Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa
File:                     3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (raw, json)
Hash identifier:          VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=
Subject key identifier:   2D:DF:36:72:0F:05:8E:83:38:5E:A6:FA:A9:71:BD:D1:F4:8F:E2:EA
Certificate issuer:       /CN=AA90F6A6378710CD695B4CC742651F235E503C5B
Certificate serial:       31C32F1A77FA585848ED9BE1E56C9274EF03F5E4
Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa
Signing time:             Mon 29 Sep 2025 13:00:01 +0000
ROA not before:           Mon 29 Sep 2025 12:55:01 +0000
ROA not after:            Mon 28 Sep 2026 13:00:01 +0000
asID:                     152016
IP address blocks:        180.131.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl
                          rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 02:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c3:2f:1a:77:fa:58:58:48:ed:9b:e1:e5:6c:92:74:ef:03:f5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B
        Validity
            Not Before: Sep 29 12:55:01 2025 GMT
            Not After : Sep 28 13:00:01 2026 GMT
        Subject: CN=2DDF36720F058E83385EA6FAA971BDD1F48FE2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:7c:f7:cd:71:6c:54:b9:a5:5b:b4:73:3a:
                    ad:d9:a0:e3:a0:cf:36:c7:39:13:4f:a1:57:1a:ef:
                    86:0f:2e:c9:7c:7a:55:25:a4:2f:e9:11:9d:33:04:
                    09:0b:44:6b:8a:bc:e8:18:b7:45:fc:3e:c7:a2:19:
                    8c:7e:13:dc:b8:98:03:be:15:48:6a:b7:dd:e5:fa:
                    d7:b6:54:fd:20:25:39:5f:f8:36:37:fb:13:29:90:
                    76:a7:ba:85:90:f1:dd:a0:0d:c1:e7:b9:db:7d:8f:
                    d1:6c:88:df:f8:40:bb:dd:51:0c:dc:de:c9:53:b4:
                    9d:0d:32:2e:f0:12:81:5a:a1:fc:6a:bc:6d:30:20:
                    da:5a:af:36:13:7e:f5:02:42:d6:fd:9a:0e:64:2c:
                    77:8e:93:ea:51:69:3b:1b:5b:06:ca:5e:c9:65:66:
                    e6:93:77:4f:05:2b:bd:64:5d:7d:45:22:c9:df:9f:
                    67:92:5f:40:aa:d5:1f:06:89:a5:1e:8b:72:77:08:
                    61:06:7b:79:eb:7b:f7:e3:c9:5f:f6:62:d5:b0:d1:
                    51:5a:c2:68:84:56:aa:f6:0f:46:9e:9a:ee:52:e3:
                    7c:a2:ed:6f:ad:07:78:da:bb:1f:42:ce:0d:5f:7a:
                    33:e2:0e:41:8e:bf:09:3c:e0:f7:c5:59:b0:16:5c:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:36:72:0F:05:8E:83:38:5E:A6:FA:A9:71:BD:D1:F4:8F:E2:EA
            X509v3 Authority Key Identifier:
                keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:d4:96:9c:f2:ae:d2:33:ca:80:ae:cf:1a:47:12:7a:92:
         68:9b:a7:16:d3:52:7f:06:cd:13:d5:9e:d9:bf:8e:72:28:32:
         ec:ef:e7:d9:69:bc:e6:4d:96:45:7c:aa:80:3c:db:c7:e4:32:
         94:cc:9d:f4:66:a1:01:dc:8a:e2:ca:ec:c1:27:1b:15:ff:e2:
         5c:e8:f6:f5:eb:2b:7e:98:00:6f:41:22:a6:a3:a6:92:70:f9:
         43:f3:a6:8e:c6:7c:ad:c2:a2:98:fb:18:2d:6b:57:03:60:b0:
         ff:2e:fe:da:16:2c:f7:e3:4c:e7:72:f7:b0:a9:53:9b:bc:d7:
         97:93:78:b5:51:bf:96:94:ed:29:c0:65:c0:c3:31:cc:39:b2:
         08:57:52:17:a5:d6:2b:0b:b7:32:a2:62:ca:f4:38:43:dd:c9:
         4f:97:9f:1f:2f:df:d0:2d:dc:79:a3:cd:91:e1:cd:28:6a:f8:
         bf:56:d5:13:ed:4e:ea:df:14:d9:7d:41:d3:5c:0e:b1:ef:35:
         ab:8e:9f:e4:cb:aa:73:f6:46:91:42:cd:2b:90:c5:f3:15:ff:
         ca:1a:b0:f0:64:4b:f8:b3:b8:6a:40:69:5a:61:6f:db:97:f3:
         be:f3:47:16:0b:53:5e:83:eb:7b:4d:1a:f3:b6:88:9d:ea:07:
         7d:2f:42:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:30:34 2025 by rpki-client