Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa
File:                     3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier:          rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=
Subject key identifier:   63:B8:28:E8:42:04:C8:7E:5F:BC:00:C7:91:71:53:83:53:2B:7D:CD
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       5E93B64E15BDC413D1260A62343C5CA6A28728A0
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa
Signing time:             Wed 18 Feb 2026 03:00:02 +0000
ROA not before:           Wed 18 Feb 2026 02:55:02 +0000
ROA not after:            Wed 17 Feb 2027 03:00:02 +0000
asID:                     38773
IP address blocks:        114.141.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:93:b6:4e:15:bd:c4:13:d1:26:0a:62:34:3c:5c:a6:a2:87:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Feb 18 02:55:02 2026 GMT
            Not After : Feb 17 03:00:02 2027 GMT
        Subject: CN=63B828E84204C87E5FBC00C791715383532B7DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b0:a1:1c:3c:3d:43:98:06:38:39:8d:4e:18:
                    13:d4:5b:fd:36:83:d2:ad:dc:23:65:0d:ab:7c:77:
                    c0:3e:2f:c2:12:e4:d1:53:d0:26:1d:08:4d:ce:1a:
                    b0:c7:92:f3:e7:2b:98:7c:eb:31:e0:b2:a3:45:1d:
                    8d:c4:73:1c:0a:95:a7:d9:cb:3a:b3:c1:4e:7e:bc:
                    4c:0a:a4:96:bc:f1:f1:9c:4d:a5:69:15:b0:de:5e:
                    8b:84:a1:2e:27:da:ed:e2:cb:6c:e6:7a:4f:2a:ae:
                    98:21:d7:c1:ec:87:52:58:22:29:05:f5:b6:6f:70:
                    b5:36:9a:36:4d:c9:8a:fa:ce:0f:cf:f8:d5:15:67:
                    e6:21:ce:2b:e9:8d:e8:cc:a9:26:12:80:cc:95:d8:
                    ec:b3:a2:a8:99:7b:ae:fb:b7:f6:ee:81:93:2d:29:
                    5d:98:df:9a:ed:3e:2e:d6:5c:b4:52:07:3c:d6:13:
                    a3:fb:09:d2:5a:a9:f6:83:d9:e7:8b:be:b5:21:a8:
                    9a:ac:cb:88:c4:1f:df:d3:db:c9:8f:fa:e7:bd:5b:
                    1e:33:b7:3b:46:af:1c:8e:71:c1:59:97:fd:cd:50:
                    05:69:9a:a9:b7:17:6f:97:49:ad:04:31:73:1f:77:
                    f3:3c:da:0b:58:10:91:a2:fe:d3:b6:3b:34:2a:84:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:28:E8:42:04:C8:7E:5F:BC:00:C7:91:71:53:83:53:2B:7D:CD
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:28:05:89:f0:2a:5c:fa:bf:97:ab:41:5b:b7:53:e7:a6:
         1c:ff:41:54:2e:43:6e:e0:3a:4d:c4:be:5e:00:dd:a8:a3:79:
         07:51:47:e3:0f:64:f7:83:88:cc:6c:a7:1c:d1:e5:2d:b0:9c:
         4e:d9:f1:4e:be:f5:c2:d5:c0:73:da:10:7b:2d:7b:e8:71:ce:
         d5:12:f6:25:74:34:44:c1:f8:54:e9:2b:3e:5c:19:0c:7b:4c:
         c4:57:9c:40:a3:52:bb:b2:a8:5c:b0:0f:27:dc:fe:14:dd:57:
         bc:f1:03:c2:0d:2f:11:68:a4:68:9a:ef:80:af:1e:b9:74:2a:
         ee:1e:fd:ab:da:2a:3e:54:46:2d:ab:62:e9:13:bb:5c:17:05:
         67:48:14:e2:48:f3:40:12:9f:f3:c7:5e:bb:61:98:c7:93:5c:
         8a:95:b5:3e:c7:17:39:f1:91:2a:f5:f9:13:7e:84:f7:1e:97:
         ab:67:54:70:b8:77:8d:0d:25:7c:80:05:15:b4:b0:65:fd:0e:
         8b:ab:8b:d8:ab:84:d9:7f:c0:24:43:65:b1:12:0c:32:1b:50:
         de:4a:57:48:7c:ca:49:bf:03:50:0e:a6:1f:3a:c3:51:1f:44:
         6f:f5:dc:99:af:75:0c:88:e4:34:c1:2d:25:09:3f:30:6e:45:
         19:c7:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:48 2026 by rpki-client