Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
File:                     3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier:          2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=
Subject key identifier:   1D:20:3A:AC:C8:DA:B6:AE:89:D3:34:92:19:40:30:EC:7A:05:9E:65
Certificate issuer:       /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial:       73E7229EE57965AC32CF8FFD20D244D4190E1F69
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
Signing time:             Wed 04 Jun 2025 12:00:02 +0000
ROA not before:           Wed 04 Jun 2025 11:55:02 +0000
ROA not after:            Wed 03 Jun 2026 12:00:02 +0000
asID:                     152800
IP address blocks:        160.22.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e7:22:9e:e5:79:65:ac:32:cf:8f:fd:20:d2:44:d4:19:0e:1f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
        Validity
            Not Before: Jun  4 11:55:02 2025 GMT
            Not After : Jun  3 12:00:02 2026 GMT
        Subject: CN=1D203AACC8DAB6AE89D33492194030EC7A059E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:35:c0:83:5b:25:36:c9:c4:c3:3d:28:e0:
                    14:f2:05:98:9a:46:ce:7b:b8:39:48:31:70:86:1c:
                    b3:d2:5c:fe:72:58:df:33:19:c1:bd:a2:94:4f:c9:
                    02:4c:95:2e:3d:81:60:98:1e:27:c1:3c:9c:5b:16:
                    06:d3:2b:a0:71:4e:5e:61:c4:fb:0e:0e:71:e2:f4:
                    bd:9a:b3:c9:93:62:7c:c0:7f:65:6a:2e:35:a0:0b:
                    51:b3:86:0a:9a:53:e7:6b:8b:08:22:f6:84:3a:5e:
                    f8:5f:c3:7c:1a:22:98:c9:fa:65:f9:e8:8d:e3:92:
                    ba:3e:37:34:b1:0a:8d:6d:de:18:be:cf:bf:8f:38:
                    ae:a0:52:17:63:b1:7f:3f:30:20:ef:3c:b8:d7:35:
                    1b:55:c8:d1:1f:a1:6e:15:ea:0f:35:b8:91:e6:6d:
                    84:14:65:dc:4a:b2:3c:b1:e1:1f:8d:5f:9c:9f:87:
                    35:92:b7:c5:93:ee:88:ca:7f:90:24:49:c4:59:ea:
                    43:36:bb:fc:2c:dd:08:36:6e:3c:3c:fa:ee:d5:96:
                    39:7f:06:63:16:0b:8a:0d:70:a1:98:ee:c8:5f:2f:
                    7b:52:5e:65:12:b1:3c:7a:7d:3e:44:fa:67:af:26:
                    6c:c2:f4:0d:6e:6e:ba:db:d5:c1:cb:2a:af:a4:b9:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:3A:AC:C8:DA:B6:AE:89:D3:34:92:19:40:30:EC:7A:05:9E:65
            X509v3 Authority Key Identifier:
                keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:4f:60:76:9a:62:d6:7c:a7:fa:3c:54:3c:bd:17:bb:9e:
         ee:30:d8:d6:59:ec:97:55:e5:49:52:3e:0d:f0:0d:64:f4:53:
         93:7f:50:5b:66:5d:15:29:bf:5a:a0:9f:d9:ff:56:a7:93:36:
         4e:56:40:7f:55:f8:cc:97:1f:83:ed:e6:32:47:a8:c8:d9:a6:
         9a:83:c0:b2:f4:37:85:05:9b:4e:0b:56:38:42:7e:76:f5:bc:
         13:ed:a6:b7:95:89:ee:e1:58:9e:7d:b8:62:30:9a:d0:6f:73:
         dc:22:4f:aa:f6:4e:9a:a4:01:a2:20:c8:3d:ca:4c:72:5d:d9:
         4c:21:e1:41:c4:34:29:a9:0b:8e:74:8e:5b:3b:2f:ac:4a:1d:
         dc:dd:40:e0:e1:f2:d7:da:7d:88:4e:e0:6e:74:82:66:4b:cd:
         77:03:06:27:1d:a1:26:43:0a:fd:66:06:fa:d2:97:b6:f2:a2:
         00:94:d8:53:a2:bc:4b:7b:91:34:e6:0c:ba:5e:17:71:df:c9:
         1e:d9:09:b6:40:36:1b:27:ad:4b:81:a3:13:57:14:0c:5b:0e:
         ad:c5:30:dc:ea:d4:e5:83:e7:7d:9c:72:ad:69:46:57:d9:cc:
         b1:a1:d1:78:fa:96:ed:db:cb:b9:9b:ef:d0:cd:15:d4:d0:f5:
         ad:bf:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:31 2025 by rpki-client