Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39362e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          JU1tL9Iq9eK5WaLmdJGaESV8Inrt4T8ohx22l3Md5y4=
Subject key identifier:   F1:B5:05:6A:2D:08:32:B2:47:9A:8D:14:B2:D3:B3:5B:69:CA:3B:A0
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       3921A8670E299EDD499AEB0459B474BC6A7828A7
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:54 +0000
ROA not before:           Sun 03 May 2026 03:03:54 +0000
ROA not after:            Sun 02 May 2027 03:08:54 +0000
asID:                     24525
IP address blocks:        114.199.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:21:a8:67:0e:29:9e:dd:49:9a:eb:04:59:b4:74:bc:6a:78:28:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:54 2026 GMT
            Not After : May  2 03:08:54 2027 GMT
        Subject: CN=F1B5056A2D0832B2479A8D14B2D3B35B69CA3BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:c6:ed:66:5e:81:52:16:a9:fc:44:26:38:
                    92:22:54:f9:15:bb:d2:c0:86:65:b1:e9:4d:d2:1a:
                    7c:ce:df:53:d5:6f:1b:af:18:c0:88:15:cb:b0:1b:
                    86:c2:2b:fa:af:1b:4f:f3:47:0f:4e:ff:bd:f4:00:
                    60:96:c1:e7:80:fb:f4:c6:8e:39:8f:28:d8:7f:8c:
                    1b:2c:67:d4:7d:f8:e7:ae:be:16:f5:c9:4f:34:ce:
                    e9:65:08:d7:e6:9e:b9:7c:4f:e0:a8:3d:18:1b:5a:
                    e6:d1:97:4e:3c:e8:c3:8d:d4:9a:22:20:3c:ae:a4:
                    48:95:5c:c4:e2:6e:41:38:1b:a1:c7:eb:cc:07:37:
                    26:da:f2:b8:43:00:d0:a4:90:70:52:03:c8:10:9d:
                    65:05:68:10:4a:0e:17:92:0c:43:d1:4b:24:75:14:
                    65:f6:ea:15:16:cf:89:68:53:91:6c:3d:6d:14:31:
                    ef:74:d1:6f:a1:3f:66:87:7e:5d:8c:a6:2f:c5:ce:
                    20:b3:7a:77:b5:69:5b:6a:d2:be:a0:e0:a7:73:ed:
                    dc:c6:41:dd:04:fb:a0:c0:49:6c:2c:20:75:d3:4c:
                    3e:82:03:39:59:b9:46:cc:48:e6:2c:4b:4c:99:f5:
                    aa:9f:9d:d0:49:83:7d:a2:f9:ef:36:86:92:fd:5c:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:05:6A:2D:08:32:B2:47:9A:8D:14:B2:D3:B3:5B:69:CA:3B:A0
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:1d:6f:6d:de:64:e6:83:cd:95:04:c5:4b:ac:e1:03:38:
         64:a4:97:df:ef:04:99:af:09:81:4e:2c:6d:22:dd:11:a8:56:
         5c:e5:cd:ce:71:28:28:e3:c0:14:45:60:95:8c:51:54:68:83:
         eb:e6:1c:07:a5:bc:bf:8a:70:18:58:7d:9a:84:4e:2e:76:cd:
         18:d1:45:bd:90:ba:87:b1:8c:3d:8c:94:b8:15:29:89:9b:e1:
         17:e0:09:2e:b9:56:27:77:b4:6e:63:2e:9a:db:87:c1:a6:25:
         6d:f6:3d:4a:df:89:7a:c6:aa:77:d6:39:f2:8b:17:2f:70:b9:
         5b:8a:2e:10:58:35:4b:d8:42:d9:1f:31:ed:d2:ca:c1:f7:64:
         1d:c9:cb:b5:df:06:e9:13:30:df:f0:98:82:3d:d7:e6:0c:c2:
         ac:60:b5:ea:03:ad:0a:81:3b:2c:94:33:14:d9:1e:2f:06:5a:
         fc:43:76:14:39:b7:6b:a5:1f:ba:cf:c5:07:b1:5b:c5:9b:2b:
         58:a9:ac:4c:de:3b:ed:1f:5d:6b:a6:18:81:b5:9a:cc:bb:8a:
         0a:fd:72:77:a1:26:18:b0:8f:6e:52:30:06:b4:a5:53:a5:13:
         65:47:2b:3b:b1:93:cb:e1:7c:6c:b0:67:0e:8f:fe:7d:4f:61:
         c4:b2:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:47 2026 by rpki-client