Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa
File:                     3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier:          XbFM/MsMwO9/XRhknNQbeHePSLN/NdPoTOwfdwxC+gQ=
Subject key identifier:   AF:F1:57:25:30:5A:7C:E8:88:D8:6B:81:F9:AD:F2:18:60:A5:ED:2A
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       258D476A3A9EE2BD064F1384FC6135FB8ED0258A
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa
Signing time:             Tue 01 Sep 2026 02:48:07 +0000
ROA not before:           Tue 01 Sep 2026 02:43:07 +0000
ROA not after:            Tue 31 Aug 2027 02:48:07 +0000
asID:                     149662
IP address blocks:        114.199.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 18:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8d:47:6a:3a:9e:e2:bd:06:4f:13:84:fc:61:35:fb:8e:d0:25:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: Sep  1 02:43:07 2026 GMT
            Not After : Aug 31 02:48:07 2027 GMT
        Subject: CN=AFF15725305A7CE888D86B81F9ADF21860A5ED2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:17:13:5f:7d:b8:17:7d:98:2a:82:c7:9c:
                    a6:24:d0:85:68:94:f0:f9:be:12:79:82:71:e7:5e:
                    99:5a:a7:38:dc:71:ec:d9:70:a9:f4:33:81:59:6b:
                    80:d6:96:84:e1:0d:39:9c:4d:fd:03:d9:97:b8:6c:
                    21:d3:7e:11:60:b9:b1:d6:0f:c9:b8:75:b5:97:d9:
                    89:b7:70:72:4b:dc:54:c2:19:07:bf:71:fe:61:62:
                    b7:05:33:d5:a1:6c:9c:e8:fe:1d:b7:8b:07:be:51:
                    43:77:d4:c5:34:14:35:53:15:7a:e1:ab:a3:52:d0:
                    ec:5f:71:d6:95:9a:90:4b:95:81:75:e5:bb:71:8a:
                    cd:49:af:5c:18:e1:55:fc:42:11:55:98:3d:47:ea:
                    35:65:0b:56:ad:1b:37:b9:c3:89:f0:fa:09:87:2d:
                    12:90:90:f0:23:d3:f8:bc:1e:8e:da:6a:fe:41:0e:
                    19:3a:51:72:70:d9:45:75:b0:ea:bb:70:72:f5:32:
                    ae:82:39:18:8b:e2:f4:71:1b:fe:2d:ea:66:72:fb:
                    c9:2d:d3:f7:b4:41:ec:5e:3f:d0:1f:e1:74:48:42:
                    54:11:ae:33:c5:0d:fc:d4:ad:54:f8:25:13:9f:c0:
                    65:c4:9f:5e:af:39:bd:c7:20:92:b0:59:cc:da:0b:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:57:25:30:5A:7C:E8:88:D8:6B:81:F9:AD:F2:18:60:A5:ED:2A
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:48:71:8b:81:04:37:0b:c3:b4:1e:8b:c0:1e:d7:4a:8e:
         ba:e9:8f:ab:b7:46:97:c5:18:a4:b8:c5:16:0d:1f:b4:59:b6:
         c8:4d:11:c9:a4:95:be:c8:6a:96:dc:90:fe:9e:7d:9a:8c:48:
         29:d0:a2:16:db:5f:46:7d:4c:3f:9e:7f:5c:50:95:52:73:a2:
         af:08:e4:1e:8a:17:fc:8b:5b:77:f7:16:e5:60:7a:aa:cb:b9:
         d2:fc:c8:14:1d:3a:ab:dc:16:5d:de:b0:d3:9b:f8:25:e2:c8:
         5c:ec:f7:e9:d3:c9:51:c6:49:e1:6d:aa:c8:22:93:ba:5e:fa:
         ee:88:7a:84:a4:64:3b:00:57:8b:51:1d:9f:a1:12:39:f7:2b:
         6e:04:f7:04:b4:9e:25:8b:4e:01:a1:04:b6:ae:ef:75:c6:c7:
         b5:3d:ad:5c:28:07:8c:25:02:75:0c:2e:41:57:10:29:38:d1:
         85:17:33:f9:63:d2:cf:b0:a2:89:4b:03:19:29:2c:ef:ac:6f:
         1b:93:94:f9:d9:34:04:e8:5a:93:f3:f3:04:d6:ab:68:eb:44:
         95:d3:4d:7c:37:25:47:1a:70:53:b5:ef:9e:db:81:ae:91:29:
         85:d7:25:13:85:d7:bb:02:d3:c7:45:a2:b6:62:24:fc:18:e4:
         97:e8:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 10:09:02 2026 by rpki-client