Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa
File:                     3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier:          uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=
Subject key identifier:   04:67:0A:E8:EA:4B:31:45:BC:91:51:6F:AA:D5:7A:1F:14:B5:32:B8
Certificate issuer:       /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial:       019219FDD27DA3BEC0ACEBA65FB12C759F9EBA28
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa
Signing time:             Wed 04 Jun 2025 12:00:02 +0000
ROA not before:           Wed 04 Jun 2025 11:55:02 +0000
ROA not after:            Wed 03 Jun 2026 12:00:02 +0000
asID:                     152800
IP address blocks:        160.22.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:19:fd:d2:7d:a3:be:c0:ac:eb:a6:5f:b1:2c:75:9f:9e:ba:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Validity
            Not Before: Jun  4 11:55:02 2025 GMT
            Not After : Jun  3 12:00:02 2026 GMT
        Subject: CN=04670AE8EA4B3145BC91516FAAD57A1F14B532B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:06:a3:f4:f7:23:19:a0:2d:99:fb:48:b7:
                    75:57:c0:fd:3b:cc:09:45:9f:bb:c2:02:13:13:28:
                    c3:57:13:3d:68:97:a6:f5:1f:eb:73:ae:36:25:0e:
                    6d:11:35:e8:76:a9:b0:91:6a:02:8f:cb:27:b1:8b:
                    54:51:62:de:35:e0:b3:95:b5:7a:a1:03:f4:05:13:
                    8f:f5:2c:41:dc:1b:ea:d8:ac:84:34:a9:50:00:7f:
                    00:5e:ae:66:a4:8f:89:13:96:b6:52:8a:7b:ff:6a:
                    ae:9e:e1:c9:28:04:39:25:55:db:b8:b3:c6:38:3e:
                    04:86:78:4a:ce:d8:e3:9d:5d:b9:a8:b7:4e:29:09:
                    d6:cd:62:30:c9:06:f0:96:db:25:9b:58:9c:d2:0d:
                    4f:33:ef:fb:9f:01:9e:24:cb:d3:a9:bd:c0:51:e0:
                    2f:f8:7f:06:28:9b:b5:ef:f3:f8:02:63:9d:b9:13:
                    b0:65:f8:69:1f:75:e9:be:6c:93:ee:c4:fa:0f:1c:
                    e7:ff:96:c7:43:b5:d0:0b:a6:32:2d:3b:08:23:c7:
                    52:47:a7:a8:59:ea:ca:2e:a2:f2:ec:7e:bb:76:28:
                    ac:ee:77:1e:9f:06:e9:b1:43:a0:66:1f:1e:29:ab:
                    22:b6:d8:da:e3:2e:f2:fb:ae:54:35:14:71:a9:b3:
                    f7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:67:0A:E8:EA:4B:31:45:BC:91:51:6F:AA:D5:7A:1F:14:B5:32:B8
            X509v3 Authority Key Identifier:
                keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32342e302f32342d3234203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:8b:2a:64:5e:d7:cd:25:d9:d1:8d:97:09:b8:3e:08:b0:
         e1:97:ce:b1:ba:81:1d:cf:90:21:ec:cc:c9:df:60:96:9c:79:
         c7:87:5b:86:41:47:f4:54:99:33:75:5d:91:e5:59:4d:7d:dc:
         6c:15:3f:b4:ee:7d:04:23:ac:91:a1:22:4f:88:71:2e:01:c2:
         0c:97:3e:8d:71:1c:23:36:81:2c:0b:31:08:a2:03:d0:25:1c:
         e5:ea:38:f6:b9:66:75:3f:2f:2f:63:6d:20:04:32:cc:27:b2:
         08:93:bb:ea:c5:6c:ca:2a:8b:93:5d:6f:e3:63:5f:9f:b6:98:
         f5:94:2c:53:53:79:87:42:20:4f:bc:15:ef:bb:44:f0:3b:42:
         d4:a5:ab:a6:de:bd:7e:bb:e7:75:0a:56:4f:3a:df:ce:1d:fe:
         22:8f:1e:b1:52:00:f3:3d:1a:2c:86:57:ec:04:72:43:2e:20:
         50:f2:50:8e:38:26:ce:1d:a9:01:36:43:72:26:87:05:1d:31:
         c1:60:a7:ae:4e:1f:d4:d5:35:02:4d:3e:34:18:e6:4a:9a:cf:
         f9:d4:ba:55:a5:b3:34:76:eb:c6:31:f4:3e:e3:66:14:a1:51:
         41:10:79:b4:f8:35:60:26:60:18:73:b9:83:1a:91:b7:06:7c:
         04:0a:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:06:26 2025 by rpki-client