Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39372e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39372e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          o/hktIb3zdP5wuG3XXWCs94T3RooFn0XbO9JPW3q90A=
Subject key identifier:   98:08:67:AD:B0:0D:0D:7A:DE:F6:3F:D0:66:18:9D:9F:31:88:BC:63
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       2EDE96655FD39BBD2C5419D85A8D74F3F77546A4
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39372e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:35 +0000
ROA not before:           Sun 03 May 2026 03:03:35 +0000
ROA not after:            Sun 02 May 2027 03:08:35 +0000
asID:                     24525
IP address blocks:        114.199.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:de:96:65:5f:d3:9b:bd:2c:54:19:d8:5a:8d:74:f3:f7:75:46:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:35 2026 GMT
            Not After : May  2 03:08:35 2027 GMT
        Subject: CN=980867ADB00D0D7ADEF63FD066189D9F3188BC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:fc:4d:af:7b:cc:f5:aa:42:83:56:8a:92:
                    b4:1b:8a:ae:00:82:fd:6d:c8:0a:b0:d1:8c:fa:56:
                    44:7b:bc:6c:09:84:ba:d0:25:c4:81:9a:01:9c:eb:
                    f1:b1:f2:f7:2e:e2:1e:6f:ca:eb:6e:6d:e0:7c:07:
                    ec:6a:00:c7:91:fe:80:46:39:8b:12:3d:70:41:a1:
                    16:f9:70:be:92:a6:13:a5:3d:a8:a6:3f:bd:0c:45:
                    20:c5:69:74:c4:02:4e:7a:52:aa:ea:78:32:e5:90:
                    3c:44:3d:0f:ea:6d:54:57:d3:01:aa:e9:40:8a:b4:
                    b6:e6:7e:e9:4f:14:33:c0:7c:a4:70:ea:22:a7:0e:
                    c7:71:8d:91:db:4d:09:ff:58:c4:b2:a2:74:b5:23:
                    9b:e1:a9:54:79:64:4b:e1:e6:fc:04:27:d6:68:df:
                    1d:ac:ac:42:7d:9b:45:6d:65:fa:ef:b9:d0:64:be:
                    70:a2:84:e3:88:63:ae:9e:71:ec:c5:ae:89:f6:de:
                    31:16:ce:2b:97:8d:74:5e:ac:8c:10:25:95:e0:67:
                    f6:ca:c9:e0:80:23:c8:bd:59:7e:cb:d3:17:c5:1e:
                    b0:ce:74:f0:7a:52:68:27:92:23:3c:af:5f:5b:18:
                    40:f1:1a:2f:a9:fa:aa:95:ca:2a:b9:89:f9:f0:82:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:67:AD:B0:0D:0D:7A:DE:F6:3F:D0:66:18:9D:9F:31:88:BC:63
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39372e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:3b:bb:3b:65:8b:92:b0:28:96:b6:c6:6d:c2:b3:fa:b2:
         85:fb:a9:12:48:a7:83:bf:06:d3:9c:cd:8a:ad:7c:9c:61:ea:
         a8:d3:51:18:82:d4:4a:28:57:32:b2:db:5f:40:42:44:a8:07:
         3f:30:19:82:e9:dd:8a:50:b2:21:0a:e4:a4:3d:5c:79:1c:83:
         af:cf:e6:8a:21:aa:c7:a5:b8:d4:4c:3b:16:db:ae:86:46:04:
         c3:bc:f8:9c:48:37:79:7b:f0:ab:df:af:c6:ff:b0:a2:2f:91:
         8d:e4:13:50:a0:a9:dc:5e:c2:ff:4f:66:94:11:39:60:26:ca:
         53:38:3f:4a:7f:ff:2b:56:85:51:28:60:77:75:a4:36:e7:f8:
         d1:4a:e8:66:c4:b4:66:ae:5a:e0:19:19:8d:24:52:bf:90:16:
         b1:3b:40:ed:0c:17:d2:c7:07:86:66:31:34:21:2b:f0:a3:5a:
         42:0d:d1:1a:ea:60:f0:c4:6b:e7:22:30:09:84:d4:c4:66:be:
         ac:50:73:e8:aa:09:19:23:27:51:16:b3:29:9a:5c:a9:b8:ce:
         30:a0:d4:41:33:29:be:fe:49:6e:13:30:d7:24:79:f1:2c:d8:
         11:7f:8f:b7:a1:c8:b2:02:e4:22:16:c5:97:11:f1:9b:42:e4:
         6d:4f:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:59 2026 by rpki-client