Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          8srxXf6sCBp8LKU/ba9SFEFlNY8/TI8wDKtzcsi3W7k=
Subject key identifier:   B1:0E:64:07:36:93:18:D5:C4:F2:62:88:5F:C1:5B:D1:79:F4:24:C3
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       74086BE0665656C5FB0BDC0F2B13AFA9D5169925
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:52 +0000
ROA not before:           Mon 02 Jun 2025 01:58:52 +0000
ROA not after:            Mon 01 Jun 2026 02:03:52 +0000
asID:                     38500
IP address blocks:        116.68.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:6b:e0:66:56:56:c5:fb:0b:dc:0f:2b:13:af:a9:d5:16:99:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:52 2025 GMT
            Not After : Jun  1 02:03:52 2026 GMT
        Subject: CN=B10E6407369318D5C4F262885FC15BD179F424C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:01:fa:f8:8a:7e:cd:e9:53:44:49:91:4d:
                    a2:b0:f6:57:ea:f4:68:b2:53:5a:99:a6:62:96:12:
                    70:25:bc:ac:ee:d5:b6:70:1d:b7:f1:f3:68:7f:5d:
                    7a:97:56:e2:13:8e:06:0c:74:73:8a:ea:ac:8a:f9:
                    e2:f9:2a:37:a4:40:d0:42:49:7d:10:7c:e0:eb:13:
                    62:c0:20:d9:93:00:96:0b:22:5f:51:45:eb:74:02:
                    e7:b7:ae:48:a5:cd:74:e5:5e:f4:27:a7:f6:25:93:
                    58:16:90:ff:03:fa:f0:b2:cc:e8:5c:1b:e2:3b:55:
                    a3:11:8d:e1:aa:fc:1b:b4:3f:51:99:79:63:ab:32:
                    5a:55:cc:77:ca:a2:fb:42:59:70:76:42:d9:37:ee:
                    62:2d:bf:04:16:f9:3b:57:af:cd:5d:92:82:1a:28:
                    56:19:a6:ae:8b:f7:95:9e:12:e2:28:22:2b:5c:1a:
                    3c:21:ae:a5:b3:1c:87:77:6c:7a:fa:58:55:4e:e6:
                    e6:6c:3c:ce:e1:eb:40:8d:b8:7c:56:81:7e:bc:b8:
                    8b:45:76:0b:ba:92:88:84:32:6a:84:1e:d7:ec:2f:
                    22:1f:3f:48:c5:e3:6b:00:23:1d:49:36:6a:3b:8a:
                    8a:cd:66:67:cb:78:09:60:15:b2:86:c7:44:58:1b:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0E:64:07:36:93:18:D5:C4:F2:62:88:5F:C1:5B:D1:79:F4:24:C3
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:89:ab:83:5f:2a:32:f8:1a:0e:f1:6c:03:d8:d4:8c:6c:
         69:ad:6b:15:d3:71:f0:a9:22:74:d7:b8:d2:af:f8:c2:f9:eb:
         b7:f1:e2:37:60:9a:4d:40:72:03:73:bf:55:10:49:42:3b:8c:
         45:66:b8:65:3f:7c:c6:8c:a9:77:23:19:63:54:45:c1:37:1d:
         fc:ae:53:5c:c6:ca:4f:66:86:13:8a:9b:21:1d:43:bc:d8:a4:
         f8:2f:2c:f2:d8:06:5c:60:00:4f:34:85:0a:9d:6f:ba:b0:0c:
         b2:d7:b8:1b:81:b4:b8:c4:bb:cb:2d:91:80:c5:a9:70:95:0b:
         4d:5c:03:bc:d1:62:9e:56:e3:04:41:85:f9:dd:36:ab:1a:8d:
         0a:ca:da:94:49:ef:c8:fe:9f:db:93:22:db:dc:85:f8:cb:b2:
         3d:d1:ea:c5:8f:a1:c1:ef:3d:66:be:89:e8:01:5b:5e:89:32:
         f2:44:df:ef:12:c4:04:0c:b2:ed:52:48:74:fd:bd:54:10:72:
         da:f2:0f:ea:c6:34:f6:a4:db:e9:3c:b2:4b:68:eb:93:1b:9d:
         69:6b:55:1a:92:71:f9:6d:c3:07:19:45:f8:db:5c:bd:a9:fb:
         c9:49:b7:e6:1c:91:3a:02:f8:a9:da:02:12:01:8a:b8:53:94:
         ca:7a:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:10 2025 by rpki-client