Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39372e302f32342d3234203d3e20313532383238.roa
File:                     3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (raw, json)
Hash identifier:          kwAZ838D0ERhtGt/Ke2PpJnDihw3zY8GMQxxC8oDZ/k=
Subject key identifier:   80:72:E3:66:8E:BB:98:C6:22:6E:D4:C2:4F:1B:5B:16:8C:2F:9F:7B
Certificate issuer:       /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial:       7A39A99A2D564D81504A126BBA986C1B1F76D520
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39372e302f32342d3234203d3e20313532383238.roa
Signing time:             Tue 03 Jun 2025 19:00:00 +0000
ROA not before:           Tue 03 Jun 2025 18:55:00 +0000
ROA not after:            Tue 02 Jun 2026 19:00:00 +0000
asID:                     152828
IP address blocks:        160.22.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
                          rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 07:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:a9:9a:2d:56:4d:81:50:4a:12:6b:ba:98:6c:1b:1f:76:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
        Validity
            Not Before: Jun  3 18:55:00 2025 GMT
            Not After : Jun  2 19:00:00 2026 GMT
        Subject: CN=8072E3668EBB98C6226ED4C24F1B5B168C2F9F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:db:fd:33:ea:12:3b:b7:e0:70:14:8d:92:
                    33:e7:39:32:bc:27:1e:24:2e:6f:fe:9d:09:04:1e:
                    85:1f:a5:3c:43:27:b4:ab:b9:b9:eb:bb:ef:77:14:
                    f8:d3:56:d0:41:a3:a2:e8:04:e1:d1:37:01:cc:92:
                    62:07:ca:53:9b:9c:f2:76:62:4f:2d:9b:b5:aa:bc:
                    1a:08:cc:15:10:97:f2:4b:91:0a:a3:37:ff:cc:7c:
                    3c:ec:ad:32:0d:54:95:66:b5:a0:67:7e:92:18:63:
                    f3:de:10:61:a4:42:33:84:22:d2:11:16:b5:b9:4e:
                    ac:12:98:73:0a:43:a9:ac:04:ff:c3:74:c5:62:7a:
                    e9:17:28:8b:89:21:53:38:b9:b3:b8:9d:43:7f:85:
                    71:16:23:18:07:e9:f5:db:6d:0e:9a:ab:fb:db:b9:
                    f1:eb:06:fd:e1:11:30:13:d5:88:51:0d:3a:1d:b6:
                    fc:bf:81:c8:e8:ae:3f:72:1e:b6:96:1c:d4:aa:f6:
                    33:48:fc:dc:a5:1b:9e:db:95:ad:61:41:df:51:0e:
                    8b:64:ab:13:eb:4f:8c:b3:35:69:d1:d9:aa:47:15:
                    a1:2e:69:50:55:77:5c:ee:1d:70:9d:f3:d9:7e:28:
                    4e:96:81:9e:82:34:3e:4c:0d:f4:d3:90:14:62:5a:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:72:E3:66:8E:BB:98:C6:22:6E:D4:C2:4F:1B:5B:16:8C:2F:9F:7B
            X509v3 Authority Key Identifier:
                keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39372e302f32342d3234203d3e20313532383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:a8:ef:a0:14:82:ca:e6:b6:41:1b:b6:a4:26:c1:45:43:
         dd:7c:08:d9:9f:b1:88:02:fa:f4:33:d6:ea:9b:a4:7f:84:8d:
         53:d7:d1:39:ec:e6:22:f5:8f:6f:68:f2:4c:4a:0b:6e:e1:11:
         4f:f8:ab:1c:4c:22:63:c3:84:10:88:db:95:68:1c:09:58:b9:
         c6:56:f9:7c:a1:59:e7:db:73:be:aa:4a:b7:dd:21:b2:e7:17:
         84:06:24:ed:f0:d5:99:d0:38:bd:47:fb:53:11:91:69:2e:01:
         e5:9e:11:5a:e8:31:dc:ec:20:74:63:54:33:03:e1:cc:cf:64:
         b9:1d:ee:7d:de:2a:67:c6:8e:eb:47:eb:9d:23:4e:5b:e4:7f:
         f5:39:9b:87:d8:69:d8:d0:ee:e7:36:8c:08:75:20:56:49:81:
         27:84:e0:e8:45:eb:cb:13:5b:e5:59:6c:5c:d2:85:e7:b3:5e:
         21:1f:aa:fc:d7:6d:9b:ce:ba:9d:0b:eb:68:26:04:dd:c4:84:
         58:ba:9c:b7:a8:33:b9:b3:ac:c1:90:af:d5:a1:b7:bf:62:15:
         e7:d4:67:8a:24:23:00:f5:86:7b:c6:2a:0a:c6:cc:39:55:04:
         9e:a7:5f:a6:19:37:2c:1b:a7:ba:5c:ff:a8:43:bb:74:9e:74:
         cd:a3:54:6c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUejmpmi1WTYFQShJruphsGx921SAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD
M0E5NzVBMTAeFw0yNTA2MDMxODU1MDBaFw0yNjA2MDIxOTAwMDBaMDMxMTAvBgNV
BAMTKDgwNzJFMzY2OEVCQjk4QzYyMjZFRDRDMjRGMUI1QjE2OEMyRjlGN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNdv9M+oSO7fgcBSNkjPnOTK8
Jx4kLm/+nQkEHoUfpTxDJ7Srubnru+93FPjTVtBBo6LoBOHRNwHMkmIHylObnPJ2
Yk8tm7WqvBoIzBUQl/JLkQqjN//MfDzsrTINVJVmtaBnfpIYY/PeEGGkQjOEItIR
FrW5TqwSmHMKQ6msBP/DdMVieukXKIuJIVM4ubO4nUN/hXEWIxgH6fXbbQ6aq/vb
ufHrBv3hETAT1YhRDTodtvy/gcjorj9yHraWHNSq9jNI/NylG57bla1hQd9RDotk
qxPrT4yzNWnR2apHFaEuaVBVd1zuHXCd89l+KE6WgZ6CND5MDfTTkBRiWj6RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgHLjZo67mMYibtTCTxtbFowvn3swHwYDVR0j
BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC
MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5
NzVBMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzY2JkNjdiLWQxOTAtNGE0Yy04
M2I2LTExODg3ZDdjMmU5OS8wLzMxMzYzMDJlMzIzMjJlMzkzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWYTANBgkqhkiG
9w0BAQsFAAOCAQEATJWo76AUgsrmtkEbtqQmwUVD3XwI2Z+xiAL69DPW6pukf4SN
U9fROezmIvWPb2jyTEoLbuERT/irHEwiY8OEEIjblWgcCVi5xlb5fKFZ59tzvqpK
t90hsucXhAYk7fDVmdA4vUf7UxGRaS4B5Z4RWugx3OwgdGNUMwPhzM9kuR3ufd4q
Z8aO60frnSNOW+R/9Tmbh9hp2NDu5zaMCHUgVkmBJ4Tg6EXryxNb5VlsXNKF57Ne
IR+q/Ndtm866nQvraCYE3cSEWLqct6gzubOswZCv1aG3v2IV59RniiQjAPWGe8Yq
CsbMOVUEnqdfphk3LBunulz/qEO7dJ50zaNUbA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:43:14 2025 by rpki-client