Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          Y4OQkQ+6pCKwFE7J9SktmKY2Oia99e7uSzB1cyzK/sw=
Subject key identifier:   32:75:DB:37:F2:36:BC:EB:AE:7D:BB:4D:9B:3E:14:31:5B:98:86:D2
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       5363667F8BE127A5244383B78FA82F6104EA39
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:10 +0000
ROA not before:           Sun 03 May 2026 03:13:10 +0000
ROA not after:            Sun 02 May 2027 03:18:10 +0000
asID:                     38165
IP address blocks:        114.30.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:66:7f:8b:e1:27:a5:24:43:83:b7:8f:a8:2f:61:04:ea:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:10 2026 GMT
            Not After : May  2 03:18:10 2027 GMT
        Subject: CN=3275DB37F236BCEBAE7DBB4D9B3E14315B9886D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:3c:dd:79:b3:45:5a:4d:c6:6a:58:8d:0c:
                    76:08:b8:40:dd:ce:92:ae:48:77:3f:b1:34:b6:e6:
                    ca:7e:e8:55:e1:df:44:fc:f4:69:c3:d6:25:03:e6:
                    b9:6b:1a:93:00:7c:b8:ec:de:00:c7:2e:8a:df:11:
                    47:a9:0a:47:09:08:ba:c4:d6:23:14:11:a8:5e:be:
                    3b:73:85:0a:58:87:45:47:3e:fd:ec:e4:3c:3e:5a:
                    e7:8b:27:70:b3:cc:ed:c7:88:0f:d3:14:c9:f6:0e:
                    c8:ff:c4:42:f1:45:65:30:ed:9a:d0:46:42:7a:e1:
                    33:56:d3:46:fc:2b:e6:a7:9c:05:a5:ab:8d:20:6c:
                    2c:c9:60:14:d6:49:c1:73:91:29:3f:51:be:91:ab:
                    f5:5b:68:ad:6a:26:5d:84:3a:e4:4b:86:85:05:98:
                    55:da:bf:47:d6:1b:42:87:9e:54:82:dd:1a:e3:c0:
                    a5:99:97:94:e6:6c:03:19:c8:5f:9c:4a:4b:a9:28:
                    c8:d6:b6:dd:bb:18:dc:d1:52:77:88:12:0b:e3:e3:
                    ee:05:c2:17:29:0e:7b:49:53:d9:04:c7:b7:3f:35:
                    3e:4f:c2:6f:7c:79:24:1a:89:d0:2b:78:e4:4d:78:
                    ec:ef:c8:f4:f4:dd:aa:6e:09:f5:0a:ae:36:54:88:
                    5e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:75:DB:37:F2:36:BC:EB:AE:7D:BB:4D:9B:3E:14:31:5B:98:86:D2
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:52:a6:86:91:03:00:26:69:d0:6e:75:1c:a5:94:d7:12:80:
         05:ce:47:4b:ef:72:4f:7a:0a:5b:14:e7:9c:01:29:95:c3:ba:
         f5:ad:f8:76:8a:3b:7a:cd:24:37:f3:ff:cb:32:a1:da:d9:32:
         ed:aa:07:fb:85:52:2e:e0:c8:5d:6f:ed:ce:16:8e:76:65:c5:
         bf:18:fd:01:97:80:18:f6:2d:3b:05:ab:4f:88:aa:6b:e0:81:
         99:e2:fb:70:2f:88:92:fd:97:13:3b:84:ee:8e:35:8d:a9:10:
         6c:a6:8c:b4:af:aa:40:f1:2a:3a:ab:20:ea:53:95:28:3a:d3:
         80:03:ea:7d:bf:eb:83:0f:30:a4:f3:e2:23:69:86:87:4a:50:
         b4:d3:c6:91:ce:e2:12:82:2c:49:6c:c3:df:4f:01:b6:a1:7d:
         92:30:cd:94:12:75:85:27:29:1a:a1:e8:cf:25:3f:34:e1:8f:
         23:d9:c2:93:12:3d:9c:de:8f:1c:fc:54:9d:9d:f5:67:5b:c2:
         a0:e1:de:b0:b0:ca:d2:59:9d:4f:bb:e9:d5:e1:e7:72:31:55:
         30:73:9c:d3:1c:32:60:ec:36:2f:3c:91:d7:43:79:a2:31:11:
         32:78:33:d5:75:87:0b:cc:ce:d1:01:16:37:aa:f6:8a:c9:01:
         a0:be:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:02 2026 by rpki-client