Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313533303831.roa
File:                     3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (raw, json)
Hash identifier:          uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=
Subject key identifier:   E5:4D:06:1C:C8:48:FF:5A:50:33:F5:1F:C9:D4:24:9E:CA:E0:4B:FD
Certificate issuer:       /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial:       113A27AF6FF2721FAFE43A69D0E8DF51561268A0
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313533303831.roa
Signing time:             Thu 26 Jun 2025 09:00:00 +0000
ROA not before:           Thu 26 Jun 2025 08:55:00 +0000
ROA not after:            Thu 25 Jun 2026 09:00:00 +0000
asID:                     153081
IP address blocks:        160.25.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
                          rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 20:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3a:27:af:6f:f2:72:1f:af:e4:3a:69:d0:e8:df:51:56:12:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
        Validity
            Not Before: Jun 26 08:55:00 2025 GMT
            Not After : Jun 25 09:00:00 2026 GMT
        Subject: CN=E54D061CC848FF5A5033F51FC9D4249ECAE04BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:cd:1b:50:94:63:af:9f:1b:fb:78:a3:fd:
                    ea:84:f6:79:d8:02:f5:aa:78:aa:09:39:ee:85:e8:
                    6d:6f:a4:68:f3:03:8d:c5:8c:09:02:79:5d:45:73:
                    d1:73:44:7a:9c:e0:c3:fa:96:a7:01:e6:08:5f:b8:
                    4d:dc:fb:93:b3:8a:70:2d:7b:11:a3:ba:31:d0:ef:
                    b9:31:c0:ce:df:ef:f3:e9:c1:04:0f:be:22:d2:d6:
                    30:08:b4:15:04:75:27:52:08:8f:41:fd:25:ab:82:
                    01:65:f2:d0:05:ab:6c:a8:32:16:a3:d5:ef:69:4e:
                    5b:57:ed:f2:7e:fb:cb:7d:83:d9:31:08:bc:71:38:
                    f7:67:91:8f:75:75:9e:4f:3c:c4:43:d3:7d:af:97:
                    fc:4e:2e:91:1a:3d:91:b4:65:be:df:da:64:08:fa:
                    13:d8:a8:f1:0a:1a:01:cc:5c:2b:2a:3a:fb:dc:b7:
                    77:da:45:0c:96:b8:ba:44:9e:fa:10:29:44:ec:94:
                    bc:f3:e5:7f:e1:41:40:4b:b8:b6:dd:f9:a0:0c:53:
                    39:47:e1:1a:7a:96:37:1d:94:c3:d7:0d:16:7b:89:
                    95:18:48:fc:b9:ed:ab:87:aa:d0:90:24:61:05:a2:
                    e4:09:59:d3:0a:e9:09:15:87:c7:a3:ab:58:46:da:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:06:1C:C8:48:FF:5A:50:33:F5:1F:C9:D4:24:9E:CA:E0:4B:FD
            X509v3 Authority Key Identifier:
                keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313533303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:09:41:3f:89:f9:87:10:6a:ab:03:6d:40:a7:7f:09:f7:ff:
         19:37:59:d8:80:de:0b:fc:fe:00:02:70:bf:88:e0:ac:21:15:
         ff:12:c1:77:52:b2:69:08:7e:2b:b4:31:bc:8c:00:f2:50:7d:
         5c:8b:33:51:69:55:e4:90:f4:f6:3c:6b:9e:56:76:a2:2b:5b:
         e9:37:2a:ed:1c:80:63:7a:ca:e9:6d:1b:0b:3e:4d:cf:33:91:
         c9:6d:bb:8b:ce:6f:27:db:21:69:4d:5c:7c:4a:4b:ca:c1:a0:
         80:4b:c8:e3:ee:6d:11:43:ba:16:98:3a:28:09:0e:be:05:c8:
         ce:02:0b:fa:74:e2:fb:2c:59:6f:af:0f:50:ae:b1:73:86:a9:
         d2:be:15:49:a3:a1:3b:a2:44:76:24:0e:4d:49:6f:9b:73:50:
         37:dd:c8:bc:bc:c1:93:5c:13:65:0c:9b:46:73:18:2e:ea:52:
         7d:5b:3d:0c:12:82:c9:ef:c1:2f:3d:d2:c9:52:3e:5f:c4:22:
         67:e0:0d:00:39:7c:07:b5:68:eb:f9:df:fb:28:af:f3:29:29:
         75:13:28:88:97:a8:fc:2f:5b:5f:57:58:b3:7f:90:7a:31:3d:
         1b:a7:7d:42:f5:4e:ee:40:d5:b5:81:c8:19:26:91:b8:5b:05:
         98:42:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:05:53 2025 by rpki-client