Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e38392e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          maWh9CwQAwSd/hgh31AypikUc85sBDX5Qkb/wXAwqQ4=
Subject key identifier:   5D:EC:71:F0:28:8C:EB:3B:C1:6E:FE:FF:65:7E:3A:E9:70:EA:3C:28
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       6B5086B74E3FE1F7C34E729A8059A70E6D0F9627
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:10 +0000
ROA not before:           Sun 03 May 2026 03:13:10 +0000
ROA not after:            Sun 02 May 2027 03:18:10 +0000
asID:                     38165
IP address blocks:        114.30.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:86:b7:4e:3f:e1:f7:c3:4e:72:9a:80:59:a7:0e:6d:0f:96:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:10 2026 GMT
            Not After : May  2 03:18:10 2027 GMT
        Subject: CN=5DEC71F0288CEB3BC16EFEFF657E3AE970EA3C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:4b:77:2f:dc:f4:df:d3:eb:4d:7e:b3:be:
                    02:49:24:6c:19:26:57:f3:ca:9b:28:27:4c:ea:82:
                    78:2c:2c:91:87:20:0c:a7:e2:a0:12:de:92:57:b7:
                    0b:e2:ff:14:63:16:d4:2f:ae:2a:d9:b8:17:86:f6:
                    fe:e6:f2:e4:c6:e5:1f:7c:c2:de:db:93:4f:b0:7d:
                    dd:bc:ee:74:af:d0:4c:99:76:19:dc:ca:c3:ba:e9:
                    88:b2:4c:4b:1b:79:a1:5b:09:6d:1d:7e:68:e6:8d:
                    66:08:f4:e2:ae:6f:4c:e1:6e:c6:5c:82:3d:fe:25:
                    8b:68:ec:c2:66:3d:91:1c:fa:7a:dd:d5:62:b6:02:
                    a9:1e:94:a8:e4:b5:aa:c4:b6:64:16:4c:f6:7c:13:
                    09:c0:21:ae:60:48:f2:b7:2f:8b:47:72:0e:76:7a:
                    0f:88:26:ff:b5:e3:bf:7a:17:69:2b:b6:cb:49:90:
                    f7:e0:18:2d:1b:25:5c:ba:cc:9a:15:28:b5:87:1b:
                    0f:69:5e:56:ac:00:9b:e0:be:58:83:e0:b4:15:eb:
                    36:14:44:a4:3e:c6:07:1b:41:12:47:f4:94:cb:04:
                    13:d4:f1:92:a8:bf:e3:be:94:6a:90:73:48:71:a3:
                    43:71:29:39:43:27:35:26:37:57:b2:ff:aa:9f:2a:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EC:71:F0:28:8C:EB:3B:C1:6E:FE:FF:65:7E:3A:E9:70:EA:3C:28
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:27:e6:e0:58:09:5d:65:09:d9:51:be:80:68:b4:66:78:53:
         0a:02:1d:5b:e8:2e:cd:b2:8c:c6:47:8f:e7:bf:54:80:b7:8b:
         1c:26:56:95:8a:9f:d4:b4:b0:a3:bd:5c:30:03:28:e3:1d:e5:
         63:c6:32:75:1c:ed:99:5d:41:53:71:00:2c:e1:96:de:75:11:
         2f:f0:b7:60:82:36:8c:40:8d:8f:3a:92:ed:96:a3:e3:7a:fd:
         ff:92:77:fd:1c:8d:f0:e4:a6:d0:a1:b3:08:86:4c:c7:20:48:
         57:dc:ab:4e:da:60:56:2c:62:46:01:24:84:0c:b1:11:2d:1a:
         23:6d:ce:9e:7c:f8:bd:04:c4:e0:c3:7b:f2:44:49:d4:93:af:
         1a:9a:79:a9:0e:49:c6:dd:7a:47:6b:41:a4:91:d4:d0:82:92:
         d1:76:1b:1b:26:30:2f:b6:64:0f:51:0f:df:62:44:8b:49:e7:
         35:24:89:e5:20:6c:74:56:8a:c3:1a:bf:89:8b:10:db:7d:0b:
         d6:2d:33:81:1a:42:fb:8a:95:f3:ad:d9:a3:44:b9:bf:f0:5c:
         24:4b:b7:bd:06:e0:56:27:74:b6:ca:37:85:ea:bd:8c:f1:bc:
         1b:45:86:74:b7:a5:2d:d0:69:f9:6d:0a:5d:05:88:e3:6b:94:
         df:ec:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:09 2026 by rpki-client