Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          byhy9NN2OLQYR6W+0AQqiLISHgcVbemGkHBo4yIfC+g=
Subject key identifier:   A1:79:60:7D:1D:F3:76:A4:CA:C0:14:B7:8D:F8:32:EF:12:82:A9:74
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       433D095898BF74BDA956FD36FF5032759DF43BD0
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:55 +0000
ROA not before:           Fri 26 Sep 2025 03:57:55 +0000
ROA not after:            Fri 25 Sep 2026 04:02:55 +0000
asID:                     18059
IP address blocks:        116.90.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3d:09:58:98:bf:74:bd:a9:56:fd:36:ff:50:32:75:9d:f4:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:55 2025 GMT
            Not After : Sep 25 04:02:55 2026 GMT
        Subject: CN=A179607D1DF376A4CAC014B78DF832EF1282A974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:26:40:8e:c4:c3:24:91:e0:f8:33:3f:ec:
                    9d:18:41:2f:65:9a:5e:f4:8e:02:0e:32:b4:29:77:
                    bc:99:08:b4:3c:d4:27:87:95:1c:b3:1f:a7:d0:04:
                    35:2c:92:7a:a3:db:2d:d4:35:ae:31:ed:9c:12:6f:
                    d2:95:5a:eb:31:ef:71:39:69:34:82:93:56:00:21:
                    32:2d:19:06:29:aa:07:fc:2f:ab:e6:c1:ca:41:55:
                    b4:8e:bb:2d:c3:cd:e2:13:83:f0:d0:60:8f:40:56:
                    be:5d:4f:01:64:bd:65:ac:6a:45:04:44:26:47:bd:
                    b2:a1:61:1e:3c:7f:47:02:17:72:7e:c3:9e:c6:a1:
                    20:3b:1e:82:e0:0a:28:dd:c0:a1:3e:b6:cd:38:f5:
                    c5:ed:35:63:32:3e:9d:b3:43:22:c3:be:1a:84:38:
                    63:32:71:c7:96:90:ee:40:b7:5b:19:20:b1:72:03:
                    63:e9:be:4b:ae:8b:b5:fd:a3:c7:90:e4:44:1d:b1:
                    17:17:f2:1d:54:2c:ce:19:dc:1c:b9:c6:d7:2b:8f:
                    72:a9:2e:76:02:9c:8e:8a:fd:b5:23:27:f0:eb:bc:
                    35:a5:65:ca:63:2c:78:01:7a:31:ce:c7:10:91:29:
                    ca:c5:29:db:d1:c7:69:e7:d5:fa:66:9c:bb:3b:5c:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:60:7D:1D:F3:76:A4:CA:C0:14:B7:8D:F8:32:EF:12:82:A9:74
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:5c:14:0a:66:4a:3d:63:44:48:ae:8f:0e:21:bf:96:39:
         15:0b:15:6d:a0:f0:9c:55:df:ab:c9:6c:f7:49:4e:14:14:04:
         a0:84:e0:30:f7:48:46:5e:7f:9e:eb:bf:32:ed:7e:45:2c:eb:
         55:fa:26:12:7e:7e:5d:06:97:79:f8:b8:1c:05:ba:d1:a1:ac:
         a1:60:f5:22:2a:f0:cf:a6:6d:06:13:78:a1:af:12:cf:81:78:
         c0:45:99:8d:b2:63:49:43:f3:c2:0f:57:f6:f6:83:94:eb:a7:
         58:55:d0:1d:2d:ae:ca:6f:11:4b:c8:7c:c8:45:23:cf:44:18:
         82:c8:95:60:da:0a:80:23:d9:be:1b:d9:db:be:4d:61:42:01:
         fa:6f:cf:66:4c:fa:ae:88:0c:f8:22:a6:a8:d5:44:d3:e3:f5:
         67:c4:48:55:a8:f2:26:a3:b8:c5:bf:c9:85:24:d2:a8:b4:16:
         c2:00:23:a5:1f:10:02:f5:59:72:04:48:96:b8:eb:50:4c:97:
         c0:2d:c8:45:e8:9d:e7:f3:c3:21:8c:40:45:8d:ae:9e:24:f8:
         94:50:57:b9:13:97:2b:e1:ee:f1:65:9c:9c:40:ff:c9:9b:ac:
         dc:18:19:f8:fd:f3:b8:ed:0f:d3:12:a2:01:1d:1b:f3:5b:fa:
         27:55:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:41 2025 by rpki-client