Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          VQkHj2lOGC4cA7HcXVKoZQd85Pz5RpXmJp2b7RdkyY4=
Subject key identifier:   1B:15:89:6A:97:15:05:4F:7E:08:10:72:68:1E:57:F2:A6:1A:8D:FF
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       22DD8420FB510C323BB41B24B742E8CEC602E60E
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:58 +0000
ROA not before:           Fri 26 Sep 2025 03:57:58 +0000
ROA not after:            Fri 25 Sep 2026 04:02:58 +0000
asID:                     18059
IP address blocks:        116.90.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 21:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dd:84:20:fb:51:0c:32:3b:b4:1b:24:b7:42:e8:ce:c6:02:e6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:58 2025 GMT
            Not After : Sep 25 04:02:58 2026 GMT
        Subject: CN=1B15896A9715054F7E081072681E57F2A61A8DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:70:6c:99:59:3f:16:12:81:02:ee:19:e2:
                    09:1d:7e:2e:da:e0:21:b9:d1:40:0f:5e:7a:13:cd:
                    92:52:1f:63:23:4e:9c:3f:ee:17:22:9a:f4:a7:18:
                    a9:c3:7c:53:6c:c4:8d:15:c6:60:0a:df:fb:9c:d2:
                    5a:79:e0:d4:e7:aa:a2:d6:d0:05:29:3f:76:2d:92:
                    88:d9:dc:4d:62:8e:3e:1b:14:0b:77:34:54:e6:18:
                    9b:e9:10:16:09:c6:69:ec:65:82:c2:0f:8e:3d:18:
                    60:ba:69:68:79:f5:04:f7:9f:66:6e:52:25:66:dd:
                    29:a6:0b:37:c8:cd:7b:95:59:90:a3:ba:96:4d:ea:
                    1d:03:ad:62:08:5c:50:15:10:c8:cc:b1:3e:4c:8f:
                    57:86:d5:3f:97:74:fb:98:a9:d3:11:c4:55:98:bc:
                    51:24:57:dc:19:e2:1d:62:0e:69:51:83:91:0f:0a:
                    9e:72:f0:2e:b3:a1:64:90:bc:05:29:d4:39:86:5a:
                    0c:ec:a6:19:18:c9:52:66:87:19:a6:11:73:2a:68:
                    50:69:42:ee:40:43:33:f4:b9:f0:c4:a6:26:d4:8f:
                    fe:de:97:6b:95:0c:28:28:7c:86:5a:29:1a:8b:26:
                    20:9e:76:95:80:08:03:7c:38:39:19:e5:6f:26:07:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:89:6A:97:15:05:4F:7E:08:10:72:68:1E:57:F2:A6:1A:8D:FF
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:42:d8:62:c6:39:d9:50:c0:b2:94:2b:c5:4c:61:6c:de:
         b3:26:6d:48:f7:7c:83:31:97:a5:5a:af:25:fe:83:25:9f:24:
         44:ba:2b:4e:70:49:0e:19:17:8f:ba:21:c2:e2:80:4f:8b:f8:
         d8:93:e0:57:26:f2:20:af:d0:d7:75:9e:bc:bf:19:a7:1d:0f:
         44:91:81:93:e9:31:86:a7:d1:40:1c:30:7c:4d:f3:9f:5f:95:
         55:79:ea:51:02:3b:dd:d5:55:4b:4a:7f:55:1c:49:06:37:82:
         b5:37:2b:8d:84:5e:15:40:83:d6:45:bf:87:3f:38:d3:49:70:
         7f:6b:f5:c8:27:07:da:b5:67:0d:42:28:03:3f:a0:6d:be:a7:
         e5:29:90:2a:70:16:4c:cc:35:63:e9:21:c3:30:89:82:ba:d1:
         a8:13:7d:9f:d4:14:30:f7:f1:f3:03:91:4c:db:f9:71:60:62:
         4d:a3:d5:6b:db:43:dc:9c:80:f5:75:1d:55:47:47:58:3f:54:
         05:f5:9e:6d:ef:db:90:4f:71:bf:fb:3a:21:c4:6b:da:a9:19:
         62:9d:c3:90:2d:8a:8f:48:ee:02:c8:26:b4:35:d9:0f:dd:ef:
         4b:65:71:e1:ac:14:83:3b:ef:d3:75:7f:bb:f7:05:cf:06:d7:
         92:81:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:57:05 2025 by rpki-client