Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130352e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e3130352e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          51Pq1s2XAYLMqk83qsZp6Bwc7XzXHaeiLMxZ8RO4SX4=
Subject key identifier:   94:93:58:91:89:D0:B7:8A:0F:15:55:92:C0:93:C8:36:95:FD:16:13
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       012114701AAC13706BF40DDEE7B33287E9E208C7
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130352e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 04 Apr 2026 10:00:03 +0000
ROA not before:           Sat 04 Apr 2026 09:55:03 +0000
ROA not after:            Sat 03 Apr 2027 10:00:03 +0000
asID:                     24525
IP address blocks:        114.199.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:14:70:1a:ac:13:70:6b:f4:0d:de:e7:b3:32:87:e9:e2:08:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr  4 09:55:03 2026 GMT
            Not After : Apr  3 10:00:03 2027 GMT
        Subject: CN=9493589189D0B78A0F155592C093C83695FD1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:f4:57:13:6a:6b:9f:0e:e4:d9:26:22:63:
                    9a:86:ac:fa:60:c8:08:63:13:69:1f:b2:0c:c5:54:
                    ee:8d:22:cb:ef:ee:75:13:72:ce:5d:86:62:a8:f6:
                    5b:e0:75:ee:4a:e0:1e:f9:4c:56:2a:fb:1c:48:b5:
                    e7:d2:0d:8c:43:ad:ef:86:d9:27:68:67:3d:4d:c0:
                    62:bb:a9:3c:8e:07:2a:bd:d4:8a:79:c4:61:21:c1:
                    51:04:68:54:97:bd:ff:23:79:ec:b1:d3:e4:fe:5f:
                    50:1d:c8:26:59:42:45:9f:66:ac:2e:61:ae:c4:c4:
                    a4:9c:23:15:43:30:f2:8d:21:c6:ab:56:91:a1:76:
                    36:db:23:ea:fa:b0:52:9d:56:6c:12:ea:5c:21:25:
                    e8:86:1f:dc:18:fa:b7:fe:d3:3e:0f:71:82:59:33:
                    36:e4:55:26:0e:c9:a9:dc:fc:dc:d5:30:e9:b7:6b:
                    0a:f0:6a:bc:4a:70:f5:1c:43:be:a3:6f:40:7d:0d:
                    ad:41:fd:51:38:a5:92:96:56:0c:b6:31:97:55:7c:
                    cf:78:8d:07:c8:86:a8:0c:fd:51:f9:51:35:96:d5:
                    a8:b0:0a:93:52:84:76:ba:90:33:87:d9:87:5c:24:
                    3a:21:9c:2d:1c:4b:16:34:9d:32:64:6e:90:58:70:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:58:91:89:D0:B7:8A:0F:15:55:92:C0:93:C8:36:95:FD:16:13
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130352e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ec:45:5b:72:30:e2:c8:de:da:0d:55:08:ac:c9:51:bb:83:
         f9:17:df:76:cb:b4:08:2f:71:31:77:c1:45:f4:6f:fd:e2:30:
         09:2b:c1:95:b2:06:60:88:36:86:4d:af:5c:f5:ac:16:e2:25:
         28:31:49:d0:e4:e5:05:f3:4c:0f:f8:e7:6b:95:ec:b5:99:fe:
         e2:0d:e4:28:2b:d0:fa:47:10:9e:70:35:14:38:ea:a9:1b:14:
         f6:e0:e3:33:fe:31:77:be:7c:7c:81:db:6a:df:2c:11:6d:dd:
         78:fc:78:77:b5:8a:66:76:2e:b4:8f:1c:99:8f:ac:3d:e5:cf:
         88:62:81:2c:c6:60:bc:eb:70:e5:ac:dc:57:32:53:69:93:b8:
         87:44:35:1f:38:05:9c:db:68:ed:b6:e0:d6:94:cb:66:b9:1d:
         64:18:a7:a2:da:f0:59:52:8c:9d:0e:67:94:7a:dc:8d:08:57:
         49:04:ad:a9:58:e1:94:b1:f0:fe:2d:b4:2c:48:f5:46:4b:c2:
         4d:5a:6e:f2:2d:e2:a6:64:e3:04:24:da:77:2d:c9:c8:82:75:
         88:5d:a8:b6:e3:48:6f:97:19:9e:26:5d:87:ae:67:3a:0e:d4:
         90:97:75:c0:00:3b:c5:8c:e6:ea:3c:61:2f:17:ac:b6:f9:ec:
         f5:15:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:07 2026 by rpki-client