Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39392e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          Cxr+C6wXYlNsfVGNUDMNfWlZArT0WdISgR4nNGYHvyw=
Subject key identifier:   A3:27:3F:91:99:0A:E4:BD:D3:A6:C7:93:61:4A:2E:A3:0A:55:94:4C
Certificate issuer:       /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial:       14BBFDB9311C448948B5BD3F845D2E13048EA8B1
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
Signing time:             Sun 03 May 2026 03:08:46 +0000
ROA not before:           Sun 03 May 2026 03:03:46 +0000
ROA not after:            Sun 02 May 2027 03:08:46 +0000
asID:                     24525
IP address blocks:        114.199.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
                          rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bb:fd:b9:31:1c:44:89:48:b5:bd:3f:84:5d:2e:13:04:8e:a8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
        Validity
            Not Before: May  3 03:03:46 2026 GMT
            Not After : May  2 03:08:46 2027 GMT
        Subject: CN=A3273F91990AE4BDD3A6C793614A2EA30A55944C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:56:3e:87:aa:22:ff:3c:af:09:b1:fe:cc:5a:
                    ad:e5:cc:27:eb:f0:8f:74:73:b6:91:a1:80:78:16:
                    e6:a6:77:1d:4a:63:d5:15:a1:a5:2f:1a:ca:7b:ab:
                    73:18:ba:86:b5:5c:aa:06:73:30:a5:26:81:50:cf:
                    45:50:38:27:12:65:47:94:f8:e4:60:7a:e4:68:d6:
                    00:a4:e8:a8:7f:5b:d0:92:95:87:5d:79:dd:3f:bd:
                    60:44:4d:34:1b:de:47:ca:f2:24:43:ac:c9:7a:6d:
                    c5:96:30:b4:e4:47:bd:88:ab:c9:3f:a0:01:03:89:
                    1f:d4:a3:20:c2:b6:e8:b5:9a:02:8c:b0:84:c0:5c:
                    4f:ed:05:2e:bf:4e:70:ba:41:cd:1b:0e:9f:05:a7:
                    43:2b:7f:de:bc:3d:77:e8:93:e2:69:e7:ef:9b:3b:
                    e1:46:63:15:fb:db:08:83:9c:84:6d:bd:ba:eb:a0:
                    57:7d:de:3c:5a:54:e3:8d:33:f4:fc:10:19:a2:4a:
                    45:73:85:e9:76:8d:5a:ed:36:a6:1f:5e:3d:46:39:
                    1b:1d:19:67:bd:e0:1d:83:91:0e:04:3d:85:cb:4c:
                    44:f7:2c:31:f1:b4:ec:e3:80:52:65:38:4e:29:22:
                    a3:b2:31:a5:7a:f8:4b:5f:1d:3f:35:4c:86:92:8e:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:3F:91:99:0A:E4:BD:D3:A6:C7:93:61:4A:2E:A3:0A:55:94:4C
            X509v3 Authority Key Identifier:
                keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:27:ce:3a:93:74:45:d8:60:48:3d:1f:99:91:e7:ae:ed:f7:
         17:e5:14:e5:28:88:18:64:0d:ca:ef:14:de:53:cd:18:78:c2:
         8a:d5:9a:9b:bd:c4:f0:ec:44:45:ec:91:49:b4:c3:b1:d2:fd:
         e6:c1:b9:6d:fc:2a:9c:5e:5f:fb:b1:a4:19:4d:cf:51:79:fa:
         6b:32:b3:ef:9e:7a:53:01:18:72:5c:fe:50:9f:d2:6d:55:6b:
         fb:7b:9b:a0:e1:76:8f:48:45:97:88:79:d7:f8:b0:3c:f3:a9:
         cd:ca:1c:36:12:2c:44:30:b9:a1:a0:5c:65:98:3e:fa:ee:24:
         49:40:b6:40:fa:b4:39:94:28:94:70:b2:07:51:9b:83:e4:76:
         15:ee:54:7a:53:84:fd:1c:66:88:82:e1:bf:76:7c:f2:7a:db:
         7b:99:b1:c3:a4:bb:64:c6:fb:35:fe:57:bc:19:9e:dd:28:fb:
         82:98:bc:08:fc:e9:91:50:63:9a:d1:ac:b2:75:dc:01:87:0b:
         5f:9f:33:72:b5:fb:36:95:83:b8:b6:19:7b:98:65:aa:b0:68:
         04:ea:2d:a8:33:00:f7:d9:a0:d7:ff:16:e7:d0:33:79:32:d2:
         2b:e0:e6:a8:4e:48:d5:75:50:d2:7f:7a:63:98:6a:24:ac:9e:
         92:46:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:50 2026 by rpki-client