Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          FidrCQYO33Zq2TbkFlxgDF0SdKNPwCMdkDhbgsLO8bE=
Subject key identifier:   62:0F:83:B0:1F:62:B5:AF:8E:2D:2F:9C:AF:04:CB:BE:B5:D1:05:AB
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       6DEAE122D43C5C67C622116A92B6382FD37D0489
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:51 +0000
ROA not before:           Mon 02 Jun 2025 01:58:51 +0000
ROA not after:            Mon 01 Jun 2026 02:03:51 +0000
asID:                     38500
IP address blocks:        116.68.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ea:e1:22:d4:3c:5c:67:c6:22:11:6a:92:b6:38:2f:d3:7d:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:51 2025 GMT
            Not After : Jun  1 02:03:51 2026 GMT
        Subject: CN=620F83B01F62B5AF8E2D2F9CAF04CBBEB5D105AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:12:b0:82:aa:dc:cf:68:20:03:b9:e5:90:
                    56:bd:ef:db:19:46:b7:16:e7:47:9f:72:5d:80:dc:
                    16:21:5e:bd:23:5f:32:9a:7a:59:d4:43:3a:29:5c:
                    c3:fa:51:c6:9d:b5:87:2f:ff:16:dc:5a:da:23:c9:
                    a7:73:ae:70:7c:b8:8c:40:89:54:bc:d3:37:f9:36:
                    b3:2f:34:60:4a:51:4e:3c:42:36:6b:e5:f4:21:26:
                    c8:0c:c9:85:d8:ef:ea:90:93:9e:76:34:8d:ca:af:
                    51:07:11:9e:70:de:41:fb:39:a1:56:4b:44:5b:96:
                    21:28:0c:ee:ca:ff:f8:01:80:3c:e6:d8:5b:4e:a7:
                    e8:cf:f9:f5:a3:b1:df:55:a4:6a:13:2c:1c:10:8f:
                    6b:c8:aa:62:32:ab:64:14:76:69:c5:b8:14:02:b1:
                    83:d1:d9:57:64:32:ce:e5:b3:fe:ec:34:ec:31:3f:
                    71:2a:31:5e:27:98:90:47:c0:aa:55:4f:fb:f9:ff:
                    2f:1c:f3:49:2f:ac:3f:46:38:8b:de:e8:0a:ed:45:
                    0b:57:6e:2a:74:38:0e:b9:87:39:80:a7:09:4d:3d:
                    59:35:33:82:b5:49:3d:9c:e7:ce:da:05:26:30:58:
                    1b:0f:51:d2:51:60:37:0d:54:97:59:e7:3c:95:cf:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:83:B0:1F:62:B5:AF:8E:2D:2F:9C:AF:04:CB:BE:B5:D1:05:AB
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:12:40:5e:36:52:0b:0f:7b:ee:46:d3:65:0a:23:ea:70:ce:
         af:4c:37:41:fc:44:40:00:0e:6d:ea:4f:dd:cb:dd:0c:d4:e2:
         ce:bc:9c:38:b7:39:32:4c:f5:04:9d:de:b4:d1:c1:39:94:6e:
         93:8c:ec:e2:7c:16:b1:fc:aa:70:62:fd:40:f3:16:0f:c2:6f:
         1b:a0:6c:12:61:0b:a4:19:ff:8d:54:76:4f:8d:0c:20:58:33:
         e5:ba:f2:96:70:74:84:94:61:05:9a:67:1a:c9:27:3c:21:9a:
         09:80:11:f7:f4:5b:04:73:ff:c2:c3:c6:90:a6:37:28:2e:6e:
         85:e5:30:96:8f:64:9f:03:1b:54:73:c6:b7:84:fb:2a:f5:b0:
         91:d2:0a:dd:fa:d0:10:45:3e:cd:0c:58:1b:10:5c:24:c4:0f:
         6a:ae:61:29:54:30:ed:3d:ff:25:25:6c:c0:81:11:05:c5:4a:
         cb:7d:5f:25:86:e2:7a:ae:98:5a:18:b4:7d:97:a2:02:67:48:
         dd:40:9f:07:4d:39:b6:37:b5:c9:53:b5:2c:c6:62:92:c7:20:
         83:8c:a1:e8:b1:b0:9f:2e:8d:89:be:f7:84:a7:f2:60:10:f5:
         cd:df:00:22:c4:59:f5:65:97:73:e9:0c:97:db:c4:95:4e:6d:
         50:e4:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:35 2025 by rpki-client