Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          HFj9+63FdDfSPaCZQTVU00NoAATQ4ceU2hPgWQkTVl8=
Subject key identifier:   FF:F9:CF:8C:21:78:66:3C:F6:6B:68:96:E0:23:4B:41:57:36:E5:D2
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       5CCE447B75D0B233C3A8967011CDFB6F22A0C531
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:56 +0000
ROA not before:           Fri 26 Sep 2025 03:57:56 +0000
ROA not after:            Fri 25 Sep 2026 04:02:56 +0000
asID:                     18059
IP address blocks:        116.90.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ce:44:7b:75:d0:b2:33:c3:a8:96:70:11:cd:fb:6f:22:a0:c5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:56 2025 GMT
            Not After : Sep 25 04:02:56 2026 GMT
        Subject: CN=FFF9CF8C2178663CF66B6896E0234B415736E5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:b9:17:4d:33:95:43:ea:53:7e:4f:d1:fd:
                    0f:09:dc:b0:b7:e2:31:59:3e:2a:ee:fd:d1:e3:5b:
                    ea:f5:72:d9:6c:73:2f:e3:36:8b:c9:fa:61:3d:22:
                    71:1e:1d:ea:75:ff:c2:b4:1b:9e:b8:57:98:89:7c:
                    f8:25:83:68:4c:6f:f3:4b:5d:42:e0:45:72:46:b5:
                    36:8c:f2:ce:0d:de:ee:60:54:1f:0d:58:7e:e1:f1:
                    ef:ac:cc:1c:0e:c0:8b:a3:20:87:0e:26:68:ac:78:
                    71:ab:7c:27:58:51:a2:72:51:4c:6c:32:d0:51:32:
                    03:43:f3:77:2a:12:85:36:20:44:18:a4:ee:c2:19:
                    4d:50:9a:f0:66:3a:60:32:c3:71:ca:3b:5e:93:92:
                    6c:65:6c:e6:42:4b:e7:40:0f:75:92:64:03:34:00:
                    91:79:1f:cc:85:bf:56:e2:25:a0:23:f4:8a:4d:73:
                    23:ec:3e:33:1a:20:5f:e5:cc:32:cc:9a:0b:84:ff:
                    d6:7c:14:a9:8d:78:30:e9:2d:94:9b:7d:a8:b4:d2:
                    45:bb:83:64:06:f7:03:91:29:ab:94:46:f9:5e:9b:
                    07:47:b5:14:f8:4f:a5:4b:7e:b5:93:29:04:2f:4a:
                    b0:dc:52:99:46:f8:8d:b3:fb:a4:82:a8:23:86:16:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:CF:8C:21:78:66:3C:F6:6B:68:96:E0:23:4B:41:57:36:E5:D2
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:c8:03:4b:95:c2:d6:d1:cc:14:81:21:20:3d:68:9d:0e:
         b5:39:8d:ad:95:ed:61:f0:a0:00:87:5c:25:a4:1e:f1:1f:50:
         62:5e:c4:c8:58:27:90:67:da:99:e6:c8:d3:0a:5f:d1:2f:c0:
         4b:aa:40:61:90:96:bb:a9:17:15:9d:bc:48:e8:d6:9b:85:1e:
         e4:f9:05:f9:b2:dd:c5:0d:cf:bc:22:6d:2f:4c:cc:5c:9c:fd:
         a3:2a:d0:b5:55:99:e6:b8:75:8b:e2:1a:35:e9:6b:8b:10:be:
         9a:2e:e7:4c:f8:a3:8c:62:6d:54:c3:c5:8d:3a:3d:4c:f8:3d:
         81:67:c5:2a:9d:ca:69:53:0d:e0:23:29:d0:44:cc:2c:5d:31:
         81:d2:be:68:03:7b:93:d0:ac:64:ef:ed:05:10:73:18:be:f8:
         a2:1d:c5:18:95:77:79:8a:38:f2:8b:1b:b6:ce:ff:86:bb:1f:
         3b:84:b8:66:ed:44:7e:9e:da:91:c7:f9:34:86:5f:2f:c7:cf:
         fe:bf:0d:68:08:28:1b:80:dd:c4:f4:4b:ec:a6:3e:36:1d:d3:
         05:04:5a:f6:ac:fd:63:33:b0:6f:4f:b5:ed:75:3c:b3:c6:51:
         af:71:cc:1f:de:45:34:ae:b5:6f:59:5d:e7:63:9e:64:ac:17:
         40:01:b5:1d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXM5Ee3XQsjPDqJZwEc37byKgxTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTZaFw0yNjA5MjUwNDAyNTZaMDMxMTAvBgNV
BAMTKEZGRjlDRjhDMjE3ODY2M0NGNjZCNjg5NkUwMjM0QjQxNTczNkU1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVLkXTTOVQ+pTfk/R/Q8J3LC3
4jFZPiru/dHjW+r1ctlscy/jNovJ+mE9InEeHep1/8K0G564V5iJfPglg2hMb/NL
XULgRXJGtTaM8s4N3u5gVB8NWH7h8e+szBwOwIujIIcOJmiseHGrfCdYUaJyUUxs
MtBRMgND83cqEoU2IEQYpO7CGU1QmvBmOmAyw3HKO16TkmxlbOZCS+dAD3WSZAM0
AJF5H8yFv1biJaAj9IpNcyPsPjMaIF/lzDLMmguE/9Z8FKmNeDDpLZSbfai00kW7
g2QG9wORKauURvlemwdHtRT4T6VLfrWTKQQvSrDcUplG+I2z+6SCqCOGFgMvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU//nPjCF4Zjz2a2iW4CNLQVc25dIwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRaoDANBgkqhkiG
9w0BAQsFAAOCAQEAXBnIA0uVwtbRzBSBISA9aJ0OtTmNrZXtYfCgAIdcJaQe8R9Q
Yl7EyFgnkGfamebI0wpf0S/AS6pAYZCWu6kXFZ28SOjWm4Ue5PkF+bLdxQ3PvCJt
L0zMXJz9oyrQtVWZ5rh1i+IaNelrixC+mi7nTPijjGJtVMPFjTo9TPg9gWfFKp3K
aVMN4CMp0ETMLF0xgdK+aAN7k9CsZO/tBRBzGL74oh3FGJV3eYo48osbts7/hrsf
O4S4Zu1Efp7akcf5NIZfL8fP/r8NaAgoG4DdxPRL7KY+Nh3TBQRa9qz9YzOwb0+1
7XU8s8ZRr3HMH95FNK61b1ld52OeZKwXQAG1HQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:36 2025 by rpki-client