Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39382e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          W1CtI8jeRyTjv8k+n1EOFmnR+VS2JWlBhgzGtM2EuyU=
Subject key identifier:   23:FC:A8:C7:9F:FD:3B:77:CC:82:A0:D3:30:0D:B6:17:0D:B3:C1:60
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       69F8F1CE29932E19C45BBCC79A57B542BFA8D089
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:39 +0000
ROA not before:           Sun 03 May 2026 03:03:39 +0000
ROA not after:            Sun 02 May 2027 03:08:39 +0000
asID:                     24525
IP address blocks:        114.199.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f8:f1:ce:29:93:2e:19:c4:5b:bc:c7:9a:57:b5:42:bf:a8:d0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:39 2026 GMT
            Not After : May  2 03:08:39 2027 GMT
        Subject: CN=23FCA8C79FFD3B77CC82A0D3300DB6170DB3C160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:c8:4d:22:b6:10:24:e7:f9:c1:4c:75:ff:
                    1f:9b:e0:3c:a3:86:9c:6b:55:a8:c8:ff:07:fb:ae:
                    f4:d8:00:5b:59:2f:3c:35:c6:23:0c:c4:c4:1f:39:
                    4a:fc:33:a6:0c:49:fa:d0:fb:95:80:49:b4:2e:2e:
                    b2:9b:02:01:5b:ea:9a:7c:9a:bd:56:00:66:4e:c1:
                    82:99:e3:fc:5c:ac:f5:03:a1:de:6c:3a:78:a9:e9:
                    1c:5e:c5:3f:e9:fb:86:b8:b4:a7:c8:27:39:f5:de:
                    68:f6:08:3b:7e:32:c3:58:38:a4:69:ad:81:25:7a:
                    e7:f6:fb:de:80:1c:05:8d:c9:a1:e6:c2:c1:9f:a6:
                    6e:05:e7:93:b0:5f:9f:e1:3b:47:6d:65:bb:fd:e3:
                    31:e8:41:f6:d1:a3:21:6e:29:a3:ef:11:a5:c0:80:
                    66:c5:28:26:a3:57:e8:64:4f:82:a9:65:b6:cf:ad:
                    a8:32:e7:24:d8:db:08:9c:a9:0e:8f:9e:b7:f8:77:
                    3b:12:60:e5:71:a4:04:ed:b1:75:29:cf:3e:ff:e6:
                    53:b1:10:8a:09:9d:18:fd:73:0e:ff:40:52:f8:af:
                    4b:60:64:18:df:5e:11:4f:40:e8:14:59:de:3d:e4:
                    f6:2b:82:5d:97:12:88:b6:67:f2:ec:7b:4a:6d:50:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:A8:C7:9F:FD:3B:77:CC:82:A0:D3:30:0D:B6:17:0D:B3:C1:60
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39382e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:74:db:87:16:fc:d7:e4:f2:1f:94:13:1b:09:02:e8:a5:75:
         71:bf:54:e9:62:05:da:80:50:d1:76:00:bb:75:cd:e1:00:04:
         04:b9:59:89:7e:1b:ef:8f:7f:bd:cc:c4:a0:13:6f:e4:b8:ee:
         be:74:40:79:9a:37:08:6e:5a:c1:8c:8a:10:1d:3f:2e:12:58:
         ff:1b:ca:c5:ba:80:7c:b8:d9:66:93:b4:3e:6c:5c:c2:d2:ac:
         c0:35:c9:b6:93:c6:4f:22:15:c6:0f:92:df:69:63:82:28:83:
         3a:8e:ba:48:95:46:22:d2:e0:af:cf:9d:26:88:c3:42:6c:e6:
         48:7c:00:33:4a:14:d3:15:e2:a5:48:ed:44:5f:d5:ef:4d:6a:
         8b:90:95:10:80:0d:e0:56:62:38:b4:fd:c1:ce:80:dc:6a:a1:
         c0:b4:2e:e8:10:94:53:2f:e4:77:4b:de:0a:90:49:69:6e:07:
         8e:a4:0f:2f:47:bd:dd:e8:6f:9d:ac:59:81:44:58:2f:c8:4a:
         61:cb:95:bb:f5:f8:4b:d5:47:15:38:c0:65:fe:cc:27:f9:76:
         a0:78:6b:47:04:96:0e:25:5b:21:5e:11:a4:71:ba:e1:2e:5f:
         1f:74:b7:8d:07:44:1f:d2:3d:ff:58:75:96:1f:5e:bb:3e:f8:
         e0:92:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:07 2026 by rpki-client