Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
File:                     3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=
Subject key identifier:   F2:2F:0B:4A:11:BC:A6:1E:B8:B5:5B:89:7F:A6:85:25:FB:71:DA:EF
Certificate issuer:       /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial:       1FE63797C84AC2A9E62C71378ADD06B747A94F1E
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa
Signing time:             Wed 18 Feb 2026 04:00:02 +0000
ROA not before:           Wed 18 Feb 2026 03:55:02 +0000
ROA not after:            Wed 17 Feb 2027 04:00:02 +0000
asID:                     138818
IP address blocks:        114.141.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
                          rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 19:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e6:37:97:c8:4a:c2:a9:e6:2c:71:37:8a:dd:06:b7:47:a9:4f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
        Validity
            Not Before: Feb 18 03:55:02 2026 GMT
            Not After : Feb 17 04:00:02 2027 GMT
        Subject: CN=F22F0B4A11BCA61EB8B55B897FA68525FB71DAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:9b:40:6f:36:57:0c:d2:df:09:67:b8:80:
                    b9:e5:32:e1:6f:51:b4:7e:e0:b7:53:6e:df:ee:48:
                    6c:76:dd:b0:e0:1d:74:67:d7:dd:5c:4d:13:51:11:
                    9b:e1:52:99:d2:5d:af:e3:20:37:37:67:8c:c0:7c:
                    af:24:9c:08:09:40:e0:16:3e:e1:77:01:0a:43:3b:
                    1e:3b:00:67:66:54:85:83:64:c1:e4:f6:92:ff:11:
                    15:34:cc:d2:00:40:c6:21:75:22:99:90:a9:0b:dd:
                    bd:cb:90:62:01:6d:5c:72:90:b8:de:31:ea:be:e3:
                    61:32:ef:c3:f3:69:2b:b8:4a:54:6f:e0:86:d2:fd:
                    9d:6f:72:38:8e:ba:8c:ae:ec:07:8a:73:2b:14:95:
                    f5:51:c8:ee:0b:04:86:c1:a1:42:fe:6f:62:06:56:
                    d7:6b:ed:0c:ab:d5:f0:4e:36:f9:0c:44:6a:a8:fe:
                    f3:e4:d2:01:82:78:b8:11:c3:a9:5a:af:0c:ef:07:
                    35:8c:35:c2:c4:67:04:07:23:8a:16:c4:ab:a8:ce:
                    72:08:d4:74:ff:04:0e:cc:3e:a8:17:aa:7b:36:c0:
                    ce:99:dc:a0:ca:60:9b:d1:ea:0d:62:93:39:e6:31:
                    0c:6d:ec:a0:d0:ee:b4:06:f0:d0:d2:c2:22:4b:7e:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:0B:4A:11:BC:A6:1E:B8:B5:5B:89:7F:A6:85:25:FB:71:DA:EF
            X509v3 Authority Key Identifier:
                keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:5f:2e:fd:46:9b:b7:f2:68:75:1c:74:d0:bb:89:37:9b:
         07:43:90:fa:41:5f:73:3e:99:86:1e:5d:87:08:05:0c:64:c8:
         6c:21:90:24:15:99:9c:f8:d5:64:32:d7:84:36:b8:a6:0f:31:
         14:c5:39:19:73:eb:38:6a:c0:c2:6d:09:1c:97:6d:80:4d:47:
         cd:dd:59:77:9b:2e:c4:27:4d:c1:d1:b1:1b:3a:50:f5:3a:d3:
         92:39:93:2b:98:ca:81:b9:a3:0c:d4:84:14:90:8b:33:3d:28:
         44:ab:f7:b0:e3:6f:0e:4e:d5:64:67:dc:ff:19:21:c9:4d:e4:
         06:c0:08:96:bd:12:63:ab:35:01:50:dc:a1:43:b5:93:0e:12:
         1a:9c:82:ff:f2:26:dd:c0:56:1a:cf:49:77:a5:4f:e6:3a:94:
         e5:31:e8:3e:16:c5:81:f8:c3:fc:25:e9:97:44:bc:28:90:a6:
         9d:e4:c7:ed:6a:82:b0:c5:e3:29:c7:c9:26:ac:98:12:db:dc:
         1b:ad:e6:7e:7a:75:a7:40:4c:d7:44:c1:c0:46:18:66:7a:85:
         4f:77:ad:56:24:58:e5:d2:5d:db:5f:f4:ff:79:d3:37:55:0f:
         af:7d:c4:c9:cd:9e:e5:02:b6:f1:1d:51:26:39:5a:91:6d:e8:
         02:1c:bd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:02 2026 by rpki-client