Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
File:                     3131362e3231322e37322e302f32312d3234203d3e203436303330.roa (raw, json)
Hash identifier:          dOlx9JdukRp8ssMEllj9Av+j8xJKMN5Q6Xb2DOyvG3c=
Subject key identifier:   A8:C1:E0:5B:DE:6E:D8:22:05:40:AF:70:86:FD:27:E4:10:06:EF:08
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       4225B72A993749ABC7FDE18F34A4691080F8886C
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa
Signing time:             Fri 15 Aug 2025 11:00:02 +0000
ROA not before:           Fri 15 Aug 2025 10:55:02 +0000
ROA not after:            Fri 14 Aug 2026 11:00:02 +0000
asID:                     46030
IP address blocks:        116.212.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 05:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:b7:2a:99:37:49:ab:c7:fd:e1:8f:34:a4:69:10:80:f8:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Aug 15 10:55:02 2025 GMT
            Not After : Aug 14 11:00:02 2026 GMT
        Subject: CN=A8C1E05BDE6ED8220540AF7086FD27E41006EF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:3b:33:a5:73:65:a1:3a:be:cb:24:31:20:
                    cc:69:9b:b6:15:2c:b9:af:63:95:76:11:78:30:78:
                    f5:96:cb:d8:91:5a:b0:6c:9d:96:55:ae:63:ce:8d:
                    25:78:a6:81:04:2b:e9:02:2a:3b:7a:d3:d6:20:77:
                    8f:77:3f:75:0c:10:62:76:ba:30:34:2f:b5:21:b2:
                    96:31:3f:b1:be:c3:ed:83:fd:66:6c:67:8b:ec:0b:
                    ae:45:13:9c:e1:81:ce:ed:c9:ed:9b:3e:a4:7a:ea:
                    3e:60:75:28:11:6c:16:a5:f3:ea:4e:c5:d5:2c:d0:
                    dc:8b:8e:fb:1c:54:9a:85:93:13:f1:28:5c:d1:77:
                    b2:bd:be:8b:70:bf:90:9e:e8:a0:59:ad:41:17:7b:
                    0d:ad:89:69:46:64:e4:02:ad:69:e4:85:c1:3b:ad:
                    eb:f3:fa:ac:a3:ca:89:65:25:2b:ab:52:44:bc:30:
                    29:33:fe:24:bb:86:14:1b:c9:ae:88:7f:b0:36:77:
                    ac:a4:45:a5:30:40:56:e0:3d:e1:c4:3c:13:4c:49:
                    74:05:9f:5f:75:0d:45:82:01:cd:d5:fb:e4:a0:ce:
                    61:31:9e:a3:1e:6f:c1:2f:df:df:77:0b:21:d0:96:
                    12:9b:b3:7e:03:91:44:9c:a5:2e:94:64:eb:8e:97:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:E0:5B:DE:6E:D8:22:05:40:AF:70:86:FD:27:E4:10:06:EF:08
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32312d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:2d:05:51:6b:bb:5e:46:fc:ce:a3:3d:0d:bc:5f:e2:af:
         54:d7:11:74:28:e7:71:d7:2a:0c:2a:fc:f7:96:9d:26:87:07:
         ba:72:88:40:b1:e6:4d:a4:4d:1d:1d:a3:b7:8a:79:c5:b7:72:
         e3:76:a0:d3:e1:cf:1b:6b:a6:c9:8a:3f:10:e7:08:91:19:0a:
         3c:ae:b3:13:c2:24:d1:1f:d9:17:bc:12:29:7b:7b:c5:c6:d7:
         42:51:3d:f3:18:d0:e0:0d:fa:04:2b:ec:ac:2e:95:c7:c7:95:
         0c:3c:3d:34:07:ab:fe:e7:eb:99:3d:0f:25:c5:75:e0:14:19:
         c8:e1:2c:f8:f7:4c:17:49:63:6b:d7:a1:31:ee:1d:e8:ed:02:
         83:be:be:e1:ca:74:d6:a2:c8:cf:c3:0f:f1:7f:85:a9:0d:a7:
         31:2d:d8:56:f6:f7:7c:47:0f:8e:ff:3a:ae:b9:a8:95:a9:0b:
         b8:83:0a:03:9a:4f:78:cc:fb:7f:1c:c5:a1:03:f7:b1:b9:fc:
         7c:06:65:e5:00:f2:cc:23:d1:cb:6b:e4:a5:19:29:26:db:ea:
         89:1b:68:6a:63:f9:c4:d3:76:61:96:aa:6b:bc:99:18:24:db:
         26:b2:15:68:3c:9d:9d:7e:5e:1d:7b:97:17:8d:43:ee:81:7b:
         2b:d6:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:02 2025 by rpki-client