Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
File:                     3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (raw, json)
Hash identifier:          5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=
Subject key identifier:   54:69:69:A5:70:8D:6D:AC:1A:03:C6:F0:F1:EF:BC:20:48:DE:10:C8
Certificate issuer:       /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
Certificate serial:       4E54C7D2783541998A465864BC0B3E9526EE75A4
Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa
Signing time:             Tue 27 May 2025 15:00:50 +0000
ROA not before:           Tue 27 May 2025 14:55:50 +0000
ROA not after:            Tue 26 May 2026 15:00:50 +0000
asID:                     152800
IP address blocks:        160.22.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl
                          rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 01:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:54:c7:d2:78:35:41:99:8a:46:58:64:bc:0b:3e:95:26:ee:75:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD
        Validity
            Not Before: May 27 14:55:50 2025 GMT
            Not After : May 26 15:00:50 2026 GMT
        Subject: CN=546969A5708D6DAC1A03C6F0F1EFBC2048DE10C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:ac:de:e3:5d:ac:33:97:a2:12:51:ad:d7:
                    8b:85:1d:e6:f4:77:47:7a:ba:4f:38:46:9c:49:16:
                    8d:01:de:30:d5:c5:e4:ba:45:27:f2:e0:15:ca:38:
                    92:a5:d9:12:c3:10:fd:e7:ab:fc:3e:9c:8b:9c:5d:
                    8d:55:0a:35:e6:df:b2:89:1d:e8:ba:f7:73:e8:d3:
                    2d:da:4c:11:6f:68:f9:ef:70:a7:cc:2d:b1:44:cf:
                    73:72:39:27:43:ec:9b:57:68:5e:68:46:95:d0:20:
                    b6:77:0b:ec:d3:a2:ff:55:fe:6f:54:8c:1a:ed:e3:
                    bb:23:ad:08:4c:a2:c9:47:55:72:32:62:0a:e9:3b:
                    7b:05:da:74:0b:00:5b:bd:21:8c:28:71:6d:71:86:
                    4d:88:7d:19:96:ea:25:62:ae:06:19:8b:15:aa:5b:
                    b2:6f:96:20:61:c0:c9:d2:3e:87:e5:54:ee:99:6f:
                    07:eb:7e:48:e6:28:03:5d:6e:6b:2d:f0:a9:f5:ae:
                    dc:a2:cf:b1:4c:ac:8f:ca:dd:71:ba:1f:56:e7:cb:
                    40:3e:26:c9:43:fa:7e:97:ff:cd:a9:c3:2e:2b:d7:
                    c9:37:c3:43:6d:e3:ef:e2:e3:b2:16:21:2d:81:ae:
                    04:9e:e4:2e:83:22:8c:46:78:87:3f:74:33:a0:55:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:69:69:A5:70:8D:6D:AC:1A:03:C6:F0:F1:EF:BC:20:48:DE:10:C8
            X509v3 Authority Key Identifier:
                keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32342e302f32332d3233203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:5c:d3:76:3d:3c:51:c1:06:1e:0d:30:13:19:43:c0:d7:
         fd:27:d9:bc:72:f9:de:90:a1:30:a4:13:8d:10:b1:8c:2a:6f:
         31:5f:5a:a9:24:a8:61:b3:2d:52:da:5a:58:7a:51:55:a2:b1:
         ab:f8:33:71:95:b9:d4:08:09:a3:53:02:a2:b4:48:bd:ca:ce:
         80:b1:5d:a4:c3:3d:e0:f0:1e:fe:e1:52:73:03:57:a6:56:4b:
         20:10:44:92:48:2c:c4:f9:4a:aa:b4:2c:9b:7c:1c:7b:dd:45:
         05:82:03:b8:7f:66:69:43:1f:6e:a9:a6:fe:ff:34:10:f4:4a:
         ab:b5:ea:24:99:87:1a:9e:1c:c3:34:88:f8:1e:b3:14:47:cf:
         d7:55:55:fa:e3:e8:52:95:35:7a:b8:ce:a0:a6:2c:ad:b0:59:
         be:cb:32:b1:e8:83:9e:8c:dc:b6:c0:ae:3b:e8:df:7b:2d:6a:
         30:0a:65:12:22:8d:0d:0e:90:a1:98:6f:59:f6:09:94:4d:5a:
         ed:9a:20:1e:69:82:fd:61:0e:45:7a:d3:ac:91:22:e7:b3:11:
         07:64:f8:06:c3:05:f6:44:05:38:38:8b:24:88:17:c8:94:ed:
         82:b8:ca:c7:5b:67:d0:00:bf:12:7b:2c:61:67:24:df:7f:2c:
         d3:5d:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:20:49 2025 by rpki-client