Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
File:                     3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (raw, json)
Hash identifier:          GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=
Subject key identifier:   FE:A4:C7:65:CB:06:2B:99:65:36:91:24:5B:E5:B8:40:AB:D5:16:81
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       505B77C231EB3AEAA420E7EA4079A86E859C76B2
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
Signing time:             Mon 20 Oct 2025 19:00:02 +0000
ROA not before:           Mon 20 Oct 2025 18:55:02 +0000
ROA not after:            Mon 19 Oct 2026 19:00:02 +0000
asID:                     131691
IP address blocks:        116.213.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 05:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:77:c2:31:eb:3a:ea:a4:20:e7:ea:40:79:a8:6e:85:9c:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Oct 20 18:55:02 2025 GMT
            Not After : Oct 19 19:00:02 2026 GMT
        Subject: CN=FEA4C765CB062B99653691245BE5B840ABD51681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:6b:77:5f:91:b0:67:f7:ad:69:b0:c6:f0:
                    d5:9c:c6:16:05:3d:17:bf:95:1c:6d:96:95:d2:48:
                    e8:76:7a:fa:b2:5a:a3:47:40:85:b9:da:64:3b:1e:
                    43:be:aa:45:99:63:ff:3e:1d:38:c9:9e:47:8d:d7:
                    5a:d6:c4:52:1f:e8:d4:ce:b3:84:bf:d6:94:f9:c1:
                    ff:f3:5d:44:3e:e7:74:0c:c1:56:da:40:67:74:6d:
                    b8:0b:40:5c:fc:23:df:8a:f2:23:2c:20:fb:8d:0d:
                    0c:f3:56:09:85:09:16:e4:b4:50:ce:de:bc:a8:67:
                    1f:c8:5d:fc:e7:da:a7:39:ee:a3:6c:90:01:f1:e6:
                    32:24:c0:1d:2b:15:22:2f:47:85:6b:b7:24:44:db:
                    39:16:f3:87:12:16:2a:e1:02:15:8f:80:a0:3e:e7:
                    f2:09:70:02:88:16:f4:d3:59:51:6a:2d:3a:47:d2:
                    f1:19:94:62:ff:52:51:56:f9:35:be:34:04:7a:ea:
                    c2:f8:67:91:85:47:01:cd:8a:db:a6:80:9c:33:12:
                    f0:ca:7d:f6:23:28:e3:02:65:0d:c7:3c:86:4e:98:
                    d6:51:40:8c:08:4c:21:b2:ae:e9:a5:af:df:92:84:
                    af:7f:64:e7:cb:3d:47:6a:75:79:f1:4c:12:b8:c2:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A4:C7:65:CB:06:2B:99:65:36:91:24:5B:E5:B8:40:AB:D5:16:81
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:20:72:b8:f6:53:c2:17:92:1f:e4:1d:98:81:ba:13:e5:
         34:1f:a9:78:cf:4c:04:c9:b8:02:47:24:02:06:00:f3:9e:19:
         84:40:d1:40:62:de:73:f1:65:96:2a:64:4f:e7:99:06:a5:50:
         ad:f8:46:be:fe:d4:13:06:be:76:da:27:fa:05:69:ee:df:ac:
         7d:17:82:7d:30:5f:83:d9:35:ff:5e:94:7e:f0:71:df:43:a4:
         47:9b:1b:ab:f1:4c:81:9f:73:45:76:f8:9b:c9:08:1f:0c:0a:
         45:3d:11:95:3f:fd:38:05:2e:09:11:11:fb:f2:2b:44:e0:b2:
         d0:7f:48:57:d4:c8:04:35:86:5f:5f:6a:6d:e4:cb:ad:cc:d2:
         4c:99:9f:34:31:01:48:08:c0:6e:f2:ed:11:78:37:b2:bf:53:
         4a:0f:d6:58:08:c1:89:c5:9b:04:5f:ee:8c:6d:3f:ef:2a:37:
         53:e6:99:21:85:7f:dc:b3:f3:92:9e:49:c7:3e:6f:a1:30:85:
         d0:77:31:19:10:d6:3d:8b:47:ba:de:45:9e:e4:65:1b:00:ef:
         90:8c:29:d0:04:29:8c:03:ba:ae:ef:8f:24:5f:db:95:2f:6e:
         66:e0:7a:8d:92:d3:be:b9:f3:d7:18:08:69:95:1c:b7:c7:10:
         a1:17:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:21:22 2025 by rpki-client