Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa
File:                     31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (raw, json)
Hash identifier:          QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=
Subject key identifier:   C7:87:E0:EC:25:F3:C6:96:B1:33:00:AE:D1:B5:D3:D0:CE:77:87:21
Certificate issuer:       /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
Certificate serial:       520B8C13777F487F6560D4A99D23DD4C70574E66
Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa
Signing time:             Sun 03 May 2026 03:10:15 +0000
ROA not before:           Sun 03 May 2026 03:05:15 +0000
ROA not after:            Sun 02 May 2027 03:10:15 +0000
asID:                     151552
IP address blocks:        14.102.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl
                          rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0b:8c:13:77:7f:48:7f:65:60:d4:a9:9d:23:dd:4c:70:57:4e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
        Validity
            Not Before: May  3 03:05:15 2026 GMT
            Not After : May  2 03:10:15 2027 GMT
        Subject: CN=C787E0EC25F3C696B13300AED1B5D3D0CE778721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:42:d4:c4:46:40:94:da:83:e3:bb:75:d2:
                    bb:e4:50:4e:75:b6:2b:eb:c5:1d:53:9d:41:f5:49:
                    a7:4d:b9:ac:d3:08:76:42:63:c7:7b:a3:46:18:35:
                    6b:04:5a:17:d8:66:08:31:ed:f0:b8:20:3b:42:7e:
                    c3:e0:6b:52:1a:c4:43:ef:c1:9b:f3:8f:98:4e:ab:
                    87:a0:c9:c7:60:98:d1:63:0d:ae:5b:20:90:3f:e2:
                    31:e7:a5:32:c9:0a:eb:e4:e3:75:fe:64:19:a8:77:
                    e6:30:c0:7c:8f:cd:5e:97:ee:af:d6:7e:15:9d:55:
                    6a:c1:80:16:2d:8b:60:7d:59:d8:d7:52:a9:14:17:
                    b7:22:cb:c0:91:0b:ba:37:33:7a:b7:4a:ed:45:83:
                    64:ec:28:ac:7d:3c:7e:63:4e:1a:83:02:d5:6d:f8:
                    7e:e3:76:12:ee:d9:99:b5:7a:a9:45:1d:d8:2e:ea:
                    04:55:94:27:11:ff:cb:51:66:f9:ff:36:65:0b:2c:
                    b3:08:29:59:e4:9b:ae:a2:66:42:a4:8c:80:f1:cb:
                    51:39:73:a8:63:36:ff:15:fe:8f:e2:52:42:10:97:
                    ff:cc:bc:9e:a7:1b:d3:dd:cd:6a:ee:ee:4b:bc:43:
                    4b:b3:05:d3:84:88:9f:28:fe:c4:fa:a9:b2:e6:69:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:E0:EC:25:F3:C6:96:B1:33:00:AE:D1:B5:D3:D0:CE:77:87:21
            X509v3 Authority Key Identifier:
                keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:25:84:26:87:5e:a1:c1:a1:10:0f:62:0f:c2:f5:f5:1d:27:
         f1:bd:7a:75:86:3c:04:1a:64:26:1e:71:91:e7:bc:0f:86:f5:
         b3:c2:3b:c2:8a:cd:62:6f:b9:9b:01:88:1e:da:9f:4d:42:4a:
         7e:99:dc:b1:53:e9:2d:c9:a7:4c:17:78:b0:c8:c9:ae:f1:e9:
         2b:a0:c6:55:ae:bc:75:d0:e2:0e:9d:24:2a:68:01:f4:86:41:
         29:37:f2:36:b7:b6:66:c1:0a:63:3f:13:e3:d9:c2:d3:4a:21:
         49:22:e5:43:62:1b:34:76:71:45:d5:66:e5:87:2b:bd:09:4a:
         0b:58:77:0c:59:b1:28:98:30:94:85:32:83:5d:5d:87:40:20:
         c8:71:fd:7e:ca:31:06:08:21:23:af:7c:d0:92:06:50:48:f7:
         3d:68:b5:ab:53:67:fc:f5:6e:f5:87:7c:dc:e5:ad:f3:cc:17:
         5b:ca:fd:78:76:75:21:b1:8f:e2:71:6c:8e:95:5e:af:65:52:
         90:0f:0b:f6:b5:f5:36:41:73:3c:53:32:f0:0b:be:b8:37:6a:
         60:5d:6d:bf:66:fe:1e:41:14:a9:e7:f9:7f:1d:30:c0:bd:77:
         21:1a:99:9f:b0:79:a4:e3:ea:9b:35:3a:08:d5:13:fa:8c:fa:
         95:c3:44:be
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUguME3d/SH9lYNSpnSPdTHBXTmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw
MjYxM0UwMDAeFw0yNjA1MDMwMzA1MTVaFw0yNzA1MDIwMzEwMTVaMDMxMTAvBgNV
BAMTKEM3ODdFMEVDMjVGM0M2OTZCMTMzMDBBRUQxQjVEM0QwQ0U3Nzg3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvkLUxEZAlNqD47t10rvkUE51
tivrxR1TnUH1SadNuazTCHZCY8d7o0YYNWsEWhfYZggx7fC4IDtCfsPga1IaxEPv
wZvzj5hOq4egycdgmNFjDa5bIJA/4jHnpTLJCuvk43X+ZBmod+YwwHyPzV6X7q/W
fhWdVWrBgBYti2B9WdjXUqkUF7ciy8CRC7o3M3q3Su1Fg2TsKKx9PH5jThqDAtVt
+H7jdhLu2Zm1eqlFHdgu6gRVlCcR/8tRZvn/NmULLLMIKVnkm66iZkKkjIDxy1E5
c6hjNv8V/o/iUkIQl//MvJ6nG9PdzWru7ku8Q0uzBdOEiJ8o/sT6qbLmaWeHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUx4fg7CXzxpaxMwCu0bXT0M53hyEwHwYDVR0j
BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB
RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz
RTAwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q3ZDE1ZDUzLWE0YjQtNDQzNS1h
MWRhLTUyZDAyMTJlZjMzZC8wLzMxMzQyZTMxMzAzMjJlMzQzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA5mLjANBgkqhkiG
9w0BAQsFAAOCAQEANiWEJodeocGhEA9iD8L19R0n8b16dYY8BBpkJh5xkee8D4b1
s8I7worNYm+5mwGIHtqfTUJKfpncsVPpLcmnTBd4sMjJrvHpK6DGVa68ddDiDp0k
KmgB9IZBKTfyNre2ZsEKYz8T49nC00ohSSLlQ2IbNHZxRdVm5YcrvQlKC1h3DFmx
KJgwlIUyg11dh0AgyHH9fsoxBgghI6980JIGUEj3PWi1q1Nn/PVu9Yd83OWt88wX
W8r9eHZ1IbGP4nFsjpVer2VSkA8L9rX1NkFzPFMy8Au+uDdqYF1tv2b+HkEUqef5
fx0wwL13IRqZn7B5pOPqmzU6CNUT+oz6lcNEvg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:10 2026 by rpki-client