Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e39382e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          aPQSp6uz6aYCb4p39Lcl8L0TPTCivuEZ97PxGL5NLP8=
Subject key identifier:   E1:3B:61:61:33:F0:FF:EB:32:1C:14:9F:14:38:4C:5E:9A:DF:52:28
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       62D298721A96BA19812713A0704C4407D6A118FB
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32332d3233203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:57 +0000
ROA not before:           Sun 03 May 2026 03:03:57 +0000
ROA not after:            Sun 02 May 2027 03:08:57 +0000
asID:                     24525
IP address blocks:        114.199.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:98:72:1a:96:ba:19:81:27:13:a0:70:4c:44:07:d6:a1:18:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:57 2026 GMT
            Not After : May  2 03:08:57 2027 GMT
        Subject: CN=E13B616133F0FFEB321C149F14384C5E9ADF5228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:ce:b5:2b:4b:45:d9:a9:5f:b9:6e:37:28:
                    cc:a3:9c:25:24:9d:43:c0:0b:e2:63:b8:45:79:aa:
                    67:c3:d8:42:2a:a7:80:3f:40:fc:87:6b:9c:4a:04:
                    aa:42:e8:bf:cc:ce:7c:4c:67:bd:e3:d2:ae:2b:76:
                    db:75:f4:d8:0a:fc:96:77:92:78:2e:68:37:d0:70:
                    c8:af:0b:3b:6d:4d:fc:61:0e:4d:a4:f3:23:4d:4d:
                    7c:4c:f8:5b:34:3e:40:60:73:17:6c:d2:dd:46:d3:
                    25:4b:e9:88:04:13:f7:89:5d:6a:e5:c6:24:e8:e1:
                    42:81:52:d4:b7:f5:6b:59:75:83:58:f5:e5:3e:dd:
                    b7:ac:f2:e9:b1:c3:f6:dd:84:fe:e4:35:35:57:a0:
                    10:d3:11:b0:4c:b6:36:6a:27:5f:ef:16:79:4f:8f:
                    a4:ab:f5:ad:fd:74:6d:9b:52:a4:ae:e2:e4:ed:11:
                    51:36:a9:af:b7:97:53:bc:5b:29:df:a1:10:b3:de:
                    3c:78:92:1d:c2:af:54:3e:ff:70:b2:63:0b:3b:d6:
                    72:42:52:ca:d4:d4:4f:5d:ff:80:27:f0:c5:37:68:
                    6f:c0:11:04:a7:da:08:cc:0b:f1:e4:33:ae:fd:98:
                    98:a2:30:b7:78:84:82:a4:27:e3:ce:10:be:9d:21:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:61:61:33:F0:FF:EB:32:1C:14:9F:14:38:4C:5E:9A:DF:52:28
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:23:97:d3:05:7d:66:51:19:c0:04:8a:ab:3d:93:8b:c8:f9:
         d7:37:5c:c2:52:70:65:95:9b:73:2a:92:9e:9d:ab:52:4a:ec:
         9a:49:e3:68:e0:64:a4:cb:cc:66:68:96:a2:a3:85:b9:e1:3e:
         d3:5d:d2:b8:8e:b9:f3:53:c2:33:d9:83:fc:75:77:0b:17:d7:
         93:be:09:c3:9d:aa:23:23:63:2c:11:4c:bb:0c:47:f0:27:36:
         b6:76:16:b2:7c:5a:b9:19:24:be:12:52:c9:7f:9e:6f:ab:37:
         3a:7c:61:96:98:1a:c6:10:48:41:f9:b7:6a:ab:3f:9a:e2:df:
         07:aa:e2:69:0b:5e:c7:e8:2c:ce:96:0f:11:cf:a8:88:39:96:
         41:e6:8b:0f:fa:63:36:ab:72:6f:cf:a0:4f:71:92:d4:f5:6a:
         04:fc:bb:59:06:4a:d6:12:19:d9:7d:59:87:f3:ba:df:cc:34:
         56:2f:c1:44:fc:91:00:ce:b2:5c:a0:b7:a2:18:f1:7d:ce:3a:
         1b:67:27:7e:8a:a0:39:dc:29:a9:0f:8d:16:03:6d:b8:5c:6b:
         8a:0e:4b:a0:0c:15:94:98:4d:cb:e9:68:da:bb:e0:dc:f1:21:
         49:48:30:c6:cf:a4:b1:35:d6:32:76:ae:f6:07:5f:52:6a:f7:
         cd:e6:40:00
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYtKYchqWuhmBJxOgcExEB9ahGPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzNTdaFw0yNzA1MDIwMzA4NTdaMDMxMTAvBgNV
BAMTKEUxM0I2MTYxMzNGMEZGRUIzMjFDMTQ5RjE0Mzg0QzVFOUFERjUyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCug861K0tF2alfuW43KMyjnCUk
nUPAC+JjuEV5qmfD2EIqp4A/QPyHa5xKBKpC6L/MznxMZ73j0q4rdtt19NgK/JZ3
knguaDfQcMivCzttTfxhDk2k8yNNTXxM+Fs0PkBgcxds0t1G0yVL6YgEE/eJXWrl
xiTo4UKBUtS39WtZdYNY9eU+3bes8umxw/bdhP7kNTVXoBDTEbBMtjZqJ1/vFnlP
j6Sr9a39dG2bUqSu4uTtEVE2qa+3l1O8WynfoRCz3jx4kh3Cr1Q+/3CyYws71nJC
UsrU1E9d/4An8MU3aG/AEQSn2gjMC/HkM679mJiiMLd4hIKkJ+POEL6dIfRVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4TthYTPw/+syHBSfFDhMXprfUigwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzOTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXLHYjANBgkqhkiG
9w0BAQsFAAOCAQEAECOX0wV9ZlEZwASKqz2Ti8j51zdcwlJwZZWbcyqSnp2rUkrs
mknjaOBkpMvMZmiWoqOFueE+013SuI6581PCM9mD/HV3CxfXk74Jw52qIyNjLBFM
uwxH8Cc2tnYWsnxauRkkvhJSyX+eb6s3OnxhlpgaxhBIQfm3aqs/muLfB6riaQte
x+gszpYPEc+oiDmWQeaLD/pjNqtyb8+gT3GS1PVqBPy7WQZK1hIZ2X1Zh/O638w0
Vi/BRPyRAM6yXKC3ohjxfc46G2cnfoqgOdwpqQ+NFgNtuFxrig5LoAwVlJhNy+lo
2rvg3PEhSUgwxs+ksTXWMnau9gdfUmr3zeZAAA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:27:27 2026 by rpki-client