Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          CjwAdgechVyDEmdpWTYBD8Ris/80uI0UGLAhyRKKJA0=
Subject key identifier:   E6:0A:72:54:C3:C3:CA:0D:1E:B2:4B:F6:95:FF:03:43:56:8C:99:A5
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       424F89F20858C0D2C3C657CE0F57D1765664543F
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:48 +0000
ROA not before:           Mon 02 Jun 2025 01:58:48 +0000
ROA not after:            Mon 01 Jun 2026 02:03:48 +0000
asID:                     38500
IP address blocks:        116.68.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4f:89:f2:08:58:c0:d2:c3:c6:57:ce:0f:57:d1:76:56:64:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:48 2025 GMT
            Not After : Jun  1 02:03:48 2026 GMT
        Subject: CN=E60A7254C3C3CA0D1EB24BF695FF0343568C99A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:f1:82:d2:cd:55:25:b5:57:f0:25:69:c5:
                    82:38:31:ee:ab:23:9e:40:fc:b8:f3:a2:31:9c:99:
                    65:b4:db:38:62:78:2f:f0:2f:6f:64:8b:88:81:11:
                    ee:22:6a:f3:5e:6d:23:0d:63:0c:e4:4b:d0:be:d2:
                    ad:f1:34:1d:fa:31:d1:81:e7:9f:2f:a5:09:ec:ce:
                    f8:ae:04:c4:51:b7:70:1d:12:e3:db:54:68:c5:ff:
                    a6:04:14:22:9d:6f:ad:f5:c3:a6:c6:d6:f2:a3:96:
                    83:bc:ef:c6:a0:fe:31:a8:09:30:39:d2:e5:95:1f:
                    c9:46:86:81:3f:95:3b:44:32:77:1d:53:74:9d:6d:
                    31:58:a3:0f:75:6f:e9:99:b7:f7:82:c7:72:e5:55:
                    e7:b6:a2:e7:b6:7e:6e:aa:81:cf:e8:f6:64:0c:a8:
                    cd:d8:e9:be:6a:99:1b:40:3a:3f:8a:cf:23:55:d0:
                    67:ef:c6:df:70:46:f7:fd:e1:72:01:cb:95:ff:94:
                    28:ac:bc:cf:92:bb:06:a1:3d:4c:6a:84:6c:59:7d:
                    82:ad:24:d0:fd:46:da:29:a3:17:31:5a:99:95:81:
                    14:f6:4b:19:56:f4:81:e8:85:0a:8c:ec:f7:e9:d4:
                    e1:2e:63:d7:2c:ee:42:54:58:81:e7:2b:91:0f:57:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0A:72:54:C3:C3:CA:0D:1E:B2:4B:F6:95:FF:03:43:56:8C:99:A5
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:46:ed:a9:ae:2d:7c:8f:1d:28:4c:0d:f8:55:71:e5:14:bb:
         69:4f:bd:67:7f:d2:a4:50:98:cb:9d:9d:8d:6e:bd:36:98:b7:
         de:70:1e:dd:06:0f:c8:02:db:b7:0e:56:17:c3:7e:dc:5a:bc:
         cb:30:a9:77:7a:0d:0d:dc:26:5d:0b:1a:fb:80:72:19:54:65:
         bb:0b:e5:0a:0c:b2:ee:80:d2:0d:c6:cf:f6:b8:ac:1c:d5:08:
         7d:3a:b0:60:8e:dd:c4:61:30:ff:78:39:52:e0:32:31:2a:e6:
         fa:90:5e:f0:87:d9:1a:7e:ab:fb:b0:2b:a7:bc:66:ba:f6:12:
         17:68:f9:c9:6b:01:76:40:2d:94:47:da:00:e4:ba:97:c7:5b:
         1e:82:fb:1e:7a:07:41:a6:b4:56:a6:71:81:af:3e:23:63:66:
         3e:79:7e:dd:94:f7:76:ca:6d:b9:89:f0:a0:cc:66:16:ab:c5:
         8b:f2:32:a7:5d:96:5b:36:50:d7:db:81:bc:66:2d:58:d0:8f:
         75:04:ff:5a:5b:fe:3e:01:7a:1e:80:1b:63:cb:06:41:94:09:
         16:09:0d:50:20:56:f0:04:2e:1f:76:17:56:1c:e0:6e:c1:64:
         60:28:be:68:04:fd:b4:7b:41:0c:27:76:09:3b:0e:58:09:4d:
         97:0b:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:57:10 2025 by rpki-client