Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          oY5bwkHOZ5o/T4nyqHVk+QlZTq6zSV5WkYvYpvg7OW0=
Subject key identifier:   51:58:95:92:9F:FC:DB:53:ED:1A:E7:B9:89:5A:18:28:12:69:56:17
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       633E7E02BB2B5A948C3D4D5D19401BCD940B31F3
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
Signing time:             Mon 02 Jun 2025 02:03:51 +0000
ROA not before:           Mon 02 Jun 2025 01:58:51 +0000
ROA not after:            Mon 01 Jun 2026 02:03:51 +0000
asID:                     38500
IP address blocks:        116.68.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3e:7e:02:bb:2b:5a:94:8c:3d:4d:5d:19:40:1b:cd:94:0b:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Jun  2 01:58:51 2025 GMT
            Not After : Jun  1 02:03:51 2026 GMT
        Subject: CN=515895929FFCDB53ED1AE7B9895A182812695617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:70:56:b5:4c:7d:3f:94:c0:ec:19:46:da:
                    f9:0d:65:50:5f:c2:6e:2f:25:2d:97:c7:7c:e6:a0:
                    92:d4:e6:a5:9c:33:11:d9:79:88:d1:b1:dc:68:05:
                    c9:25:a5:e9:0d:c4:7a:45:ac:df:25:aa:05:33:98:
                    2b:6f:85:cb:4a:7d:d3:98:18:73:b2:9b:9c:41:f7:
                    c6:a2:0b:c0:7a:cb:96:ab:c7:60:77:39:6e:2e:80:
                    75:8d:cd:53:bd:6f:57:01:e4:62:6b:a9:8f:dd:3b:
                    e3:c0:ae:b5:8b:b9:81:40:91:19:1b:4c:cb:26:13:
                    85:f1:36:32:58:4d:9e:bc:f9:80:9c:5b:d2:31:9d:
                    dc:f1:fc:dd:6e:c0:4f:a1:3f:1a:3b:65:92:46:7e:
                    42:76:81:09:d5:24:64:a1:41:99:ff:a9:09:06:57:
                    1e:19:74:91:5f:4f:f6:2f:d5:e4:b0:f4:c4:ae:84:
                    69:21:b4:9a:7a:f7:f3:20:c9:37:e2:44:ee:eb:46:
                    4d:d3:04:5b:11:d4:1d:87:f4:c2:cb:ee:41:d7:dd:
                    fa:7a:f3:46:fe:db:2d:56:3a:81:2c:53:01:61:5f:
                    31:07:18:14:3a:e5:cc:7f:6b:78:fc:c7:d8:ff:87:
                    33:84:21:e0:3c:71:a4:62:d0:46:da:06:e0:a2:fc:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:58:95:92:9F:FC:DB:53:ED:1A:E7:B9:89:5A:18:28:12:69:56:17
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:da:ce:92:fb:93:3c:96:81:59:53:d6:a3:81:c2:18:5c:
         74:4f:17:88:04:b7:22:ab:b8:95:a8:da:e3:5a:da:7d:a2:6b:
         5d:e2:75:64:1b:c2:21:f2:4f:86:b1:f7:80:be:a3:c8:13:de:
         a2:1c:e0:d4:3b:28:ac:3a:73:bd:ca:73:80:c8:63:42:b7:34:
         61:d1:e5:f4:e7:f2:16:c0:37:0e:1e:a6:1f:8a:59:24:c7:9d:
         0d:6b:0d:7b:2c:67:0a:78:4a:58:c1:8c:d6:1e:37:12:fb:e1:
         af:4b:78:14:cc:41:a1:ed:46:01:b5:0e:78:a5:ae:e4:de:11:
         e4:b5:95:41:08:18:2d:3d:d8:e1:a1:a3:1d:10:14:03:9c:93:
         c3:fd:5f:33:8b:5a:31:0b:e2:70:b4:83:dd:17:44:3a:78:3a:
         32:88:94:b4:90:bf:dd:5c:eb:8c:ab:5d:4d:fb:a9:45:61:75:
         5c:04:9d:9a:78:51:c5:8d:4f:1b:89:65:f2:3f:36:e7:1c:99:
         e6:38:22:a0:c6:42:0e:bf:1c:4c:c0:56:8b:2c:bf:fb:1f:54:
         35:c3:d7:91:32:ab:08:ce:c2:b2:fc:64:df:22:b7:ee:35:52:
         65:1a:c9:f9:86:9a:ef:00:08:74:bf:c4:80:a0:e7:96:11:fc:
         79:fc:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:16 2025 by rpki-client