Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39362e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          4a8OE3ZH9TJfDodEOXxIoWzuGJwFfn9v7y/sghdZJdA=
Subject key identifier:   EB:13:72:D3:05:71:96:80:EF:E7:71:56:73:57:F8:5D:20:47:E4:2A
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       0DE162B9DEC574AF68746F45A0827FA45DE9F995
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 04 Apr 2026 10:00:02 +0000
ROA not before:           Sat 04 Apr 2026 09:55:02 +0000
ROA not after:            Sat 03 Apr 2027 10:00:02 +0000
asID:                     24525
IP address blocks:        114.199.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e1:62:b9:de:c5:74:af:68:74:6f:45:a0:82:7f:a4:5d:e9:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr  4 09:55:02 2026 GMT
            Not After : Apr  3 10:00:02 2027 GMT
        Subject: CN=EB1372D305719680EFE771567357F85D2047E42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:e7:2a:b4:dc:b0:1e:c4:72:1e:36:b8:34:
                    77:9b:d3:96:39:99:99:3a:55:a0:4a:df:57:38:f0:
                    45:a3:c9:44:02:44:03:c8:b4:36:04:e8:e3:71:0e:
                    cd:f9:a3:76:29:9f:1e:2e:d7:e4:fe:6e:31:0d:4c:
                    fa:5b:1f:d0:fe:1b:ae:10:0e:d2:8f:e8:0d:68:90:
                    b6:21:79:e4:d9:e1:ce:78:b2:09:1c:3f:60:85:51:
                    35:a3:d3:b5:4f:a3:c7:28:42:f0:23:94:9d:84:4f:
                    80:d9:0f:b0:e7:99:f0:1d:67:9c:4e:40:d5:34:d6:
                    c9:67:92:75:ea:ad:73:7e:6d:4b:8a:b6:de:79:1e:
                    14:df:bd:a5:3d:80:e0:af:22:c6:9d:18:c3:20:5e:
                    c5:6a:d8:0c:a4:28:30:67:e3:41:93:96:27:7c:c8:
                    66:0e:3d:ca:de:2c:1a:20:74:33:ff:a7:ae:87:68:
                    04:cd:25:d2:2b:a9:4f:f5:30:a9:e8:1c:fe:b3:eb:
                    36:8b:e5:ea:83:90:0a:ba:ff:f5:8d:3e:42:34:53:
                    30:04:b2:66:e1:46:7a:de:e7:79:02:ac:51:ce:d3:
                    98:7f:df:67:d9:94:d8:1c:d4:84:ee:af:69:96:c8:
                    9a:0d:05:12:35:b5:93:2e:7d:ab:22:cc:f6:04:a9:
                    11:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:72:D3:05:71:96:80:EF:E7:71:56:73:57:F8:5D:20:47:E4:2A
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:97:15:56:ef:8f:97:6c:26:36:85:3c:c2:2d:c6:05:3f:fc:
         99:db:63:b3:a9:f6:ea:6b:b6:86:02:1f:f3:98:41:80:d1:5d:
         d0:ab:26:89:e4:59:0a:8c:ef:de:e6:db:2a:22:f2:e8:73:cb:
         47:03:59:b5:51:49:2d:39:ce:a8:62:30:93:af:45:1e:6e:cd:
         8a:dc:73:21:6d:2f:64:f6:23:4c:d4:55:be:eb:02:72:cc:ea:
         6f:04:5a:e5:51:e5:e2:73:19:4e:c0:d9:a0:5b:ce:0f:a3:93:
         b8:6f:38:7e:8e:2c:3a:b7:f8:33:0e:2a:c3:eb:b5:32:80:f3:
         31:31:58:e6:79:49:06:e3:a3:04:31:0b:6a:24:9d:a0:b2:8a:
         11:a6:7f:8c:64:e1:f5:9e:a1:57:2d:cf:fb:b7:8c:03:7a:e8:
         fe:d1:60:da:94:37:58:9f:cf:85:6a:3d:cf:70:ae:2d:92:ee:
         80:a8:a8:15:60:bc:6c:57:b2:15:3f:48:82:38:75:2a:6f:a9:
         8b:ab:2a:e4:90:59:8b:83:ba:af:cf:f7:b4:5e:ce:4e:f3:76:
         ea:36:86:a8:33:97:1a:5f:cd:68:32:eb:ad:2a:09:a4:b9:26:
         6d:68:61:cd:c6:f9:ca:41:da:75:b0:80:d7:62:2b:4e:ee:0f:
         11:cd:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:13 2026 by rpki-client