Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=
Subject key identifier:   C4:06:06:A9:E1:7B:3C:49:28:AF:37:24:63:28:A6:55:7D:12:67:9A
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       655BB7D5A2D2DD586054F288DB406A00C1995F38
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 18 Feb 2026 04:00:02 +0000
ROA not before:           Wed 18 Feb 2026 03:55:02 +0000
ROA not after:            Wed 17 Feb 2027 04:00:02 +0000
asID:                     138818
IP address blocks:        114.141.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5b:b7:d5:a2:d2:dd:58:60:54:f2:88:db:40:6a:00:c1:99:5f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Feb 18 03:55:02 2026 GMT
            Not After : Feb 17 04:00:02 2027 GMT
        Subject: CN=C40606A9E17B3C4928AF37246328A6557D12679A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:7a:2b:fa:b9:79:2f:74:33:17:bd:78:04:
                    be:d1:8a:c0:6d:c6:06:f1:df:d5:1c:76:98:d4:20:
                    aa:9f:71:cd:01:08:ae:80:72:07:08:1d:fd:ea:c5:
                    2c:f6:72:27:15:ad:24:36:7f:f5:ba:1a:a6:51:0a:
                    aa:8d:06:56:35:d6:04:50:39:46:e9:df:c7:80:60:
                    7b:b4:c0:ad:89:6b:ef:39:0d:97:b6:33:be:b6:49:
                    c5:31:6c:61:b8:ad:c9:f8:5c:6d:7a:69:36:61:1b:
                    e8:00:cc:88:06:3d:50:2d:19:0b:de:40:a6:b4:20:
                    55:4b:49:e7:1c:18:a2:2f:9f:9d:d7:13:db:55:e4:
                    d0:9b:7b:09:41:2b:0a:22:97:c1:a0:62:e0:72:08:
                    14:6e:1b:35:6e:35:b2:9d:ef:c9:7b:3a:35:f2:52:
                    53:23:6b:5f:64:f0:8f:9c:99:e6:49:fe:cb:fa:98:
                    6c:66:43:56:c9:13:2c:60:de:2b:d7:ac:83:74:64:
                    01:29:90:98:af:5a:69:94:8c:3b:8a:fe:c0:42:f4:
                    8c:90:eb:09:ec:25:ed:b9:d0:6c:94:31:07:f2:e6:
                    ff:a9:3e:1d:b4:2b:7f:25:5a:cc:7f:b7:a7:91:7c:
                    05:29:1e:1d:d5:61:a3:af:a8:3e:6d:f7:04:52:9b:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:06:06:A9:E1:7B:3C:49:28:AF:37:24:63:28:A6:55:7D:12:67:9A
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:05:0e:61:e6:71:f0:fe:20:b4:18:70:ba:e7:57:3b:fd:
         f7:1d:68:e3:15:9d:7f:db:4c:33:ef:6a:44:56:c9:c2:91:27:
         60:4b:3e:30:50:2c:2d:cf:17:00:da:68:63:99:de:4e:f4:2a:
         b7:04:9b:8c:05:b0:33:20:19:b2:49:b6:66:18:39:85:f3:43:
         01:09:40:7a:2f:68:02:b4:27:6a:31:ac:14:e3:ee:10:19:ae:
         e3:bc:7b:c6:82:8e:58:fc:11:3b:4d:36:b7:59:a7:ec:51:41:
         ae:cb:12:b2:93:07:2c:0a:c5:96:99:a9:f9:b7:17:81:3e:58:
         c3:04:b0:1d:fd:11:46:1c:bc:4f:dc:7d:be:54:cf:bb:b3:e4:
         df:ec:25:5e:08:70:7c:4e:6c:5a:7a:75:c6:69:c7:57:63:f4:
         28:7f:0a:19:79:eb:2a:21:26:c0:05:65:d3:31:7e:25:dc:fe:
         e7:e4:b4:98:5f:7c:c4:94:b2:29:79:4e:7e:d8:94:aa:d0:ee:
         5e:88:f2:d1:db:fe:86:bb:90:ae:02:fd:7d:d1:2d:99:e3:c7:
         7f:43:45:a4:c2:ce:b2:7a:f5:3e:fa:94:8a:9e:09:e9:a7:3d:
         d6:e4:3f:6a:2a:12:c3:64:3a:39:fa:b3:51:c1:41:a2:0f:b0:
         d4:ee:4e:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZVu31aLS3VhgVPKI20BqAMGZXzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw
REMxNDY0RjAeFw0yNjAyMTgwMzU1MDJaFw0yNzAyMTcwNDAwMDJaMDMxMTAvBgNV
BAMTKEM0MDYwNkE5RTE3QjNDNDkyOEFGMzcyNDYzMjhBNjU1N0QxMjY3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQHor+rl5L3QzF714BL7RisBt
xgbx39UcdpjUIKqfcc0BCK6AcgcIHf3qxSz2cicVrSQ2f/W6GqZRCqqNBlY11gRQ
OUbp38eAYHu0wK2Ja+85DZe2M762ScUxbGG4rcn4XG16aTZhG+gAzIgGPVAtGQve
QKa0IFVLSeccGKIvn53XE9tV5NCbewlBKwoil8GgYuByCBRuGzVuNbKd78l7OjXy
UlMja19k8I+cmeZJ/sv6mGxmQ1bJEyxg3ivXrIN0ZAEpkJivWmmUjDuK/sBC9IyQ
6wnsJe250GyUMQfy5v+pPh20K38lWsx/t6eRfAUpHh3VYaOvqD5t9wRSm7V1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxAYGqeF7PEkorzckYyimVX0SZ5owHwYDVR0j
BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE
NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx
NDY0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i
OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAco1dMA0GCSqG
SIb3DQEBCwUAA4IBAQAvAgUOYeZx8P4gtBhwuudXO/33HWjjFZ1/20wz72pEVsnC
kSdgSz4wUCwtzxcA2mhjmd5O9Cq3BJuMBbAzIBmySbZmGDmF80MBCUB6L2gCtCdq
MawU4+4QGa7jvHvGgo5Y/BE7TTa3WafsUUGuyxKykwcsCsWWman5txeBPljDBLAd
/RFGHLxP3H2+VM+7s+Tf7CVeCHB8TmxaenXGacdXY/QofwoZeesqISbABWXTMX4l
3P7n5LSYX3zElLIpeU5+2JSq0O5eiPLR2/6Gu5CuAv190S2Z48d/Q0Wkws6yevU+
+pSKngnppz3W5D9qKhLDZDo5+rNRwUGiD7DU7k61
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:03 2026 by rpki-client