Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e38382e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          TYxvOObRiApVHdygkcJ79px01l2EeTEanmBRk9sEhU8=
Subject key identifier:   62:CA:53:2E:BD:9F:AB:F3:90:8A:23:68:F2:56:A0:63:4E:2F:45:0B
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       219E8899E7725A3E9F8A894B93C35FFDB9BBA810
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:10 +0000
ROA not before:           Sun 03 May 2026 03:13:10 +0000
ROA not after:            Sun 02 May 2027 03:18:10 +0000
asID:                     38165
IP address blocks:        114.30.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:88:99:e7:72:5a:3e:9f:8a:89:4b:93:c3:5f:fd:b9:bb:a8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:10 2026 GMT
            Not After : May  2 03:18:10 2027 GMT
        Subject: CN=62CA532EBD9FABF3908A2368F256A0634E2F450B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:2d:bd:f9:4d:9d:99:86:cd:46:d0:84:1a:
                    97:27:68:86:41:1a:fc:1e:ae:2b:69:44:72:34:9c:
                    7e:b8:45:53:d8:99:2b:73:a1:e9:e3:52:f1:a0:f7:
                    ef:eb:80:80:8e:6a:ec:3f:06:23:f5:84:59:fa:18:
                    fd:bc:b7:a9:14:82:8c:2f:97:d3:65:fb:f8:ba:a5:
                    3d:df:67:87:20:33:c2:e4:1f:93:b1:b2:2b:a6:48:
                    b7:4f:54:e2:55:a9:a7:d3:21:11:b6:45:93:36:a0:
                    0a:79:48:f4:dc:86:90:b8:06:7a:aa:22:fd:df:62:
                    54:74:de:aa:b6:7b:b1:e3:0c:c7:37:19:cf:a7:12:
                    1b:0c:13:ee:cb:be:11:97:f2:83:e4:12:7d:34:d8:
                    4f:52:aa:ee:73:f1:3a:b6:99:91:1b:26:5a:e9:d5:
                    c0:16:87:df:89:9d:ce:16:61:fc:32:63:23:49:34:
                    43:26:4b:55:70:04:b4:d8:4c:b8:05:f7:49:97:30:
                    fa:d8:f2:f2:70:5f:62:ff:9e:cc:3c:ec:4f:94:1b:
                    5c:02:bd:36:f2:1b:a8:f0:bb:61:6a:5c:ef:f3:ab:
                    23:41:22:e5:26:4a:95:e3:a4:63:ed:62:7d:0f:b7:
                    e8:2f:04:01:04:4b:34:83:7d:a8:aa:1b:17:00:82:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:53:2E:BD:9F:AB:F3:90:8A:23:68:F2:56:A0:63:4E:2F:45:0B
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:98:de:cf:d7:50:ac:a1:26:55:00:b8:6c:0e:32:7a:84:
         ad:a6:ea:f7:b5:b6:1f:c6:0b:42:49:b6:8a:f9:d1:d8:3f:05:
         b1:2e:7a:8f:c9:82:6d:19:c1:bd:f7:8a:ac:2a:f6:92:bf:2c:
         eb:9b:c5:95:9b:34:c7:03:16:5e:97:ad:91:fa:73:a0:15:96:
         a2:90:cf:b3:f2:9e:e1:bb:bb:7b:5b:a9:8a:8e:7f:ad:ad:84:
         4e:4b:ba:6d:92:0e:6b:a7:53:59:c4:14:23:eb:ca:d9:95:b9:
         79:bb:3f:bc:88:2d:80:b7:cc:1c:04:9c:c4:4b:99:7f:02:53:
         64:97:52:e3:1a:a3:f0:a3:d8:85:02:95:ef:fe:52:d3:47:67:
         81:ac:43:98:d9:6d:c7:20:66:c9:a8:b2:8f:54:fb:53:91:5c:
         60:e2:81:95:eb:7b:7f:49:0f:52:3b:27:bd:70:0d:7b:c6:e9:
         54:48:6a:3a:cb:05:37:57:d2:94:84:58:2b:36:74:6b:08:2c:
         8a:9f:db:11:ba:a1:90:36:82:f4:0c:79:65:94:f0:e9:c8:6f:
         f0:40:78:46:03:6f:5c:59:fe:bf:bb:6a:89:3d:28:99:9e:87:
         6e:d1:74:c1:bf:81:62:19:ad:ff:fb:78:4c:10:f0:09:af:b9:
         28:f9:72:7f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUIZ6ImedyWj6fiolLk8Nf/bm7qBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA1MDMwMzEzMTBaFw0yNzA1MDIwMzE4MTBaMDMxMTAvBgNV
BAMTKDYyQ0E1MzJFQkQ5RkFCRjM5MDhBMjM2OEYyNTZBMDYzNEUyRjQ1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKC29+U2dmYbNRtCEGpcnaIZB
GvweritpRHI0nH64RVPYmStzoenjUvGg9+/rgICOauw/BiP1hFn6GP28t6kUgowv
l9Nl+/i6pT3fZ4cgM8LkH5OxsiumSLdPVOJVqafTIRG2RZM2oAp5SPTchpC4Bnqq
Iv3fYlR03qq2e7HjDMc3Gc+nEhsME+7LvhGX8oPkEn002E9Squ5z8Tq2mZEbJlrp
1cAWh9+Jnc4WYfwyYyNJNEMmS1VwBLTYTLgF90mXMPrY8vJwX2L/nsw87E+UG1wC
vTbyG6jwu2FqXO/zqyNBIuUmSpXjpGPtYn0Pt+gvBAEESzSDfaiqGxcAglubAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYspTLr2fq/OQiiNo8lagY04vRQswHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNDJlMzMzMDJlMzgzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAByHlgwDQYJKoZIhvcN
AQELBQADggEBADqemN7P11CsoSZVALhsDjJ6hK2m6ve1th/GC0JJtor50dg/BbEu
eo/Jgm0Zwb33iqwq9pK/LOubxZWbNMcDFl6XrZH6c6AVlqKQz7PynuG7u3tbqYqO
f62thE5Lum2SDmunU1nEFCPrytmVuXm7P7yILYC3zBwEnMRLmX8CU2SXUuMao/Cj
2IUCle/+UtNHZ4GsQ5jZbccgZsmoso9U+1ORXGDigZXre39JD1I7J71wDXvG6VRI
ajrLBTdX0pSEWCs2dGsILIqf2xG6oZA2gvQMeWWU8OnIb/BAeEYDb1xZ/r+7aok9
KJmeh27RdMG/gWIZrf/7eEwQ8AmvuSj5cn8=
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:16 2026 by rpki-client