Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa
File:                     3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (raw, json)
Hash identifier:          FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=
Subject key identifier:   F2:AA:ED:97:C6:F4:3F:09:19:B2:A9:A0:83:18:86:8C:46:3C:9D:A8
Certificate issuer:       /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Certificate serial:       25844148FA2B30ED5E999FD36F4E7399EA0B9DA2
Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa
Signing time:             Thu 18 Sep 2025 02:00:01 +0000
ROA not before:           Thu 18 Sep 2025 01:55:01 +0000
ROA not after:            Thu 17 Sep 2026 02:00:01 +0000
asID:                     152069
IP address blocks:        150.242.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
                          rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:84:41:48:fa:2b:30:ed:5e:99:9f:d3:6f:4e:73:99:ea:0b:9d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
        Validity
            Not Before: Sep 18 01:55:01 2025 GMT
            Not After : Sep 17 02:00:01 2026 GMT
        Subject: CN=F2AAED97C6F43F0919B2A9A08318868C463C9DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:a4:f5:1f:d4:79:63:da:e1:b0:b0:5b:3e:
                    3a:9a:33:c1:a3:95:a7:b6:1d:81:b9:e9:2c:77:f6:
                    94:64:72:53:c9:d4:f1:06:1b:ed:04:bd:37:0f:88:
                    13:6c:72:ff:2c:cb:36:2d:93:5f:93:76:32:ad:09:
                    46:bc:5e:ce:b0:6a:39:ba:16:9e:b2:2a:58:19:02:
                    8d:0e:b5:8d:d5:80:79:ce:76:2b:10:9f:85:9e:c4:
                    ae:8e:a3:f9:40:77:66:eb:57:2a:6b:d8:f0:0a:e0:
                    4c:97:28:d5:86:6b:5a:e0:f6:ae:96:4a:aa:e8:f4:
                    41:b5:ba:98:2b:11:0f:33:f4:39:28:72:ea:0d:1b:
                    8a:77:fd:0f:ea:71:66:ca:68:2c:bb:1a:da:b4:93:
                    75:f3:54:06:79:0b:de:d5:df:9d:ae:50:4c:09:3f:
                    2b:7a:90:43:e7:10:66:98:1f:d0:4a:b6:30:0b:c4:
                    de:a6:e1:70:3b:f6:1c:d8:f0:e6:31:60:15:3e:21:
                    45:f0:37:43:f8:52:66:e4:86:26:2d:8b:3e:f3:d8:
                    c5:73:f2:68:30:42:30:68:20:5f:36:2c:fc:53:8b:
                    73:ef:8e:fc:0e:48:ab:ea:94:e9:98:84:eb:7d:b8:
                    20:3c:64:a5:1f:1d:d9:f8:2e:3e:fe:25:4d:22:38:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:ED:97:C6:F4:3F:09:19:B2:A9:A0:83:18:86:8C:46:3C:9D:A8
            X509v3 Authority Key Identifier:
                keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:0c:13:b3:d1:0b:0b:13:25:f6:63:f7:67:51:d9:10:ed:
         ca:6a:05:73:05:3b:79:50:da:22:74:51:32:10:6b:4f:3e:f2:
         d3:1b:59:d5:1a:60:8e:94:bc:6a:dc:49:d7:07:4f:e1:54:36:
         4e:f7:25:5c:58:96:08:ef:d6:3e:e3:78:20:70:05:95:40:08:
         8f:5b:4f:cf:97:96:44:c9:c4:b8:3a:35:35:8b:5d:14:15:f4:
         57:ec:9c:72:06:fa:da:f7:fe:13:32:b0:6e:4c:c7:cb:4c:e7:
         3a:7d:a9:bf:75:dd:40:23:f8:20:c7:4b:24:81:1b:9a:b1:e9:
         15:06:cd:2e:c5:e2:68:c8:9e:74:09:76:4a:7c:fe:5e:99:1d:
         1e:e5:78:ad:b1:cb:f6:43:f1:58:c0:0f:cd:00:38:ea:62:ef:
         30:a2:72:67:99:5b:48:7e:b9:72:19:19:9e:de:8e:6d:b8:92:
         95:af:d0:33:be:60:4f:97:1b:64:09:ac:a2:ee:07:4c:4b:93:
         b5:a4:d9:5c:17:6e:91:02:b6:a3:ba:f8:77:44:f0:d0:0c:eb:
         2c:84:1c:7d:43:f6:35:ba:36:55:b3:62:b7:3b:f5:2a:bd:72:
         13:37:c1:0d:9c:73:e2:68:0a:44:e1:8d:1e:ef:ca:51:4d:1c:
         b0:6d:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:27 2025 by rpki-client