Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          7xIX4hjpk+J5OAa55Owg92ENaEdk7mJ+qjZGnd89RMg=
Subject key identifier:   66:B1:BC:E1:08:4E:FE:24:F1:6E:A5:83:9E:D4:E9:63:54:55:CC:B3
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       4B89F568CEF4BE1B1B127F7C70999EE795A47364
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 14 Apr 2026 09:00:01 +0000
ROA not before:           Tue 14 Apr 2026 08:55:01 +0000
ROA not after:            Tue 13 Apr 2027 09:00:01 +0000
asID:                     137316
IP address blocks:        116.90.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 14:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:f5:68:ce:f4:be:1b:1b:12:7f:7c:70:99:9e:e7:95:a4:73:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Apr 14 08:55:01 2026 GMT
            Not After : Apr 13 09:00:01 2027 GMT
        Subject: CN=66B1BCE1084EFE24F16EA5839ED4E9635455CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:12:d5:c8:f2:13:ed:50:ad:27:e1:98:19:
                    8a:88:85:02:3e:94:ef:eb:0f:ac:94:71:27:38:77:
                    d9:1f:5c:f6:08:3f:72:06:bc:ef:c7:da:46:e9:a9:
                    d6:73:0d:4b:5e:53:f5:62:2c:9a:91:7c:58:66:8d:
                    e5:30:e8:6c:82:30:e0:18:3b:bf:f7:b7:da:b8:82:
                    01:1d:8c:cf:35:08:40:1f:e1:91:fb:b0:2e:01:03:
                    fb:2f:be:ab:5f:3a:e7:ae:04:e1:04:4c:a0:b9:20:
                    a1:10:12:98:33:1b:97:2e:5b:d5:67:7e:0a:f0:2f:
                    80:de:ca:c8:c6:84:45:ed:eb:ef:01:39:e3:15:2c:
                    9a:dd:ae:e8:b3:e9:ea:04:65:f4:b9:de:e1:d0:0c:
                    c4:53:ae:c5:e0:8b:3b:36:91:1f:20:9f:79:dd:76:
                    fd:e0:fc:47:8d:22:40:3f:c2:b5:dc:73:60:37:1d:
                    50:56:23:32:cc:66:e4:95:c6:d9:27:1f:e7:d9:9b:
                    16:6b:38:1c:16:bf:02:5a:fa:98:23:a9:08:7f:a4:
                    4b:38:02:d5:ab:f7:d9:f9:49:5f:4a:2b:f6:c2:98:
                    c0:1a:0f:bd:91:18:80:a2:dd:d6:13:42:d1:f6:17:
                    f7:54:51:63:b4:79:43:34:59:e6:50:51:13:c0:7e:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B1:BC:E1:08:4E:FE:24:F1:6E:A5:83:9E:D4:E9:63:54:55:CC:B3
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:04:c4:cc:94:cc:9f:db:b2:4a:2d:b3:73:d1:5d:51:cf:97:
         36:34:23:ea:08:87:19:ca:e1:d1:96:a2:4a:ba:f7:8e:16:65:
         0f:13:c8:e3:06:45:c1:d3:5e:cf:36:aa:71:24:de:ef:29:65:
         ed:e7:95:1f:7c:c7:49:84:fa:f4:7b:5f:ca:70:d8:cd:dc:cf:
         4b:a5:ae:e1:64:2a:13:e0:28:cc:72:6a:65:6e:3a:db:53:36:
         50:f4:84:a1:ee:3d:60:15:46:54:0e:5b:b7:7b:ab:fe:1c:08:
         04:3f:87:b8:80:da:d4:c0:21:50:03:59:ee:ed:91:ca:3b:46:
         2a:37:eb:55:52:ce:90:ad:01:e4:4a:db:54:c7:58:5f:14:fc:
         49:3d:ff:6c:c6:81:7a:58:02:63:f0:a7:a8:94:0b:8c:cc:9d:
         8b:ed:62:6f:49:5d:ee:e0:61:9f:36:86:59:8b:5d:92:a7:61:
         fe:4e:7e:6b:97:9d:ba:e7:75:65:cc:fa:42:6c:a5:7c:a8:8b:
         a0:48:36:9b:18:25:c9:d2:31:da:d4:a6:57:ba:0e:67:27:19:
         5d:1d:cd:9e:3b:88:68:e7:70:e3:97:77:79:55:25:98:f9:53:
         1d:3e:7f:01:58:01:7c:3e:70:92:10:60:50:ca:00:2d:16:97:
         07:ef:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:29 2026 by rpki-client