Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          HH5tV3HMkh4oFDeZzKaLNjqhnKSJ+/tcJibVvjwWhSU=
Subject key identifier:   2D:1A:63:9D:DF:C6:D4:19:47:48:92:F1:35:AF:C5:21:F4:38:EB:DD
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       19159A98AD2F8E671E155AD2956C5E648F3570EE
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 14 Apr 2026 09:00:01 +0000
ROA not before:           Tue 14 Apr 2026 08:55:01 +0000
ROA not after:            Tue 13 Apr 2027 09:00:01 +0000
asID:                     137316
IP address blocks:        116.90.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 14:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:15:9a:98:ad:2f:8e:67:1e:15:5a:d2:95:6c:5e:64:8f:35:70:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Apr 14 08:55:01 2026 GMT
            Not After : Apr 13 09:00:01 2027 GMT
        Subject: CN=2D1A639DDFC6D419474892F135AFC521F438EBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:2e:1c:5d:0c:88:89:d1:12:57:ea:8d:81:
                    bd:3c:d4:c0:1f:88:2d:2d:83:da:f1:26:69:8c:58:
                    7c:63:a7:d4:a4:10:ea:ac:4b:1f:02:dd:04:9b:75:
                    7e:93:dd:73:2b:1a:44:67:54:ba:a3:05:b8:19:ce:
                    0b:74:43:8c:a9:fe:a0:63:d6:5c:e9:a5:b8:06:ac:
                    a4:23:f9:a1:91:73:f3:6f:1d:58:ee:db:ab:01:a1:
                    bc:e6:e8:25:1f:ef:ee:bf:c3:32:4a:b1:35:2e:1f:
                    be:17:95:06:e3:80:f0:05:06:b4:73:ff:e9:24:e5:
                    01:bc:9d:3b:0e:cf:5f:3b:bd:6d:07:f9:63:24:c6:
                    22:a3:6b:64:fd:dd:5a:98:79:ee:96:f3:15:36:1f:
                    ab:70:28:72:d4:5a:99:f0:7d:d9:1c:4d:b1:63:b9:
                    6c:db:6e:79:60:b2:4c:78:5f:ca:f5:08:3a:07:bd:
                    45:de:09:3a:09:03:11:ff:5e:74:d9:0b:48:a9:73:
                    09:65:2b:c2:39:5d:af:9b:28:27:20:a6:3f:5e:d5:
                    12:42:f4:cf:cb:f9:86:dd:ea:5b:04:c1:ec:a9:7d:
                    6f:aa:86:f5:79:fa:b7:bc:39:46:04:e6:94:ed:f0:
                    5c:4e:55:29:b1:a3:5e:e7:ef:0b:d5:0d:01:f7:f0:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:63:9D:DF:C6:D4:19:47:48:92:F1:35:AF:C5:21:F4:38:EB:DD
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:05:92:c7:73:21:a0:42:4f:23:50:33:4a:24:17:00:2a:
         82:a4:d3:a6:21:7e:db:1a:7a:40:e8:0b:a0:a3:e4:6b:f4:d2:
         b1:84:56:3c:f1:cc:84:90:84:86:fe:b0:7e:7c:66:0c:0a:73:
         4f:7e:22:49:19:6c:15:5b:d4:fa:b5:6b:31:78:dd:43:95:6d:
         75:c0:74:a9:b1:d9:b9:ec:11:74:c2:fa:15:7e:48:25:e6:92:
         12:05:95:97:b9:1f:68:0c:0f:36:fd:db:fb:33:30:e3:7a:dd:
         6a:d8:04:f3:1c:e6:44:e7:e7:69:18:23:3a:36:58:85:40:ca:
         8f:ed:54:bb:cb:12:2d:09:68:1f:ba:79:38:ae:e4:b2:fd:c4:
         5e:21:ce:5f:81:a0:3f:94:ec:28:23:6d:09:1d:8d:e1:34:3b:
         af:6c:8a:26:5a:cc:76:61:a6:d1:5a:65:dd:ba:68:17:49:29:
         47:00:76:05:af:bb:43:6a:97:27:ca:20:03:e9:86:eb:3a:01:
         e5:50:39:f7:6c:be:db:5f:de:c7:7b:ee:30:f2:5c:ec:62:72:
         93:11:c5:7b:b4:f6:5b:61:59:2d:ff:6f:8b:5a:3e:db:c1:ae:
         38:3c:fe:d4:ee:b9:79:a9:77:24:cc:e7:3d:95:50:ad:0f:6e:
         59:4d:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:55 2026 by rpki-client