Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136342e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136342e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          xKFxJee+w4WCTNTdHRcJ1wx8Z+7A5au/DHI5sGYskPk=
Subject key identifier:   8A:4E:58:8B:ED:B1:C1:09:4A:97:25:17:37:09:F2:05:D8:0A:9A:61
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       631C05D962513AD77894640285E280DBE275AC24
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136342e302f32342d3234203d3e203233363731.roa
Signing time:             Mon 30 Mar 2026 10:02:47 +0000
ROA not before:           Mon 30 Mar 2026 09:57:47 +0000
ROA not after:            Mon 29 Mar 2027 10:02:47 +0000
asID:                     23671
IP address blocks:        111.92.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 12:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1c:05:d9:62:51:3a:d7:78:94:64:02:85:e2:80:db:e2:75:ac:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Mar 30 09:57:47 2026 GMT
            Not After : Mar 29 10:02:47 2027 GMT
        Subject: CN=8A4E588BEDB1C1094A9725173709F205D80A9A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:fc:bb:8e:2b:13:e6:a0:ab:f8:99:f4:a0:
                    73:60:98:24:b1:19:39:fc:98:cb:7e:7a:09:a0:3b:
                    bb:2f:dd:1d:94:6b:1d:d3:a9:98:15:44:b1:53:98:
                    ce:a9:ea:1a:92:3c:8d:3d:70:5e:83:00:bb:6b:f3:
                    df:a0:08:87:43:7f:a8:42:82:92:77:b7:77:1e:4e:
                    20:c5:21:0d:ca:a3:03:73:aa:65:48:cc:f1:1f:4a:
                    4d:10:1c:6e:ad:da:0c:6a:a5:a8:77:ad:af:59:e2:
                    30:be:b5:2d:e7:71:27:62:d5:0a:56:3c:7a:5b:51:
                    76:3e:d5:ab:f9:1a:b5:29:a5:e3:5e:c4:53:b6:0a:
                    7b:5a:b5:70:99:0f:63:08:e6:eb:ec:04:da:a7:56:
                    0d:24:2b:46:86:93:83:2c:5b:bd:67:b8:d9:56:d8:
                    a7:8e:cf:10:e2:f6:13:1e:85:4c:11:4c:0f:b1:d5:
                    02:46:2e:75:1c:ca:6e:f3:27:3e:5c:6a:36:de:e2:
                    bf:92:e2:c7:23:d5:d1:ca:0f:42:07:8d:fe:da:fe:
                    a9:dd:e0:a8:3f:55:74:34:5c:45:e0:85:c0:c0:f5:
                    79:b8:2e:09:e3:55:53:5b:db:98:a7:ae:3b:e7:bb:
                    11:ad:6a:5d:c6:d6:f2:94:fe:ac:d4:58:bd:50:45:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4E:58:8B:ED:B1:C1:09:4A:97:25:17:37:09:F2:05:D8:0A:9A:61
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136342e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:e6:b6:cf:b5:e5:f4:b0:0b:1c:f8:03:8a:71:fb:8d:63:
         5e:e2:e6:90:da:1c:a0:9b:b2:69:17:d4:d0:75:66:d3:2f:ad:
         97:2e:05:32:e4:57:8b:5a:34:a6:c6:4d:0f:2e:8f:c3:ad:c9:
         06:aa:48:45:ca:dd:85:ab:91:d6:dd:2f:b5:32:9c:30:aa:33:
         c1:2f:bb:2e:3c:43:1b:d8:67:1f:9b:fd:36:86:c0:95:15:6c:
         fe:40:f1:50:a2:f6:f3:5e:49:ba:6a:bb:0b:0f:e1:47:c3:ea:
         9f:a6:f8:69:61:8a:e9:20:5e:93:10:d7:53:e2:1b:65:0b:f2:
         da:95:a6:cc:54:87:bd:42:ff:f8:b5:a7:c3:4d:78:01:df:1c:
         7c:57:aa:10:80:86:7a:6e:4c:83:db:c3:df:72:e1:d6:ba:77:
         02:b2:16:48:da:7b:f9:c1:fb:f2:bb:b1:2a:aa:9f:b1:c8:8d:
         21:3f:16:b8:c4:f8:e7:04:4e:c0:47:7a:e6:31:30:a9:de:57:
         3e:a0:cd:86:7c:9f:15:b4:48:cc:7d:bf:8a:7b:e5:f7:a3:6c:
         f3:ff:9c:e5:fa:4d:fb:c3:eb:e6:d0:dd:43:01:ab:05:f9:1b:
         d8:c3:4d:ba:61:91:73:9c:96:52:17:39:07:fd:2c:ee:3a:9e:
         23:91:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:07:02 2026 by rpki-client