Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa
File:                     3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          Fw/0AJDMHBUjrTpFISAUnqnpVom/VzAtOWBqxJyUap0=
Subject key identifier:   AE:50:86:54:09:D8:F1:A1:50:41:62:0B:66:8E:88:70:4B:2B:67:B7
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       22B5B82A3F2B36203E098D1244ED8C46DEC5B5B2
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa
Signing time:             Mon 23 Jun 2025 18:00:00 +0000
ROA not before:           Mon 23 Jun 2025 17:55:00 +0000
ROA not after:            Mon 22 Jun 2026 18:00:00 +0000
asID:                     4787
IP address blocks:        116.206.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 18:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b5:b8:2a:3f:2b:36:20:3e:09:8d:12:44:ed:8c:46:de:c5:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jun 23 17:55:00 2025 GMT
            Not After : Jun 22 18:00:00 2026 GMT
        Subject: CN=AE50865409D8F1A15041620B668E88704B2B67B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:ff:1a:92:67:28:18:31:50:26:02:bb:50:
                    1e:d0:a0:61:e3:53:38:da:1c:45:c8:8c:45:d4:78:
                    9d:45:87:8a:08:93:c7:66:35:af:32:25:64:4e:78:
                    67:15:21:b4:fb:e2:18:e9:7e:9b:b0:b2:83:71:00:
                    26:03:aa:13:8b:a3:e2:90:df:f7:44:b5:1a:8d:5e:
                    7c:1b:02:85:bf:97:f5:d3:d2:1b:e2:4b:da:ed:dd:
                    59:7c:86:ed:d0:2b:b7:7e:01:bb:71:db:7b:aa:ed:
                    d6:2e:a0:c4:4e:cf:16:27:f0:61:27:9e:40:96:43:
                    ed:34:d5:e2:e9:f9:54:45:3c:73:1b:2d:7b:84:4a:
                    f8:75:84:54:50:a2:ae:95:08:0d:df:5a:1d:29:6d:
                    7b:43:30:51:3e:c3:fb:5a:d7:c4:61:ed:22:33:e7:
                    79:b5:59:64:fb:e7:1d:a3:9f:d8:31:20:0d:bf:c3:
                    3d:2e:54:6c:ba:77:38:ef:5b:d0:ee:74:56:cb:24:
                    e6:4c:56:b4:67:26:23:52:90:e9:5c:a1:d1:0c:10:
                    e9:4b:a7:7f:e4:2d:44:ef:a9:8f:a4:60:5e:47:a7:
                    4c:b0:79:8d:37:91:b6:2b:3e:c9:d6:11:b2:6b:db:
                    fb:03:0c:4a:7d:91:41:a2:2c:b3:c4:47:83:62:e2:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:86:54:09:D8:F1:A1:50:41:62:0B:66:8E:88:70:4B:2B:67:B7
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:e9:64:df:1d:6e:6a:e2:00:5a:f7:4b:65:41:3f:68:42:
         2d:94:b3:9f:2b:ac:79:32:57:74:ce:7f:c4:ac:ac:40:48:fe:
         cb:de:3b:45:7a:4f:f2:2f:f7:44:23:2d:cc:0c:d7:fe:59:b4:
         df:1a:e8:02:7e:c7:15:da:7a:f8:d0:8e:6b:36:3c:cd:29:8d:
         8b:dd:72:4a:6a:a6:b8:eb:0b:78:9d:da:cc:30:7a:d1:04:78:
         f8:65:5b:2e:10:5d:95:ae:7c:09:01:e7:45:14:77:ac:84:40:
         66:bf:50:2a:89:da:25:72:63:34:6a:b4:94:63:72:47:28:1d:
         96:31:19:ab:7e:ba:ec:a5:b0:1f:59:6c:ce:8f:d1:39:40:cf:
         b5:04:d3:b7:f9:92:dc:62:75:5d:3b:47:b2:f8:72:c0:a1:69:
         01:16:04:8e:d8:b8:0a:95:b8:a5:ce:16:e7:8f:bf:63:01:af:
         a7:e9:6e:e9:69:cd:28:18:4b:d7:29:b5:03:f8:35:46:2f:5b:
         54:f6:ea:5e:6b:26:28:2d:c5:cc:b9:13:58:14:a0:9d:4d:71:
         a3:32:fa:6b:78:d9:09:5b:0c:f5:b3:1a:23:db:ae:b4:ff:30:
         7c:43:fe:7e:11:c7:83:cc:08:c1:69:ff:51:6b:6d:2b:78:26:
         9d:9f:dd:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIrW4Kj8rNiA+CY0SRO2MRt7FtbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNTA2MjMxNzU1MDBaFw0yNjA2MjIxODAwMDBaMDMxMTAvBgNV
BAMTKEFFNTA4NjU0MDlEOEYxQTE1MDQxNjIwQjY2OEU4ODcwNEIyQjY3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1v8akmcoGDFQJgK7UB7QoGHj
UzjaHEXIjEXUeJ1Fh4oIk8dmNa8yJWROeGcVIbT74hjpfpuwsoNxACYDqhOLo+KQ
3/dEtRqNXnwbAoW/l/XT0hviS9rt3Vl8hu3QK7d+Abtx23uq7dYuoMROzxYn8GEn
nkCWQ+001eLp+VRFPHMbLXuESvh1hFRQoq6VCA3fWh0pbXtDMFE+w/ta18Rh7SIz
53m1WWT75x2jn9gxIA2/wz0uVGy6dzjvW9DudFbLJOZMVrRnJiNSkOlcodEMEOlL
p3/kLUTvqY+kYF5Hp0yweY03kbYrPsnWEbJr2/sDDEp9kUGiLLPER4Ni4mi/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrlCGVAnY8aFQQWILZo6IcEsrZ7cwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzEzNjJlMzIzMDM2MmUzMjM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnTO8DANBgkqhkiG
9w0BAQsFAAOCAQEAJV7pZN8dbmriAFr3S2VBP2hCLZSznyuseTJXdM5/xKysQEj+
y947RXpP8i/3RCMtzAzX/lm03xroAn7HFdp6+NCOazY8zSmNi91ySmqmuOsLeJ3a
zDB60QR4+GVbLhBdla58CQHnRRR3rIRAZr9QKonaJXJjNGq0lGNyRygdljEZq366
7KWwH1lszo/ROUDPtQTTt/mS3GJ1XTtHsvhywKFpARYEjti4CpW4pc4W54+/YwGv
p+lu6WnNKBhL1ym1A/g1Ri9bVPbqXmsmKC3FzLkTWBSgnU1xozL6a3jZCVsM9bMa
I9uutP8wfEP+fhHHg8wIwWn/UWttK3gmnZ/dtw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:52 2025 by rpki-client