Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
File:                     3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (raw, json)
Hash identifier:          ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=
Subject key identifier:   A8:D9:07:36:CE:C6:05:0C:19:47:60:88:C6:85:AC:04:3E:59:D9:6A
Certificate issuer:       /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
Certificate serial:       1BC547F709BBA86932A3A88EF5FD6A12B99D243F
Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa
Signing time:             Mon 02 Jun 2025 02:04:51 +0000
ROA not before:           Mon 02 Jun 2025 01:59:51 +0000
ROA not after:            Mon 01 Jun 2026 02:04:51 +0000
asID:                     9785
IP address blocks:        116.213.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl
                          rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c5:47:f7:09:bb:a8:69:32:a3:a8:8e:f5:fd:6a:12:b9:9d:24:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E
        Validity
            Not Before: Jun  2 01:59:51 2025 GMT
            Not After : Jun  1 02:04:51 2026 GMT
        Subject: CN=A8D90736CEC6050C19476088C685AC043E59D96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:f6:7e:f9:78:d2:59:9b:eb:d1:9a:b4:0f:
                    68:ec:58:24:99:de:bb:b1:9b:cc:94:6a:8d:60:3e:
                    db:b5:eb:3c:1a:2f:2a:cd:f4:07:49:f0:48:77:29:
                    a0:be:fb:b2:0c:a1:31:c9:13:3f:ec:eb:07:fa:9d:
                    f2:1a:7d:b1:6c:8a:c7:85:73:01:21:32:3f:80:2f:
                    60:4a:d3:93:d3:17:c4:d0:ae:ac:44:d2:5c:dd:2d:
                    69:da:9f:39:75:db:81:8a:8a:8e:ef:66:44:3a:16:
                    11:46:e9:78:04:fd:e8:e5:98:93:cd:b0:78:18:a6:
                    cb:5c:4a:a0:82:11:d6:45:77:fa:7f:cc:7a:d4:3b:
                    1b:53:b5:e9:70:28:73:90:f3:65:69:03:a9:f8:76:
                    c1:d6:04:13:43:05:4c:e9:9a:66:6c:4d:43:24:f8:
                    e9:a4:8a:a1:1c:2c:27:b0:15:c0:d8:43:dc:61:cc:
                    41:ef:a0:eb:bc:ad:04:7c:08:c8:e9:bc:36:08:35:
                    08:5e:ba:44:5b:bd:07:0e:78:53:0f:4b:a7:35:db:
                    38:49:9d:bc:f9:e8:1b:b6:84:53:59:7e:e4:19:f9:
                    ee:63:9b:26:98:66:54:59:df:d9:bd:dc:7f:9c:ec:
                    9f:47:ea:9e:ed:ad:ec:53:87:30:f2:fe:29:d3:39:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D9:07:36:CE:C6:05:0C:19:47:60:88:C6:85:AC:04:3E:59:D9:6A
            X509v3 Authority Key Identifier:
                keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e2039373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:55:d4:62:bf:5d:7c:f2:a0:b6:10:00:fa:72:3e:cc:c8:
         5e:e3:5e:4c:03:77:fd:c5:98:c1:03:14:51:85:20:ec:9b:b1:
         84:be:c9:6b:84:9b:20:6d:52:65:4e:1c:44:d2:ca:c9:47:05:
         02:99:e0:66:fe:ee:77:15:98:fe:48:0f:eb:ac:e5:33:d5:66:
         43:c0:9f:65:6b:d7:ee:0a:0b:b5:b3:17:b5:32:f6:06:78:fc:
         99:56:c7:10:6c:e0:53:1a:45:52:6a:2f:4e:f7:68:85:f5:1c:
         0e:ed:96:f4:69:b3:71:8f:51:79:09:26:53:a3:cc:be:77:62:
         32:89:70:52:7f:bf:98:85:c0:be:02:13:e6:a3:a9:a1:a5:dc:
         40:22:aa:3f:ac:f4:13:a6:03:11:cb:e2:f1:53:b7:27:ec:74:
         b0:d0:c0:3f:2e:f2:ae:43:2c:65:94:50:7f:64:e0:08:1d:e2:
         38:b9:b4:48:d4:1b:46:be:57:6a:e8:74:74:6d:87:b4:15:17:
         9f:df:4c:0a:99:c3:0f:e8:9a:69:dc:97:3e:b0:05:6c:18:1a:
         90:80:c0:9c:c2:d3:36:80:d1:14:fa:d9:3e:01:bc:ad:38:e3:
         76:56:0e:a3:7b:0e:29:3d:9e:eb:70:44:22:ed:46:15:0d:bb:
         ee:02:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:45 2025 by rpki-client