Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
File:                     3131362e39302e3136382e302f32342d3234203d3e203338373635.roa (raw, json)
Hash identifier:          ZupraRt6CrWwEutwx324eOk3B/eoC7OKOOrpOerRWBs=
Subject key identifier:   CD:DE:4B:5A:B1:12:27:6B:99:AE:35:AA:45:1E:5F:44:B6:2E:D7:73
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2A38295C942D4B6D81E6CF5138D1463B07304A5C
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
Signing time:             Thu 10 Apr 2025 21:00:01 +0000
ROA not before:           Thu 10 Apr 2025 20:55:01 +0000
ROA not after:            Thu 09 Apr 2026 21:00:01 +0000
asID:                     38765
IP address blocks:        116.90.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:38:29:5c:94:2d:4b:6d:81:e6:cf:51:38:d1:46:3b:07:30:4a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Apr 10 20:55:01 2025 GMT
            Not After : Apr  9 21:00:01 2026 GMT
        Subject: CN=CDDE4B5AB112276B99AE35AA451E5F44B62ED773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:18:4c:b5:d0:e1:cc:d2:2d:46:2b:5b:7f:
                    48:d6:db:ca:2c:a6:d0:f7:a5:78:3d:0f:4b:70:11:
                    30:9d:0d:03:c5:43:42:a9:bc:33:fa:44:8b:5c:d2:
                    c0:84:e2:c1:23:10:04:62:7a:f8:20:7e:44:93:7e:
                    99:7f:b0:6f:fd:57:e2:9f:8e:55:3c:d7:79:f1:93:
                    69:19:7b:fd:b3:30:1a:d0:05:7d:51:84:18:06:eb:
                    65:73:fc:26:c7:87:47:60:30:8c:6e:b5:90:52:45:
                    74:f3:77:b2:1b:7b:53:4d:59:87:23:40:7f:53:7b:
                    1d:85:ef:04:4a:76:26:eb:19:2e:1c:ea:d6:9a:62:
                    6f:a0:26:84:45:2b:14:60:f1:6f:1b:5b:51:14:2d:
                    93:f3:d7:52:10:33:3b:0b:d1:a6:b9:c4:66:8b:06:
                    f7:3c:75:2c:99:b5:43:6c:7f:0c:07:6c:e3:cb:12:
                    8d:c2:4b:12:8a:6d:94:a7:68:bb:f2:94:a0:bb:30:
                    3d:c1:da:dc:15:41:b1:0d:cb:89:95:d3:2c:7a:d9:
                    1d:6e:b6:8c:77:ea:a0:c6:30:c3:cf:b4:fe:78:97:
                    54:5c:ed:b1:24:1f:59:68:e4:04:a5:05:32:16:a7:
                    cf:9b:86:e2:d1:b1:35:17:c4:58:df:49:f0:65:33:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:4B:5A:B1:12:27:6B:99:AE:35:AA:45:1E:5F:44:B6:2E:D7:73
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:e5:07:e3:94:9c:3f:7b:ee:01:73:6b:b2:fc:24:9a:58:
         9d:7b:8b:9f:0d:2e:d7:95:d3:2a:3f:0f:04:ee:dd:1f:f0:38:
         b6:ee:20:30:6f:51:c9:4c:d3:d1:b3:2a:dd:9a:57:17:61:60:
         5a:11:1d:b8:c2:90:93:90:17:7c:a5:0c:24:e1:6b:a0:c2:bb:
         19:4a:53:ed:3d:4a:6f:8a:e5:a7:ab:fe:00:40:31:e2:99:f0:
         0a:21:b9:b1:df:50:3e:3a:04:7a:ae:1f:36:65:fb:e2:ee:13:
         b5:0a:08:5a:03:57:bf:21:93:f8:27:ba:87:b3:73:af:9b:b2:
         a4:e5:0c:9a:da:98:ae:2a:22:a3:fc:92:b5:aa:d6:08:a1:34:
         2e:18:87:59:2f:3f:ca:46:40:64:c7:60:ce:cb:75:64:db:e9:
         e3:0c:d6:26:3f:50:94:0d:fa:c5:72:5d:ab:22:23:99:4c:36:
         bb:69:52:8a:1c:b0:d2:da:87:d2:d2:92:4b:44:c2:81:12:b9:
         32:70:b9:08:4a:f5:7c:7c:d4:c1:b4:a5:40:6b:18:a1:a2:68:
         4b:bd:61:56:59:9a:e4:94:4b:93:80:d2:9a:d2:06:2b:4e:b3:
         dc:61:52:27:88:c1:48:5a:83:c2:f0:44:0a:d8:5f:1e:e5:f1:
         89:b9:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net