Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
File:                     3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (raw, json)
Hash identifier:          j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=
Subject key identifier:   F8:1D:22:59:78:DA:79:14:C4:58:DD:3C:41:12:90:5C:5D:9F:04:C0
Certificate issuer:       /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial:       02E3030B3D4D2E9B0A1D2334FC255BC2EA19C9E7
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
Signing time:             Wed 30 Apr 2025 08:00:52 +0000
ROA not before:           Wed 30 Apr 2025 07:55:52 +0000
ROA not after:            Wed 29 Apr 2026 08:00:52 +0000
asID:                     152351
IP address blocks:        157.10.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
                          rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e3:03:0b:3d:4d:2e:9b:0a:1d:23:34:fc:25:5b:c2:ea:19:c9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
        Validity
            Not Before: Apr 30 07:55:52 2025 GMT
            Not After : Apr 29 08:00:52 2026 GMT
        Subject: CN=F81D225978DA7914C458DD3C4112905C5D9F04C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:72:b8:e6:e3:b9:a8:18:fe:42:c2:8c:82:
                    0f:9a:78:47:e5:0b:a6:a3:b8:84:a5:8d:de:70:b6:
                    bf:19:b1:7f:3e:b1:9e:0f:b1:98:ec:5d:c1:66:a9:
                    c6:99:f7:92:64:6b:c6:35:eb:07:f0:39:39:50:e8:
                    d7:dc:06:6f:14:93:6a:4c:13:14:a6:83:98:00:b7:
                    93:05:19:d3:16:ad:82:5c:fd:0c:63:31:6e:2c:ce:
                    e6:e6:d7:cf:40:99:a2:2d:8e:a9:07:75:ab:58:26:
                    a4:d3:7d:dd:96:92:c6:be:8c:f4:bb:7c:ed:0e:d8:
                    ec:75:e3:ce:00:de:71:2b:2b:02:67:68:b6:b5:57:
                    63:61:f9:f8:67:c9:b8:86:95:cd:ee:e3:7e:4c:c7:
                    3d:3e:87:e9:f1:cb:8a:b4:31:9b:e9:f8:e2:48:22:
                    e8:e1:bf:eb:c9:71:6b:8b:7d:cc:eb:66:33:a5:a1:
                    a9:e0:11:55:f5:30:48:fd:05:f4:82:35:47:64:d8:
                    eb:89:fd:fc:6b:83:dd:74:fb:ef:02:ce:66:ef:db:
                    78:5d:b7:4a:7a:94:2b:f7:5e:dc:53:99:d6:7a:1f:
                    97:11:51:e6:df:d5:d8:bd:d2:94:8e:de:bb:24:e9:
                    de:52:08:75:fa:de:f8:3a:a9:09:b5:12:f0:fd:2c:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1D:22:59:78:DA:79:14:C4:58:DD:3C:41:12:90:5C:5D:9F:04:C0
            X509v3 Authority Key Identifier:
                keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:1f:25:08:89:bf:94:2b:10:aa:19:b7:31:23:fe:71:95:14:
         8a:8f:7e:17:a8:8b:ca:84:cd:da:c9:11:0e:fb:e1:69:57:0b:
         b0:37:43:54:c5:2a:83:06:d6:22:66:f7:8c:86:74:00:d8:4a:
         17:a4:f4:4b:99:fe:39:6e:97:eb:20:0e:66:21:52:49:4d:9c:
         fc:88:86:b7:f8:cf:da:15:ee:21:3f:cb:56:03:8e:34:05:9f:
         00:42:b6:cc:c1:93:98:b9:52:a7:7f:f2:93:8d:ae:88:27:d8:
         71:bd:46:f0:16:01:b8:25:22:46:6a:7f:1c:9e:9b:25:7a:99:
         20:1f:f1:c7:bd:5d:0c:36:df:62:34:2c:08:68:a0:95:d7:f3:
         64:6a:b6:34:ea:8f:43:4e:c2:e9:99:7b:09:b9:27:01:d2:11:
         de:da:de:bb:f7:f6:ab:be:af:1e:5c:a9:2d:21:47:0c:22:49:
         f9:6c:d6:2e:55:70:d8:fd:9f:71:f5:2f:25:3d:f6:a7:2d:55:
         66:44:25:76:37:af:5f:c4:6e:e8:dd:9e:92:46:46:48:5a:ab:
         05:01:20:a1:0f:77:a4:1a:01:e4:7a:a0:2e:20:b1:ec:b6:8d:
         d2:a2:38:e0:af:04:50:f5:45:70:1b:5f:fa:7f:09:d3:f0:b7:
         27:9b:0a:f8
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAuMDCz1NLpsKHSM0/CVbwuoZyecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx
MTNGNUREMTAeFw0yNTA0MzAwNzU1NTJaFw0yNjA0MjkwODAwNTJaMDMxMTAvBgNV
BAMTKEY4MUQyMjU5NzhEQTc5MTRDNDU4REQzQzQxMTI5MDVDNUQ5RjA0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+nK45uO5qBj+QsKMgg+aeEfl
C6ajuISljd5wtr8ZsX8+sZ4PsZjsXcFmqcaZ95Jka8Y16wfwOTlQ6NfcBm8Uk2pM
ExSmg5gAt5MFGdMWrYJc/QxjMW4szubm189AmaItjqkHdatYJqTTfd2Wksa+jPS7
fO0O2Ox1484A3nErKwJnaLa1V2Nh+fhnybiGlc3u435Mxz0+h+nxy4q0MZvp+OJI
Iujhv+vJcWuLfczrZjOloangEVX1MEj9BfSCNUdk2OuJ/fxrg910++8Czmbv23hd
t0p6lCv3XtxTmdZ6H5cRUebf1di90pSO3rsk6d5SCHX63vg6qQm1EvD9LJdrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+B0iWXjaeRTEWN08QRKQXF2fBMAwHwYDVR0j
BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0
RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG
NUREMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwYzI2NmU2LTBiODQtNDMxZi05
ZTc0LTA2ZDNkOTNlOTcwNC8wLzMxMzUzNzJlMzEzMDJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KQjANBgkqhkiG
9w0BAQsFAAOCAQEA4B8lCIm/lCsQqhm3MSP+cZUUio9+F6iLyoTN2skRDvvhaVcL
sDdDVMUqgwbWImb3jIZ0ANhKF6T0S5n+OW6X6yAOZiFSSU2c/IiGt/jP2hXuIT/L
VgOONAWfAEK2zMGTmLlSp3/yk42uiCfYcb1G8BYBuCUiRmp/HJ6bJXqZIB/xx71d
DDbfYjQsCGigldfzZGq2NOqPQ07C6Zl7CbknAdIR3treu/f2q76vHlypLSFHDCJJ
+WzWLlVw2P2fcfUvJT32py1VZkQldjevX8Ru6N2ekkZGSFqrBQEgoQ93pBoB5Hqg
LiCx7LaN0qI44K8EUPVFcBtf+n8J0/C3J5sK+A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:08 2025 by rpki-client