Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          V3KmgD3tTwhMEvs0Z12c99jKw1ctfp/222r2PmQ0tu8=
Subject key identifier:   34:5C:35:3E:97:36:BD:09:44:CA:59:8F:9B:3D:12:B8:B7:3A:E3:82
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       2D4CD0AF5617D1EDE253EF76A9BE697119485B29
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:47 +0000
ROA not before:           Mon 02 Jun 2025 01:58:47 +0000
ROA not after:            Mon 01 Jun 2026 02:03:47 +0000
asID:                     38500
IP address blocks:        116.68.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:d0:af:56:17:d1:ed:e2:53:ef:76:a9:be:69:71:19:48:5b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:47 2025 GMT
            Not After : Jun  1 02:03:47 2026 GMT
        Subject: CN=345C353E9736BD0944CA598F9B3D12B8B73AE382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6b:28:6a:8e:dc:70:ef:e1:01:c0:c1:76:7e:
                    87:2c:b4:ad:0a:b8:d1:dc:76:4e:de:1c:6d:8e:73:
                    f3:74:4a:c1:8b:3d:bb:0d:21:97:d4:e7:98:c4:a2:
                    87:9b:d7:ba:fd:68:10:51:d0:56:6b:55:56:ed:3d:
                    0a:b3:0d:8b:d8:c3:ac:b8:33:b8:ae:89:cf:46:64:
                    c6:db:8f:fd:05:38:97:57:ae:ec:29:9d:39:ba:13:
                    1b:f6:33:5d:75:00:40:2a:78:f5:b9:41:93:f6:44:
                    29:68:47:ae:4b:a5:c8:1d:de:5b:99:b7:be:9d:ac:
                    80:77:64:07:a6:a1:3c:34:8e:4d:bf:97:d1:bd:ff:
                    34:a3:1a:0b:b8:da:81:ec:37:44:8d:ce:c2:75:29:
                    df:a0:e2:5d:c6:1f:22:32:af:ee:b0:97:38:9f:ac:
                    b4:21:84:cc:de:e0:ee:32:d1:6d:e1:43:6c:24:bd:
                    c4:2c:a6:4b:37:47:07:07:96:2b:1d:fa:6c:15:11:
                    fc:72:98:af:40:b0:9d:5a:e1:c6:37:5d:d6:d7:4e:
                    6b:7d:a8:ac:f6:f0:2d:31:85:e1:e2:62:a6:b0:02:
                    49:4c:1e:90:96:cf:5a:2f:e5:71:5b:6a:73:b3:ed:
                    ec:3f:f5:a3:69:63:05:68:c6:0f:a8:61:ce:07:35:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:35:3E:97:36:BD:09:44:CA:59:8F:9B:3D:12:B8:B7:3A:E3:82
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:45:25:4b:70:d0:d4:2d:52:05:e7:44:48:f3:fc:48:03:
         e1:0a:8e:6c:73:d6:f6:50:a2:3b:e3:4c:84:ca:50:b4:8d:20:
         09:2a:f8:d5:74:f0:df:f5:e7:38:d0:81:43:d0:51:6c:98:9b:
         21:34:c7:04:1a:6c:31:96:43:88:3c:70:89:9c:bf:6e:b0:df:
         ac:76:f5:a9:0a:9b:b5:c2:07:b3:81:44:a0:ac:ed:07:76:46:
         9c:bc:e7:e9:06:d0:cd:5d:36:b6:0e:e4:88:90:e1:e5:36:26:
         6b:df:e0:77:dc:c4:f7:a1:3d:b7:20:8c:52:f3:d7:ef:b1:12:
         b4:16:ae:6e:59:36:ec:55:2a:2a:ce:8f:79:e3:a9:40:07:9f:
         99:af:db:67:32:3d:65:a8:93:72:14:de:25:e5:b8:9d:36:bf:
         70:98:2a:6c:e9:f3:b0:61:f6:5a:48:2a:ee:5c:05:07:53:f4:
         30:d7:ff:6b:1e:f2:3f:97:ac:3c:8d:49:11:cb:92:72:ee:e6:
         1d:0a:12:cf:3f:7e:dd:08:d6:b3:d2:c6:ea:ec:e0:3f:20:38:
         da:5c:f0:b5:29:94:16:be:aa:21:60:7a:76:8e:8d:9d:47:a1:
         f7:4e:8b:d2:71:99:10:59:dc:dc:cb:14:6a:6b:1f:52:91:72:
         74:d3:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:09:17 2025 by rpki-client