Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
File:                     3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (raw, json)
Hash identifier:          s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=
Subject key identifier:   54:18:BA:7F:2C:B7:3A:68:D3:CB:CF:41:AD:B8:66:3C:8E:1F:55:C4
Certificate issuer:       /CN=575614534DD1047EA1BA290176D96470FCBA1ECA
Certificate serial:       2C7DC6A4193743076156175696F97F5C81B4B5EC
Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa
Signing time:             Tue 27 May 2025 18:00:02 +0000
ROA not before:           Tue 27 May 2025 17:55:02 +0000
ROA not after:            Tue 26 May 2026 18:00:02 +0000
asID:                     152815
IP address blocks:        160.22.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl
                          rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 04:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7d:c6:a4:19:37:43:07:61:56:17:56:96:f9:7f:5c:81:b4:b5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA
        Validity
            Not Before: May 27 17:55:02 2025 GMT
            Not After : May 26 18:00:02 2026 GMT
        Subject: CN=5418BA7F2CB73A68D3CBCF41ADB8663C8E1F55C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:32:9c:20:ea:c1:7b:dc:d3:74:b6:85:b7:
                    8a:5b:8e:a9:d2:70:45:06:0a:92:71:80:2c:ac:31:
                    4f:ff:5b:1a:56:6b:38:da:be:3f:75:30:e1:8f:2a:
                    e7:0e:24:ab:32:cb:08:5b:18:12:4c:f8:af:af:80:
                    ed:b2:6d:ba:07:df:4a:27:4b:19:bc:9d:73:f4:d5:
                    97:da:03:6d:3d:1c:63:0f:cf:02:4e:c8:d0:75:c6:
                    1c:fe:69:86:ce:17:7f:0f:af:c6:58:d5:93:7a:d2:
                    0c:ce:31:ea:fa:8e:0f:79:56:c1:43:0b:cd:7f:8b:
                    3d:5f:2f:b6:70:cd:0b:d6:cf:1a:ed:b4:b7:96:ee:
                    41:d7:51:ea:ab:2d:a6:45:c5:6e:c7:38:74:3e:40:
                    ec:14:4e:c3:1c:2e:b7:12:48:9b:fe:2d:65:f2:1b:
                    54:f7:54:2e:a5:30:4a:05:1e:a4:63:00:b0:59:b5:
                    6f:49:33:9f:1d:4f:09:6b:24:78:7d:9e:bb:16:ab:
                    9c:fa:a3:75:e2:31:5c:82:9f:99:cf:d5:07:35:a5:
                    cc:7e:9f:06:99:6a:60:b5:68:a8:50:2b:5d:ea:a4:
                    69:30:e2:03:c6:83:4b:f0:2b:16:bf:0c:4b:b4:a1:
                    94:4d:67:c0:7c:c0:57:d7:77:41:fb:60:6d:3a:52:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:BA:7F:2C:B7:3A:68:D3:CB:CF:41:AD:B8:66:3C:8E:1F:55:C4
            X509v3 Authority Key Identifier:
                keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/3136302e32322e39302e302f32342d3234203d3e20313532383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c2:90:7c:86:4d:cf:17:de:ae:8b:21:0b:08:38:c5:6c:94:
         4a:f8:65:8b:fc:b5:d8:d5:27:6a:b3:3d:f4:f7:24:83:19:0c:
         70:ff:ad:aa:28:01:8c:27:0c:82:b9:36:3c:ca:31:96:cf:a1:
         77:e3:5c:1d:91:65:f4:e5:90:6e:0e:d0:3a:6e:2a:c3:19:e6:
         7b:ed:d3:77:08:d8:de:e6:2e:ec:44:2b:af:7a:7f:86:63:5f:
         dc:c8:4a:8a:fe:f5:5e:2c:3d:fb:04:48:c4:6a:c2:68:c3:43:
         12:b1:42:0f:fb:84:f7:d3:89:e5:bb:72:6d:7f:07:21:cb:40:
         aa:08:69:72:b8:0d:63:59:8a:b2:cb:f0:22:ba:55:75:2d:87:
         9f:3c:09:33:f2:68:11:8b:e1:10:49:ad:63:ec:95:92:79:9e:
         c1:ca:df:e4:9f:f1:02:b2:45:67:a2:b3:95:3b:b7:93:5b:ed:
         1b:3e:ba:5b:7d:00:b7:e6:ff:54:95:8a:a4:ba:4a:cd:5b:6a:
         99:b6:ab:48:c4:04:82:ad:8d:bc:f1:3b:4e:9f:6e:0c:60:7d:
         dc:2f:15:0a:c3:47:a8:f2:32:b5:e9:cd:d6:1e:fe:ed:13:54:
         d2:bf:e1:8c:ab:e8:f7:62:4c:01:be:97:9f:5c:14:b3:70:24:
         ed:30:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:55 2025 by rpki-client