Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa
File:                     3131342e3139392e39362e302f31392d3139203d3e203234353235.roa (raw, json)
Hash identifier:          9h1nrNVl38GUoCneZCisbT8/bFdZLlI+9x7ORbEiDTY=
Subject key identifier:   4F:7D:E1:64:74:FA:CB:C3:49:85:A1:E8:5E:54:A5:8E:27:DD:06:18
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       315E428F9EEF16780819C992BB0B109F480C2D69
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:09:01 +0000
ROA not before:           Sun 03 May 2026 03:04:01 +0000
ROA not after:            Sun 02 May 2027 03:09:01 +0000
asID:                     24525
IP address blocks:        114.199.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5e:42:8f:9e:ef:16:78:08:19:c9:92:bb:0b:10:9f:48:0c:2d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:04:01 2026 GMT
            Not After : May  2 03:09:01 2027 GMT
        Subject: CN=4F7DE16474FACBC34985A1E85E54A58E27DD0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:ac:02:8b:34:0a:98:93:47:37:42:25:43:
                    63:d5:aa:72:81:8a:5d:76:74:c2:b1:57:f0:04:c9:
                    69:10:4b:c0:5d:fb:1d:c7:03:c0:dc:be:a7:ea:8a:
                    81:b7:f3:bf:67:50:e8:4d:8a:88:90:b8:42:c3:99:
                    19:c2:9b:a8:09:7d:cf:a3:8a:d0:ad:80:02:7e:fe:
                    dd:b2:14:92:a4:1b:96:63:ce:c9:12:ac:2f:95:05:
                    dd:12:4d:db:71:66:ee:22:c2:52:a2:71:a4:de:36:
                    5e:b1:4c:a9:4e:9d:9f:03:73:7d:c5:f1:f0:35:f5:
                    90:d4:4a:68:8f:a3:d0:25:58:f3:77:1f:40:14:3e:
                    59:af:e4:e4:d6:80:eb:98:36:83:f7:b4:11:80:2b:
                    c2:be:36:8f:81:11:41:37:6e:e4:19:03:50:d8:b9:
                    39:78:19:b3:fd:12:5b:a5:6c:7f:16:3f:85:46:7b:
                    ee:af:cb:44:af:f9:cb:46:3f:0e:37:48:ba:bc:61:
                    82:39:ea:fd:15:50:44:c3:a0:3a:d6:6e:34:82:93:
                    47:92:eb:03:b7:c9:a8:48:ce:29:1c:85:9c:bf:aa:
                    88:e2:52:8d:5e:f5:52:18:a2:b6:f7:73:06:f6:37:
                    a4:99:3d:c6:93:06:ee:29:1d:30:95:56:1d:dc:4d:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:E1:64:74:FA:CB:C3:49:85:A1:E8:5E:54:A5:8E:27:DD:06:18
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:e1:63:f9:29:62:45:1e:a7:32:35:c7:90:c1:51:61:73:64:
         b0:f6:3a:ed:ad:c3:3f:b2:c8:29:a8:e1:a8:09:ae:c4:b8:a4:
         23:75:a9:03:19:ba:25:9d:69:46:8c:d1:04:4e:7e:fc:f8:57:
         55:a0:81:db:6d:6f:63:72:59:d7:24:9f:2d:5c:d6:31:f1:a0:
         b8:bc:e6:f9:4d:9c:51:29:c9:2a:22:a3:9c:3d:fc:e1:f4:f2:
         30:1d:ed:7a:1b:76:34:9d:6a:94:93:b4:a2:3c:8a:c5:25:9c:
         67:b5:27:0f:69:b3:16:98:72:31:92:12:b3:7f:8d:a0:63:5a:
         c2:8b:b8:85:cb:46:66:13:ed:0b:2d:4a:40:63:cb:3a:8b:77:
         23:c5:93:33:fa:01:10:d3:91:67:a5:7f:cb:5c:f6:df:12:b3:
         c9:35:4d:fe:93:f1:70:a5:26:ce:19:26:db:da:18:44:0c:d1:
         a4:14:03:9d:bd:ed:2f:73:8e:66:6e:ee:fd:6c:e0:53:25:bd:
         f6:bf:3c:05:a3:bc:b3:32:7b:f9:35:36:e0:1f:2c:be:27:ef:
         fb:f5:a8:65:78:dd:ae:eb:ab:dd:1f:9c:78:61:62:1b:1b:fc:
         7d:00:0f:88:28:1b:81:f0:e8:81:42:9a:b8:bb:f6:8e:00:11:
         7b:a8:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:42 2026 by rpki-client