Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313333313832.roa
File:                     31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (raw, json)
Hash identifier:          FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=
Subject key identifier:   39:A2:6B:55:B3:A2:48:63:DE:68:4F:BC:56:E7:14:2C:AD:6A:35:59
Certificate issuer:       /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
Certificate serial:       453D05ECEF33710151EB5A5341C16F759B55133E
Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313333313832.roa
Signing time:             Sun 03 May 2026 03:10:15 +0000
ROA not before:           Sun 03 May 2026 03:05:15 +0000
ROA not after:            Sun 02 May 2027 03:10:15 +0000
asID:                     133182
IP address blocks:        14.102.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl
                          rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:05:ec:ef:33:71:01:51:eb:5a:53:41:c1:6f:75:9b:55:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
        Validity
            Not Before: May  3 03:05:15 2026 GMT
            Not After : May  2 03:10:15 2027 GMT
        Subject: CN=39A26B55B3A24863DE684FBC56E7142CAD6A3559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:30:07:77:d5:a2:da:16:44:49:47:04:c8:
                    5d:2b:1b:2e:a6:23:bd:bf:8a:2f:cb:a8:5e:89:fc:
                    a4:23:5b:ef:b1:ca:8e:d9:4a:e2:80:38:7c:01:85:
                    21:92:10:11:da:5b:39:ac:9b:03:a1:54:69:12:a6:
                    35:e5:b9:fb:c4:79:00:e3:02:7e:be:78:49:d6:99:
                    1e:39:2c:7e:98:7c:1b:29:ab:9b:8c:dd:1b:b2:3f:
                    e5:6f:6a:01:38:d3:58:40:e6:f7:20:22:c6:9b:5d:
                    e9:f2:f5:e0:59:4e:51:94:e6:22:e0:3c:de:5e:27:
                    86:e7:f4:ad:6a:c4:50:76:ea:70:d0:49:9f:a8:52:
                    d9:94:76:99:a3:e7:83:f2:cd:12:3d:37:f3:95:74:
                    5c:13:93:0b:c3:06:7c:b1:74:34:b8:66:99:f0:ed:
                    f9:3a:64:79:0b:c4:9f:a6:1e:5c:17:a0:92:12:f5:
                    6d:01:92:e7:ee:5a:fa:27:6d:90:dc:e8:e1:08:38:
                    e1:ca:10:14:34:8a:ea:df:ef:26:8f:07:1b:90:f0:
                    dd:d3:4d:75:38:ec:52:20:81:46:ff:0d:0e:50:f5:
                    86:ae:42:95:cb:62:b7:ea:d8:e3:32:e6:21:27:5e:
                    24:7d:92:7a:b3:53:80:33:2c:25:a5:81:5c:16:c1:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:6B:55:B3:A2:48:63:DE:68:4F:BC:56:E7:14:2C:AD:6A:35:59
            X509v3 Authority Key Identifier:
                keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313333313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:92:62:ec:a9:99:fe:0c:70:30:a4:24:ae:cc:66:b8:a4:
         f8:f5:66:d0:a6:68:60:0e:cc:e5:4d:49:f6:30:90:fd:5c:72:
         f8:54:21:5f:4b:1b:f9:bf:19:b4:3a:21:9e:d8:1e:83:ff:ff:
         ac:c0:8a:7e:53:db:1c:50:2c:4c:55:98:83:2b:f6:71:e8:a3:
         7e:37:3e:32:a2:d7:7a:e4:e4:60:59:30:3f:8b:99:e1:48:16:
         6a:58:72:1c:24:6d:b6:9f:58:65:8b:98:75:05:8a:2d:a9:bd:
         7e:d9:b7:43:0c:c0:c8:dc:84:49:14:58:fb:f2:99:f3:f2:9d:
         f9:33:a7:7f:fd:33:01:1d:5d:85:38:08:85:9d:d2:27:bb:ee:
         e3:18:7c:51:33:d2:26:cf:7e:a9:04:26:f6:42:53:02:a6:56:
         d7:b9:05:92:28:bc:d9:86:b4:61:0a:0b:b1:a0:59:8d:f9:e9:
         ba:07:30:76:8c:80:38:34:e3:19:22:02:7e:3f:80:16:ef:20:
         e4:66:f4:f6:34:a3:b1:f9:78:32:4e:92:bf:04:0f:18:e8:05:
         84:21:81:02:3c:a4:a8:ff:c5:98:ab:7d:33:8e:9c:e2:8c:fc:
         d9:59:ab:0f:6b:12:51:8d:aa:07:85:02:c2:43:28:2f:0c:98:
         ac:07:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:12 2026 by rpki-client