Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          Lni2KjUGWpEBJeCUiYFb+405T6sjcq2EG2/2mNPyQOI=
Subject key identifier:   A2:E3:32:D8:BA:3A:F7:91:D7:2B:86:7B:BA:84:4E:C9:1C:36:56:5E
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       3C536468DBA673E76280CB52BA2F18BCCE6714C9
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:59 +0000
ROA not before:           Fri 26 Sep 2025 03:57:59 +0000
ROA not after:            Fri 25 Sep 2026 04:02:59 +0000
asID:                     18059
IP address blocks:        116.90.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:53:64:68:db:a6:73:e7:62:80:cb:52:ba:2f:18:bc:ce:67:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:59 2025 GMT
            Not After : Sep 25 04:02:59 2026 GMT
        Subject: CN=A2E332D8BA3AF791D72B867BBA844EC91C36565E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:6d:8a:af:68:f5:dd:89:b7:45:81:b4:ba:
                    28:5c:6c:bf:44:68:f6:7c:a4:8d:84:fe:1e:30:0d:
                    bf:d3:87:4b:52:cf:d4:3f:49:c2:33:5a:1e:73:32:
                    8b:ca:57:8c:13:58:76:a4:da:eb:d5:92:10:fc:6c:
                    ea:4a:fc:cb:24:48:a3:01:73:be:80:c7:f1:0a:47:
                    2b:d2:31:86:27:82:45:40:10:2c:6f:66:e8:0c:4f:
                    95:9e:85:aa:04:92:1a:6c:7a:e7:95:a0:c8:ea:f9:
                    23:09:d7:1c:e3:5b:50:09:94:c6:e9:ac:04:05:55:
                    85:17:dc:1d:19:cd:8d:ce:20:6b:f6:d0:b8:cc:ce:
                    cc:8e:bf:42:d3:66:3a:1d:45:22:94:2e:27:75:cc:
                    e5:37:4d:11:ef:b9:d7:b5:15:2b:c0:66:a4:2b:aa:
                    df:ed:cb:65:7a:95:05:92:a0:ba:1a:78:c3:fe:af:
                    b1:9f:47:87:d9:6e:04:d8:5a:51:d0:6f:1f:89:61:
                    0d:ff:8f:7f:2b:85:0d:33:73:09:8e:9b:f3:f2:48:
                    7d:c8:11:19:af:99:61:d6:a2:3f:33:40:9e:ea:0b:
                    2b:f7:3e:5b:01:10:72:9f:aa:3a:83:04:a2:7f:c6:
                    0f:da:10:b9:25:f8:df:e4:5f:a0:9b:6a:be:15:3c:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:32:D8:BA:3A:F7:91:D7:2B:86:7B:BA:84:4E:C9:1C:36:56:5E
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:79:44:dc:6f:7a:c3:3b:07:a1:a3:e9:e9:d3:44:1a:c8:f5:
         ba:13:8c:ff:29:91:c3:2a:ed:fc:01:d3:86:68:ec:69:c5:3d:
         b0:1e:cf:69:fc:c9:87:ea:14:0d:9b:61:51:81:af:b2:9f:fc:
         fe:31:71:d9:86:63:c2:75:64:e6:b6:75:da:83:2a:68:c4:bd:
         3e:21:32:3c:90:00:33:ec:a6:8d:2b:2b:5e:0a:c1:b9:3e:7d:
         3b:6a:f1:e1:49:51:5f:86:78:73:d1:c1:35:43:2b:0c:2e:77:
         4c:28:48:a2:c0:42:a5:dd:39:7d:0f:75:78:73:e2:62:ff:96:
         b4:29:0b:79:29:88:4c:8e:77:4d:73:49:b4:c5:8e:d6:c4:f6:
         79:fa:c6:42:78:79:eb:27:63:b6:1b:30:93:23:35:47:bd:97:
         f5:44:87:32:53:d3:d0:4d:c4:20:10:57:bf:ef:dc:5c:f9:8a:
         08:2f:47:bb:3e:fd:76:22:93:ce:52:57:aa:2c:06:d5:af:b1:
         17:4f:47:4a:c1:36:a7:dd:a6:69:1e:d6:fe:65:6f:7a:04:2b:
         1c:e1:69:9c:d5:a1:cb:ad:d8:98:dd:fa:86:f8:89:8e:ab:2c:
         7f:76:77:5e:5e:d8:b4:62:a2:59:48:c3:76:67:4d:77:cb:f2:
         5e:48:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:49 2025 by rpki-client