:b5:e2:34:36:3f:c8:27:79:ce:
         75:59:7a:04:85:ac:6f:87:4c:ca:fa:e4:c3:04:af:9f:dd:f2:
         d3:6b:cd:39:e6:b2:5c:83:1d:26:1b:c4:ab:60:1e:a7:ad:e8:
         4b:b3:47:d6:9c:fe:20:59:f9:1f:10:4a:e4:ab:dc:26:42:f6:
         65:31:c9:1c:95:be:d5:a7:30:f5:d4:51:81:b3:58:79:52:60:
         75:a9:3f:79:13:82:14:ee:43:ad:b8:14:74:36:de:2e:29:d8:
         cc:0a:a4:13:e5:9e:5b:c9:81:7a:af:3f:52:8d:ad:2c:b2:ac:
         f7:2a:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:44 2026 by rpki-client