Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313430343233.roa
File:                     3136302e32322e36322e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier:          +BG+2fWbSUohG1Sg2J+GMAoluuqy8JwAmoV3ON6W7L0=
Subject key identifier:   43:0A:A3:D6:48:B1:AB:75:D8:7C:60:E2:0B:4D:7C:EA:4C:AC:31:72
Certificate issuer:       /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Certificate serial:       7FA98170C59132A9CC073B53479C968D14EEF68E
Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313430343233.roa
Signing time:             Sat 10 May 2025 08:13:08 +0000
ROA not before:           Sat 10 May 2025 08:08:08 +0000
ROA not after:            Sat 09 May 2026 08:13:08 +0000
asID:                     140423
IP address blocks:        160.22.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl
                          rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a9:81:70:c5:91:32:a9:cc:07:3b:53:47:9c:96:8d:14:ee:f6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
        Validity
            Not Before: May 10 08:08:08 2025 GMT
            Not After : May  9 08:13:08 2026 GMT
        Subject: CN=430AA3D648B1AB75D87C60E20B4D7CEA4CAC3172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:17:6d:0b:82:1c:27:57:5e:fa:45:b8:08:
                    11:7e:ac:59:60:99:20:50:41:5c:38:96:3b:0b:61:
                    18:32:cc:80:d3:f4:65:04:d6:26:be:61:17:9c:0c:
                    d9:a4:e8:68:ba:68:44:d1:af:93:8b:6e:d1:83:29:
                    87:26:17:1f:7e:2e:0a:60:e4:c9:2b:46:e8:b6:c8:
                    02:3c:9b:f9:24:fc:38:84:5b:b2:bb:a8:9c:c7:f2:
                    ad:83:37:ab:7c:bc:96:00:54:90:26:03:ec:2c:6f:
                    43:5b:2f:a0:f2:0c:a2:46:91:b6:18:55:21:df:b6:
                    9b:2c:81:31:bc:6a:d4:9f:66:dd:ce:e4:75:17:4b:
                    d2:5b:64:04:29:df:6e:c5:54:fa:44:7e:75:20:c9:
                    97:4e:a7:4c:d5:f2:c2:06:c6:d0:6c:3d:86:c5:8c:
                    e4:ef:6c:bc:1e:ea:94:6c:49:fa:03:1e:1e:c7:9e:
                    5c:a5:97:b0:f8:89:f3:88:6b:9e:de:df:f0:a5:af:
                    2f:3c:aa:cf:33:bf:f2:ee:04:a4:ac:81:29:54:8e:
                    1c:13:c9:1b:a1:c6:9f:49:81:f2:a0:eb:cc:55:d1:
                    18:1d:0b:8a:c8:01:d3:86:61:6e:9d:c4:86:fe:b5:
                    bd:28:cb:ba:8b:82:1e:09:4e:39:8d:3d:99:a1:34:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:A3:D6:48:B1:AB:75:D8:7C:60:E2:0B:4D:7C:EA:4C:AC:31:72
            X509v3 Authority Key Identifier:
                keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:15:70:e9:a1:47:f3:63:b7:76:60:12:3d:28:ac:f2:f3:24:
         65:8f:e2:3c:b1:6a:b3:a1:18:ac:e0:c0:96:8f:27:dc:17:81:
         05:84:11:e1:30:9f:6c:2e:0a:b9:33:96:28:9f:b6:73:5a:e8:
         17:b6:b9:1c:d5:89:bd:62:1c:a0:9b:3f:e9:ce:1a:b9:61:f5:
         ca:6f:ea:39:11:fd:c7:57:b6:e2:ea:2c:26:1e:cf:22:b2:e5:
         e7:dc:5d:1a:f2:a7:a5:b0:9c:24:69:b6:ee:3d:45:8a:81:73:
         cd:d7:b0:41:70:37:00:f7:ec:db:b9:3b:ec:e2:6c:d0:2f:8e:
         60:7d:aa:c7:29:eb:5b:b0:53:b5:d3:db:81:30:4a:a0:ae:9a:
         7f:77:c5:9d:bf:d0:e4:b4:47:e5:8a:70:5d:5e:90:c9:17:cf:
         5e:21:70:47:22:cf:7a:7d:fd:6c:c0:c4:18:4c:cb:f3:41:6c:
         c8:a0:51:97:aa:6f:30:4b:eb:4d:5d:95:2a:e5:ef:bc:00:d7:
         58:7e:f2:65:b6:29:8e:d7:08:88:38:52:99:f5:16:0d:ee:4f:
         c0:d1:35:64:db:60:dd:32:23:95:22:05:1e:47:cb:d8:62:c3:
         c7:78:9b:81:7c:21:47:0d:8b:ca:af:9e:54:e2:ff:b2:89:b8:
         a5:66:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:02 2025 by rpki-client