Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39312e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          hwrp8oltXPCRSuxrHgsojYMMFzDn1UCIz4HCYehypeU=
Subject key identifier:   B0:98:8F:5F:83:B8:7A:C8:51:B3:D5:C5:41:7F:C4:C0:F3:F4:3D:0C
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       10C562CC02242BD8A399FC996FD663E4318B6C3D
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39312e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:12 +0000
ROA not before:           Sun 03 May 2026 03:13:12 +0000
ROA not after:            Sun 02 May 2027 03:18:12 +0000
asID:                     38165
IP address blocks:        114.30.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c5:62:cc:02:24:2b:d8:a3:99:fc:99:6f:d6:63:e4:31:8b:6c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:12 2026 GMT
            Not After : May  2 03:18:12 2027 GMT
        Subject: CN=B0988F5F83B87AC851B3D5C5417FC4C0F3F43D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:44:00:d8:20:98:11:1a:1a:0b:23:87:d7:
                    98:00:97:e4:bd:bc:b0:fc:82:e3:8f:00:2e:d6:c7:
                    64:b7:8f:66:8b:fa:aa:af:03:2a:f0:ab:e6:50:05:
                    ac:f3:09:ad:02:5d:3e:10:1e:9b:c6:28:76:9e:cf:
                    80:67:46:1a:db:be:44:31:ba:96:0e:32:22:bc:c6:
                    0d:cd:f5:86:ed:15:53:db:e9:df:6a:e0:91:0c:50:
                    e7:3c:ef:31:7c:78:fe:e8:2d:94:b9:12:4b:6b:ed:
                    01:1a:77:56:e6:03:7b:41:c6:6b:d7:4c:15:13:ea:
                    a7:6c:9e:ad:21:12:48:98:ac:ce:d0:d8:33:3b:87:
                    01:df:30:c9:74:83:1a:d8:4c:88:3f:09:5e:72:a6:
                    7d:90:21:95:66:21:68:fd:16:6f:4b:07:05:45:8c:
                    ff:05:9c:cb:63:6c:7c:93:e8:8a:85:ee:dc:1c:56:
                    32:58:d7:b7:c5:db:8d:c6:4c:67:d7:3d:32:b5:86:
                    ba:ea:06:9f:af:62:a7:0e:4d:b6:32:a6:fd:4e:2a:
                    75:88:07:3a:60:20:76:fa:ee:d6:21:f8:09:f0:d8:
                    e3:8c:fd:da:35:3d:39:9f:b9:ca:9b:4c:93:69:b2:
                    b5:24:71:99:e5:8f:39:12:d9:ce:ad:7e:24:85:3a:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:8F:5F:83:B8:7A:C8:51:B3:D5:C5:41:7F:C4:C0:F3:F4:3D:0C
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:68:08:9b:5e:64:8e:f3:a3:f6:8c:91:e4:8a:c0:6d:e6:
         06:6b:78:27:6a:ce:9a:1e:6d:b0:47:ac:c9:0d:46:b2:c7:49:
         b3:48:4c:cd:b4:42:f6:9e:35:94:22:a8:a3:a2:da:6b:04:0c:
         2b:ed:f4:98:df:f9:b7:23:3b:37:02:4f:87:bb:1f:a8:c4:bf:
         39:fd:a7:ad:8b:2e:ac:16:bb:9e:61:ce:9e:4e:af:36:8b:84:
         1c:98:44:1a:52:ff:eb:a6:b2:13:81:eb:4a:48:ad:ef:64:56:
         9e:80:f8:ee:90:76:cd:80:f9:ec:cf:ba:06:c7:fe:71:18:9c:
         11:be:98:97:a4:a7:83:f0:57:fe:3f:1b:11:aa:c3:d9:4a:04:
         06:dd:61:38:09:06:92:85:5f:0d:7b:66:4a:04:74:22:6b:6e:
         45:34:e2:3a:77:75:4a:92:cd:18:69:a2:88:91:59:44:1b:69:
         39:c6:0d:a1:d1:b4:9f:fa:8e:a0:6a:7d:eb:43:5c:03:d9:f5:
         64:ec:3f:3f:a5:a2:24:a4:5b:0f:49:35:30:a4:57:7f:de:86:
         d3:f5:bd:d2:aa:55:3d:d4:5b:e7:8e:e6:89:63:17:fd:fb:85:
         1d:48:37:90:b9:25:49:94:ef:ae:a2:67:a2:9e:8b:4b:1a:7e:
         a1:68:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:05 2026 by rpki-client