Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          vqAXc/V8UGRafSTW/TKjmRMeoC5nQdooNvEc7Q7KX+Q=
Subject key identifier:   1E:22:72:54:E4:07:16:A2:7A:78:4E:19:35:2B:14:C8:AA:A6:02:8A
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       03CBB0281AC80FAE27EAD0F1DE62D67108291238
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:49 +0000
ROA not before:           Mon 02 Jun 2025 01:58:49 +0000
ROA not after:            Mon 01 Jun 2026 02:03:49 +0000
asID:                     38500
IP address blocks:        116.68.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cb:b0:28:1a:c8:0f:ae:27:ea:d0:f1:de:62:d6:71:08:29:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:49 2025 GMT
            Not After : Jun  1 02:03:49 2026 GMT
        Subject: CN=1E227254E40716A27A784E19352B14C8AAA6028A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:a9:f5:94:e0:0f:37:2f:18:08:70:d6:6c:
                    57:11:22:d1:e9:53:7a:4b:bc:f3:3c:9e:3a:a9:92:
                    e9:cf:f7:24:64:e7:c7:4b:2b:08:af:2b:7b:6e:6b:
                    40:f3:de:51:a5:9e:84:48:18:aa:5b:93:3d:9b:27:
                    3a:ae:96:26:39:a7:73:b6:02:88:73:62:dd:51:ab:
                    a3:9e:a3:e1:e4:8e:df:38:b4:6f:01:ac:eb:95:d8:
                    18:68:33:9d:cd:97:b6:1a:4a:ca:d0:b4:8d:b3:80:
                    2a:ac:ec:be:df:21:88:dd:ec:34:5f:d4:fc:99:73:
                    d8:e0:47:78:32:e0:28:9e:ed:2c:98:f4:65:92:c5:
                    12:57:de:39:53:74:9b:2e:4e:09:61:2d:0e:85:0e:
                    01:0d:2b:90:1a:d1:29:1f:5e:4b:96:2a:40:4f:d6:
                    23:a5:3d:d4:18:34:3c:03:4f:eb:48:97:0b:38:bd:
                    05:2b:9a:fd:a3:9c:e4:98:3e:1b:74:30:12:8c:f1:
                    ad:63:d4:2d:8c:b8:ee:c9:a5:3e:61:13:a2:22:5c:
                    ae:94:0a:e5:a4:6f:c0:86:e1:05:8e:1b:50:e9:38:
                    27:5d:a3:3c:6d:fb:d5:07:a4:9f:43:f7:d9:8f:6f:
                    fd:1f:cb:eb:dd:f3:00:3d:27:0a:6f:58:18:55:fd:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:22:72:54:E4:07:16:A2:7A:78:4E:19:35:2B:14:C8:AA:A6:02:8A
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:6a:4d:b1:31:5a:41:10:91:d1:83:8b:74:e4:ab:d6:d2:c7:
         78:0a:45:f5:5b:58:a9:b0:1a:1a:e2:59:c2:7d:c2:e7:1c:15:
         d8:d2:76:a5:f8:cb:ff:e9:de:41:32:94:97:3f:c7:9e:49:12:
         ea:09:b5:38:05:25:4f:27:a6:f0:25:95:e8:b0:91:60:e9:85:
         c6:51:d8:03:1c:b6:3f:f5:7b:20:65:08:63:d7:69:33:71:3f:
         79:f4:64:ee:73:dc:86:1b:39:9c:4e:58:14:ab:bb:b0:22:19:
         24:d1:0c:16:65:05:70:ea:92:b7:d2:5e:db:70:dd:60:78:dc:
         55:fa:2a:9f:ab:43:3a:73:ab:d4:29:90:0c:14:4e:9a:bc:9b:
         0d:3f:e2:38:89:69:97:cc:aa:f4:f9:b9:75:9f:03:dc:67:06:
         d6:3f:6f:2d:20:af:36:fe:fc:10:1f:30:7d:a2:98:ce:12:f8:
         aa:f2:cd:1d:30:98:6f:f4:6e:da:30:fe:0e:57:00:41:ef:06:
         7a:e2:6b:d6:e8:34:f0:71:07:05:af:38:29:88:ee:b8:b6:e8:
         76:ff:77:a7:18:95:81:6a:28:af:6e:56:64:76:d5:4c:51:da:
         ea:ab:a9:34:d7:7f:e7:9b:ec:43:a6:ac:70:5c:8e:58:9e:46:
         a4:bd:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:10 2025 by rpki-client