Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          Op1HNDVn7sF/iQQw6tM5342z9opynWBnWCuomuJuG3M=
Subject key identifier:   96:3D:32:47:11:B2:77:E8:A9:97:9E:F5:73:05:F9:F7:A1:69:19:E9
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       094B632A83F0A3BFD888396DB70947ED4F8849D9
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa
Signing time:             Wed 01 Oct 2025 08:03:24 +0000
ROA not before:           Wed 01 Oct 2025 07:58:24 +0000
ROA not after:            Wed 30 Sep 2026 08:03:24 +0000
asID:                     46030
IP address blocks:        116.212.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4b:63:2a:83:f0:a3:bf:d8:88:39:6d:b7:09:47:ed:4f:88:49:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Oct  1 07:58:24 2025 GMT
            Not After : Sep 30 08:03:24 2026 GMT
        Subject: CN=963D324711B277E8A9979EF57305F9F7A16919E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:7b:86:62:24:4d:a4:13:95:b0:7e:23:b1:
                    b0:8d:60:db:0f:77:45:f0:cc:33:20:51:d6:b9:de:
                    90:85:d6:ec:4b:22:8f:44:66:de:d8:db:ae:a4:53:
                    1c:7b:f6:88:c4:61:03:01:24:fd:1e:d0:f8:c1:fc:
                    9c:fd:be:bb:4c:eb:3e:e2:37:04:77:83:53:b8:63:
                    c7:81:c6:57:40:67:9e:41:11:21:3e:fc:26:11:30:
                    ae:89:b5:28:b6:e3:3d:42:49:6a:e1:11:d8:03:04:
                    7b:18:67:86:3c:45:ee:f8:4c:8b:4a:ff:41:9b:98:
                    8f:5f:ec:2c:c9:df:43:d8:8f:9b:20:94:aa:b1:08:
                    6f:f3:7f:c7:86:88:ce:d4:64:d7:b2:eb:32:67:cc:
                    e7:65:21:71:4f:2b:f7:1d:ce:fe:2a:3d:3a:2b:54:
                    cd:45:53:f7:f7:9f:89:e1:c0:5b:76:ac:e2:b1:5a:
                    b3:59:ef:be:70:e0:3b:f4:0c:4e:c6:20:fb:ab:5a:
                    6c:9b:d3:86:0e:41:e9:ce:d8:1a:4d:cf:e5:ed:2f:
                    89:bc:2c:17:62:35:37:90:3d:56:92:35:16:0d:af:
                    f6:59:86:cc:7d:eb:86:5e:01:b3:a6:1a:0e:0b:29:
                    32:ef:5a:4c:fa:5f:ba:35:16:2e:43:03:3c:5f:75:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3D:32:47:11:B2:77:E8:A9:97:9E:F5:73:05:F9:F7:A1:69:19:E9
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37382e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:01:0d:4f:ec:3a:08:11:00:e2:de:e2:d0:34:95:2c:bb:9c:
         6f:df:78:59:2b:cb:d0:68:d1:d5:82:cd:55:72:1e:2f:8b:c3:
         17:d5:1f:3e:f1:c3:b4:40:11:95:36:01:ad:9b:93:cc:fc:ee:
         c3:3d:d0:e8:99:56:4d:50:13:cd:77:e4:74:aa:38:ab:33:b2:
         8f:94:3c:b5:92:53:86:78:f4:92:29:76:18:31:bd:1f:ac:89:
         da:30:7d:ec:f7:e3:d0:98:f7:00:e3:e8:ef:54:48:e6:c2:1b:
         9a:e7:a4:50:a6:7c:7e:fd:f7:3b:f4:7a:8d:15:71:8b:8a:77:
         23:d0:cb:ad:8e:d9:ff:c0:05:dd:b5:d0:8b:26:ec:71:24:f5:
         86:3c:33:ff:21:fe:d4:23:57:22:51:88:c6:ae:05:9b:1f:4f:
         58:c4:26:19:94:5b:03:0a:93:05:4b:08:37:51:27:82:1a:43:
         12:09:ae:b5:48:53:1f:a2:63:e2:47:43:9b:e5:01:d9:2c:b3:
         08:b6:a3:ec:2e:db:d4:1b:ce:9b:29:67:87:78:f4:3c:22:8d:
         26:00:ea:4a:4f:08:12:a7:3e:8b:b7:55:76:4f:e2:65:76:a0:
         80:d3:db:40:43:32:c2:6c:5c:23:fb:69:53:3c:cc:95:fc:64:
         5f:da:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:14 2025 by rpki-client