Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37362e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37362e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          58rmz7M/AFMxoVilVFfJDxMQiMqvZy+vxrNeUA/3QN4=
Subject key identifier:   98:0A:04:D1:F7:CE:53:F8:B3:B0:45:21:7D:D6:41:F5:32:E0:BF:34
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       3F892906AA44AE87FBFDF65073BF1BD0EACBB888
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37362e302f32342d3234203d3e203436303330.roa
Signing time:             Tue 30 Sep 2025 14:00:01 +0000
ROA not before:           Tue 30 Sep 2025 13:55:01 +0000
ROA not after:            Tue 29 Sep 2026 14:00:01 +0000
asID:                     46030
IP address blocks:        116.212.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:29:06:aa:44:ae:87:fb:fd:f6:50:73:bf:1b:d0:ea:cb:b8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Sep 30 13:55:01 2025 GMT
            Not After : Sep 29 14:00:01 2026 GMT
        Subject: CN=980A04D1F7CE53F8B3B045217DD641F532E0BF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:83:c3:0c:71:48:9a:79:58:1f:b7:b4:6f:
                    f7:68:d6:02:36:4c:88:bc:dc:65:70:04:ac:30:44:
                    fe:72:5b:ed:9a:cf:da:24:46:20:98:18:19:4e:da:
                    de:1a:e4:12:fb:3c:37:49:82:2e:e7:9d:32:8a:69:
                    83:a5:30:a2:e3:2f:6e:a6:b7:f0:e7:4d:b3:ae:3a:
                    e3:e4:df:e7:2d:ec:d2:22:eb:5e:3b:b5:ca:26:61:
                    6d:87:4b:40:f5:51:7b:a4:13:f9:b5:0a:16:ca:43:
                    82:3c:33:55:90:86:54:aa:2e:2f:c3:ab:a1:2c:03:
                    92:d9:96:8b:92:6a:b8:f6:85:65:44:7b:54:87:d0:
                    81:4a:39:6b:0a:07:5b:25:b3:f2:78:59:86:d2:ed:
                    b3:73:05:59:f0:cc:3b:53:33:8d:2a:28:2c:de:3d:
                    71:f5:c0:ae:c7:19:99:17:44:99:d8:a8:d3:e3:7b:
                    e3:b2:d6:00:85:27:98:44:6b:10:cb:7a:2d:c0:bc:
                    50:da:63:5e:68:c9:6b:d2:f0:a2:ba:fd:ec:c2:15:
                    f6:af:14:e8:f3:b3:04:70:81:b3:2a:43:9a:53:ab:
                    5a:d5:e8:3d:e0:c4:b5:0d:e0:ba:3f:61:cf:0a:45:
                    8e:79:de:30:39:84:84:4f:1c:45:69:10:59:e3:fd:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:04:D1:F7:CE:53:F8:B3:B0:45:21:7D:D6:41:F5:32:E0:BF:34
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37362e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:35:22:27:0f:69:31:f7:c6:fd:f5:d5:64:3f:01:66:80:
         be:c5:ed:57:ad:45:4f:00:30:55:33:77:58:15:42:6e:54:30:
         1d:a5:b3:94:f2:8e:e0:af:ee:cd:b5:7a:9b:11:c4:5e:35:2f:
         a5:3c:1f:8b:5e:65:a4:98:20:8b:27:12:dc:08:39:95:e4:c1:
         a8:6d:46:af:f4:08:2c:38:eb:69:d5:81:dc:52:cf:c5:d2:0a:
         91:82:2f:8a:42:f9:66:6c:ef:c0:9d:0d:77:65:83:56:d1:bc:
         72:42:d6:ac:8f:6e:20:79:4d:bc:bc:24:be:e8:53:c8:e9:ab:
         0c:ab:0f:c1:74:8b:37:c2:99:c5:cc:6a:eb:85:49:5b:c9:a9:
         8d:6f:91:0d:ff:e1:46:a5:f0:95:b6:69:7c:44:3d:73:58:35:
         fa:24:70:30:17:97:01:e8:59:a4:40:14:90:f6:79:7a:91:75:
         ee:5d:58:51:24:e1:38:2b:ba:cd:63:69:8e:0a:2c:2a:ce:4d:
         c0:08:75:f1:9a:6f:79:e4:da:d6:6f:81:d7:5a:75:8b:08:a2:
         f4:50:55:8d:bc:f4:0f:34:d0:09:b5:24:66:89:cb:40:8c:ab:
         10:09:07:07:73:9e:8f:2a:08:c6:e3:d2:b5:f1:48:be:09:eb:
         63:d3:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:15 2025 by rpki-client