Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e39392e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          6CYRqjLCvOMu9oFAcp3ekRhzedQycsWHhShjjU/ZS/8=
Subject key identifier:   00:81:F8:6A:47:AD:D8:55:57:DB:27:29:B4:D2:A6:D7:35:ED:D5:48
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       3E76CD37DB089F13E5FDDE73F1BA356387CD6394
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 04 Apr 2026 10:00:01 +0000
ROA not before:           Sat 04 Apr 2026 09:55:01 +0000
ROA not after:            Sat 03 Apr 2027 10:00:01 +0000
asID:                     24525
IP address blocks:        114.199.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 11:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:76:cd:37:db:08:9f:13:e5:fd:de:73:f1:ba:35:63:87:cd:63:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr  4 09:55:01 2026 GMT
            Not After : Apr  3 10:00:01 2027 GMT
        Subject: CN=0081F86A47ADD85557DB2729B4D2A6D735EDD548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:50:68:8d:9c:01:3f:c7:81:7c:50:33:9e:
                    5e:37:42:a4:72:82:12:85:1d:0e:d3:8c:1c:d4:5a:
                    47:a2:bb:dc:07:be:b7:5a:9e:47:5f:94:cd:6c:a1:
                    fb:72:68:6d:90:49:b9:01:c3:a4:86:06:22:ce:64:
                    c1:b9:16:52:09:22:a3:9a:99:a5:23:5f:14:c6:f2:
                    0e:1b:45:ac:3d:47:94:ca:d0:c4:47:67:0d:45:37:
                    55:b7:86:67:30:0b:4e:21:0d:31:a3:7f:ce:0f:ac:
                    c1:ef:f4:54:37:16:ca:5a:b7:ed:2a:73:c6:cf:18:
                    5a:66:54:22:f7:04:91:bf:65:89:25:c9:11:3c:11:
                    87:82:06:f8:50:f2:c8:00:d3:4d:52:09:0e:c7:19:
                    06:d8:18:bb:42:71:08:79:af:db:e5:e1:cf:fb:d5:
                    ba:e4:21:6a:0c:c4:b8:ca:a9:98:52:4e:fe:58:e2:
                    81:b6:4d:ae:2c:01:50:78:c4:61:bf:d8:dd:f4:27:
                    ce:88:12:dc:ee:2e:a3:99:5f:27:4e:f4:78:c0:74:
                    8d:7c:c8:1c:9b:0f:7c:56:1f:9d:91:69:9c:84:87:
                    34:42:b4:8a:3f:3c:49:b1:ca:81:94:06:6c:45:5d:
                    3c:2c:4c:81:e4:05:f1:20:cc:9c:d6:4a:ae:93:51:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:81:F8:6A:47:AD:D8:55:57:DB:27:29:B4:D2:A6:D7:35:ED:D5:48
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:73:0c:a6:2a:f8:19:24:01:fa:10:db:ab:40:21:4d:e3:
         91:cc:1d:31:63:2f:5b:b9:dd:23:22:70:c0:5c:11:b8:0e:22:
         24:5e:d4:ca:c7:e5:6c:d3:e7:0c:94:64:26:39:8f:c8:6a:f9:
         f4:84:9a:de:d0:3c:8f:1d:90:33:1a:dd:06:6e:83:11:04:cc:
         72:68:28:6f:b9:46:1c:7b:f6:02:0e:07:b8:02:ea:68:d5:f0:
         52:e0:af:76:84:41:5a:08:5b:af:90:34:b0:93:65:a0:9b:5a:
         0c:9b:ea:c2:55:56:82:9d:f7:c6:eb:9e:4a:d9:29:4d:16:34:
         6d:76:70:a6:c4:78:2c:c9:3d:ad:69:77:27:cb:36:0d:45:38:
         64:b9:5f:d7:2a:33:fa:96:4a:3a:dd:b7:d0:df:b5:81:14:eb:
         bd:12:58:75:34:2b:56:8d:08:ca:db:ac:b5:da:c6:8b:0d:7b:
         b3:80:34:37:f5:33:87:14:83:67:eb:57:3f:31:4b:b1:4f:da:
         01:71:87:64:93:15:36:ab:ff:ed:86:d8:fb:19:99:44:52:51:
         20:f5:70:0f:d8:9d:06:2f:fb:62:02:75:3d:37:2f:f4:fb:38:
         7c:66:7c:a0:fb:cb:3d:45:23:52:d1:58:a9:30:9d:c4:b9:ac:
         30:59:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:33 2026 by rpki-client