Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136362e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          o5nxE12irK/kWtLi6AhgEiJWPSB2P4bPMjs2IMezfgw=
Subject key identifier:   59:10:29:8F:0C:27:79:EF:9E:4D:1E:64:86:09:5D:E1:A6:0C:A4:69
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       57B7578F56923580AEAA8CE31751C080BEFD2FAA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:58 +0000
ROA not before:           Fri 26 Sep 2025 03:57:58 +0000
ROA not after:            Fri 25 Sep 2026 04:02:58 +0000
asID:                     18059
IP address blocks:        116.90.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:57:8f:56:92:35:80:ae:aa:8c:e3:17:51:c0:80:be:fd:2f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:58 2025 GMT
            Not After : Sep 25 04:02:58 2026 GMT
        Subject: CN=5910298F0C2779EF9E4D1E6486095DE1A60CA469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:1c:10:5f:b3:6b:ce:ba:66:2e:96:c1:f3:
                    25:34:15:f9:83:69:d8:31:54:2c:66:16:6c:fa:2b:
                    4e:97:f8:3b:e6:ff:77:56:84:49:3f:1c:76:6a:ed:
                    fa:f7:9d:ca:ae:90:dd:4e:69:3e:a1:3b:84:31:3b:
                    ad:2c:28:b2:b1:29:1f:5e:e6:80:8b:7b:65:8d:e7:
                    e2:70:b0:4e:83:7a:35:20:b2:6d:a8:d3:92:e4:a2:
                    74:c6:8f:f6:5d:6e:f9:ff:c3:17:19:1f:1d:de:18:
                    c8:51:b9:47:f8:9e:e6:bd:6c:f6:19:0a:d0:8c:f5:
                    10:de:24:c9:22:62:90:4d:72:ee:9f:e6:27:31:eb:
                    b2:18:24:bf:67:d1:a2:29:82:41:71:49:66:51:d7:
                    4a:47:af:cc:32:e2:03:fc:de:83:04:c2:6c:df:63:
                    72:5d:d8:3c:d8:43:e3:1b:65:15:4d:cd:e3:46:33:
                    ed:88:ff:3e:58:25:f9:0c:0d:1d:8b:58:df:a3:ee:
                    b2:8b:d9:30:dd:7d:8e:80:bd:e8:e2:48:9a:6d:29:
                    28:3d:78:3c:88:fb:96:13:2c:a2:b0:6f:ac:f6:c3:
                    13:af:d2:a0:72:b0:aa:46:88:83:7a:44:d6:d9:f8:
                    cb:65:e4:be:08:07:a8:f7:88:06:a5:60:f3:27:6b:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:29:8F:0C:27:79:EF:9E:4D:1E:64:86:09:5D:E1:A6:0C:A4:69
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:7d:e9:4f:fc:db:82:fa:8c:e1:5a:56:ae:5d:d6:9a:de:
         24:98:3b:c9:02:09:fc:87:a2:ea:5e:19:64:44:0c:f7:fd:f6:
         a7:cc:b8:02:5b:91:e7:6a:d6:ef:8f:02:d2:d3:56:7b:33:9f:
         67:00:e8:41:38:46:30:7c:bd:e5:03:1a:cb:b6:0a:59:db:b6:
         6b:82:aa:08:23:ff:4c:f3:69:46:4f:df:8c:36:43:7c:4e:c6:
         d8:79:e3:bd:4d:d1:7e:0a:53:83:f1:20:3b:7b:27:6a:10:c9:
         ad:e1:80:6a:00:a6:71:05:7c:43:f5:d2:6c:93:e8:75:7f:1d:
         a2:f8:c0:52:a9:df:b9:1c:3c:ac:88:c4:93:33:cd:e7:ee:34:
         8f:13:22:66:55:66:f0:ac:ef:b8:2b:49:6d:0c:af:9b:95:68:
         26:49:da:82:d9:78:21:68:b2:fd:e7:69:98:ee:d4:4e:c3:ec:
         87:10:3b:e6:a5:f6:a4:35:d9:a1:6b:2e:e0:28:f5:06:19:55:
         51:90:1a:bd:ab:ed:2b:0d:1b:cc:1f:1a:1e:44:96:e8:0c:c0:
         15:32:06:37:c3:59:97:c4:27:f2:03:8e:86:d0:8a:92:07:1c:
         9a:b1:5e:4d:df:f9:0a:91:4a:df:86:2f:4a:cc:a8:2e:57:9b:
         c1:8a:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:53 2025 by rpki-client