Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          5hWRwkS5it5PriY7Ix25QzSKcb6zPQI79ANxD/tRs2Y=
Subject key identifier:   8E:91:DB:12:0C:E2:18:06:03:B1:BE:8A:E3:EA:18:DE:B5:C2:C2:12
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       4DA7DD8D78CCE3E4831F6A6A57747000DEE6A866
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:59 +0000
ROA not before:           Fri 26 Sep 2025 03:57:59 +0000
ROA not after:            Fri 25 Sep 2026 04:02:59 +0000
asID:                     18059
IP address blocks:        116.90.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:dd:8d:78:cc:e3:e4:83:1f:6a:6a:57:74:70:00:de:e6:a8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:59 2025 GMT
            Not After : Sep 25 04:02:59 2026 GMT
        Subject: CN=8E91DB120CE2180603B1BE8AE3EA18DEB5C2C212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:17:64:30:1b:68:fc:c2:1d:a1:73:3e:5e:
                    ab:d0:0b:6d:14:6b:16:05:11:5f:0f:61:af:8f:ba:
                    90:aa:ff:0f:c6:9b:5d:96:d2:7c:87:31:de:bd:f0:
                    72:dd:e8:5d:13:6f:bf:ec:b1:a6:b8:19:13:b0:8c:
                    58:2b:14:68:56:25:8e:c7:9a:a8:92:8c:a6:4e:86:
                    0f:8e:b2:84:44:85:24:35:43:79:ce:53:ff:84:3f:
                    96:7c:89:99:d6:86:30:75:79:18:cd:18:9d:b1:75:
                    13:20:ec:fa:18:44:62:b2:e9:71:dc:25:ae:f0:cf:
                    82:38:68:25:66:5f:76:74:59:5d:60:88:8f:8d:91:
                    fe:1c:ce:ba:e5:f1:a1:f2:4d:ec:93:22:e9:ac:84:
                    81:ef:5f:a4:be:d3:6a:7c:1e:3d:fe:dd:c7:21:66:
                    9b:51:69:b7:1d:d7:7f:fe:b8:fc:a3:9a:a0:1e:a8:
                    71:98:9f:0e:2f:2b:c5:ff:39:f6:9d:89:8d:e5:0f:
                    3e:46:71:6c:46:65:0f:ff:b2:a0:f6:4d:1d:24:81:
                    78:6f:c7:2e:75:3e:4f:61:b7:6b:d1:fd:9b:3c:11:
                    3c:60:39:fe:b8:79:72:96:b5:5f:b8:72:44:51:f4:
                    e7:19:39:e3:02:a4:a2:41:0e:bb:25:62:3b:78:ae:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:DB:12:0C:E2:18:06:03:B1:BE:8A:E3:EA:18:DE:B5:C2:C2:12
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:26:b4:8a:60:8d:be:93:c5:77:34:ae:d7:e8:a1:30:9f:
         64:be:1f:c6:43:ba:67:10:89:ff:74:0e:e7:24:34:99:e9:23:
         f2:55:95:f7:53:e4:2a:c8:2b:7e:a2:71:a6:46:52:fd:4f:9e:
         29:15:44:e4:15:9d:77:b5:64:18:38:ad:01:7f:aa:33:86:68:
         5c:fb:52:9e:20:63:51:40:49:c0:90:ba:f6:63:47:61:ca:c4:
         d3:38:3f:03:29:96:f3:f5:bd:32:00:42:3e:de:4c:9e:70:5a:
         a8:06:01:d8:b7:b8:f3:80:f9:8e:15:cc:0c:c5:99:c7:fc:75:
         4c:17:7c:f8:d2:35:76:b0:82:69:9b:35:62:be:49:9d:2d:11:
         33:50:67:d0:20:9d:ea:dd:53:c5:69:48:31:1b:67:d0:bf:51:
         d3:26:f8:4a:83:c6:fd:b7:c3:48:0a:eb:31:ce:6f:89:aa:6d:
         9c:4d:b5:bc:2a:ba:d9:6b:8b:23:3b:c6:70:5d:87:99:be:17:
         16:15:3e:69:88:83:cf:7e:fd:f1:18:1b:03:27:3c:00:8d:cf:
         38:8e:5d:56:e8:9d:92:a7:5b:f5:84:45:53:47:69:77:18:4d:
         9f:7e:bb:06:cc:1f:07:5d:ff:db:f5:4e:48:63:b0:4e:c7:86:
         6c:a4:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:23 2025 by rpki-client