Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa
File:                     3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (raw, json)
Hash identifier:          zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=
Subject key identifier:   08:B3:FE:8A:F7:87:03:80:73:A3:26:BC:CD:8B:79:41:EF:F0:CD:6C
Certificate issuer:       /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Certificate serial:       5FC094940AF026232F733DE93E0C851C450AD250
Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa
Signing time:             Thu 31 Jul 2025 03:44:02 +0000
ROA not before:           Thu 31 Jul 2025 03:39:02 +0000
ROA not after:            Thu 30 Jul 2026 03:44:02 +0000
asID:                     38154
IP address blocks:        116.58.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
                          rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 09:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c0:94:94:0a:f0:26:23:2f:73:3d:e9:3e:0c:85:1c:45:0a:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
        Validity
            Not Before: Jul 31 03:39:02 2025 GMT
            Not After : Jul 30 03:44:02 2026 GMT
        Subject: CN=08B3FE8AF787038073A326BCCD8B7941EFF0CD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:85:ed:3d:58:fe:82:60:ff:4e:02:f8:3d:
                    23:6b:a2:54:bc:cb:be:ee:28:96:e5:c5:50:bd:f2:
                    ed:cd:0d:df:90:34:c8:b1:18:a0:0e:46:11:77:b2:
                    58:c6:0b:ff:0a:18:07:c9:f5:7a:45:a2:49:68:a6:
                    09:00:2c:1f:a5:79:b5:00:35:b0:d9:d4:9e:6f:e1:
                    b6:15:b4:fe:a2:b5:d2:3d:f0:08:1c:6b:d1:93:42:
                    68:25:30:79:2a:d0:a2:a7:8e:38:ec:3f:89:59:27:
                    d2:1c:ab:ba:8a:8f:b3:82:a6:2d:b4:65:db:00:f2:
                    30:2d:18:57:55:b4:2c:64:c6:b1:9a:6f:72:2f:51:
                    3e:cf:9f:e9:41:ce:ef:53:c3:97:57:bc:e5:55:75:
                    83:83:0f:92:42:41:31:fb:2f:d0:16:ca:7d:7a:97:
                    d3:b8:0c:2f:be:b6:89:0f:e3:a6:09:41:37:0f:2a:
                    0d:ce:4b:98:bc:b4:84:8f:8b:cc:fa:3f:43:f5:b5:
                    13:bf:43:96:0c:e9:89:4e:9a:d4:c3:57:cf:07:d7:
                    1e:1d:65:49:87:90:5e:2e:d0:0d:51:e7:cb:c0:1b:
                    ac:99:64:18:12:98:ac:8e:c7:bd:3b:98:60:8f:5e:
                    74:8e:6d:c3:18:2c:bf:c5:95:7e:e3:35:2e:8a:68:
                    3a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:FE:8A:F7:87:03:80:73:A3:26:BC:CD:8B:79:41:EF:F0:CD:6C
            X509v3 Authority Key Identifier:
                keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:7a:9f:d5:55:3d:27:9c:e2:79:61:79:bc:d6:4e:d6:0a:
         01:af:e1:77:c2:38:10:7f:19:c5:fa:00:7f:f3:eb:a8:a4:50:
         81:87:cc:32:9b:88:63:86:c0:a0:c4:5f:1a:8f:88:15:07:a7:
         c8:a9:63:ed:cb:e6:d3:27:2a:35:32:0a:0c:fc:90:e1:fe:69:
         6a:16:39:0a:8f:d3:55:15:f9:69:3d:65:7f:89:b3:35:d6:c3:
         43:a2:7a:4a:62:87:fb:61:27:1f:b3:8b:19:f8:5f:de:68:ca:
         b5:e0:10:8f:89:68:71:18:87:9d:f1:f5:63:b3:39:86:ca:a6:
         a8:fc:bf:16:4d:67:ba:9f:1d:b2:93:57:f5:7e:0b:86:c6:c2:
         da:cf:5f:50:78:2a:fc:17:b7:32:d3:c2:0e:40:42:b0:e0:e7:
         a9:ba:45:e6:1b:f5:0b:48:24:62:58:7c:d3:3e:f7:f6:10:43:
         38:23:03:27:ab:28:94:81:1f:01:2b:46:92:88:95:41:2b:4b:
         9d:6e:c7:a1:01:19:16:b0:f1:59:41:c1:e9:aa:f3:39:e2:f0:
         d4:e6:3b:89:f7:55:7a:eb:88:5c:d2:93:8f:d1:5b:2c:82:fd:
         2e:21:f0:32:ca:a6:b9:b8:d7:6a:5b:58:7c:d4:05:5d:b2:8f:
         a6:81:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:00 2025 by rpki-client