Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa
File:                     3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (raw, json)
Hash identifier:          iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=
Subject key identifier:   8E:8E:2F:68:BE:E4:9A:AB:1C:EF:F2:23:A0:46:62:5B:8C:B3:2C:32
Certificate issuer:       /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Certificate serial:       0475EE618C2743C329377C6746A1362B8AB00476
Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa
Signing time:             Thu 18 Sep 2025 02:00:01 +0000
ROA not before:           Thu 18 Sep 2025 01:55:01 +0000
ROA not after:            Thu 17 Sep 2026 02:00:01 +0000
asID:                     152069
IP address blocks:        150.242.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
                          rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:75:ee:61:8c:27:43:c3:29:37:7c:67:46:a1:36:2b:8a:b0:04:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
        Validity
            Not Before: Sep 18 01:55:01 2025 GMT
            Not After : Sep 17 02:00:01 2026 GMT
        Subject: CN=8E8E2F68BEE49AAB1CEFF223A046625B8CB32C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:96:b1:c0:d0:13:50:e5:26:2f:8d:fc:73:
                    2d:b5:78:0e:ae:e2:b5:aa:fe:f6:91:d6:ac:65:99:
                    21:a2:33:25:7b:70:76:4e:d4:94:8e:70:b2:49:79:
                    5c:cb:cb:95:3d:74:22:16:55:ac:c1:0c:da:c0:a4:
                    79:9b:e4:0a:69:cc:fd:ca:02:6f:31:2a:c8:6e:35:
                    78:aa:a2:84:c7:2d:d4:13:12:15:a6:ce:38:40:56:
                    57:d2:b3:76:86:92:02:87:f7:15:4b:ab:6d:d6:8b:
                    c9:f3:b0:f8:1c:97:06:dd:e0:4f:45:9d:ad:24:63:
                    15:b8:1a:5a:7a:9e:64:05:24:2a:8f:75:40:24:53:
                    65:a4:6d:24:5c:86:64:3f:25:b1:1f:eb:e2:0c:49:
                    24:74:10:15:b3:74:9f:60:8e:2c:35:31:90:45:6a:
                    08:8c:e3:e5:d4:2d:81:2e:37:ac:97:a3:d8:c5:6a:
                    70:78:2a:ca:ef:85:ba:e1:e1:6a:4d:b3:fe:2d:9e:
                    59:b1:8f:ee:9b:4b:78:43:e8:61:bd:a5:63:ed:ca:
                    c0:9a:a5:bc:5e:33:49:6b:a4:97:f7:03:ba:0a:59:
                    58:03:25:fd:b7:87:5c:07:cd:b8:8c:1c:44:68:02:
                    15:76:0b:89:3b:7f:f8:2e:cf:26:22:6a:13:13:2c:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:2F:68:BE:E4:9A:AB:1C:EF:F2:23:A0:46:62:5B:8C:B3:2C:32
            X509v3 Authority Key Identifier:
                keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:a4:ef:18:57:82:97:81:e4:f2:91:84:66:79:a3:72:f8:
         da:b1:59:0f:48:92:f2:c8:22:96:51:e3:62:27:d9:98:77:6e:
         b8:ff:6b:06:0c:78:bf:96:da:bd:4e:12:de:9d:f1:78:89:97:
         e5:1b:37:82:72:6b:6c:09:c3:09:01:08:c0:68:2b:0c:86:31:
         91:17:10:7e:be:f2:d2:b2:c1:db:a5:e9:6e:21:85:ae:a4:87:
         b0:4d:80:6b:b5:88:01:13:36:73:86:2a:a4:e9:fd:36:c8:e8:
         04:5c:99:c2:06:1e:c4:54:09:40:b3:99:88:5f:e9:d3:98:44:
         df:77:b7:40:3b:00:bc:a7:c0:e8:30:e9:94:85:0b:54:74:c3:
         e1:98:7d:0c:07:49:27:63:e8:9f:a1:24:c3:ac:29:84:b1:15:
         eb:b9:9f:3c:65:b6:00:0a:b8:bc:72:0d:29:e3:55:40:a8:bd:
         ba:7f:da:75:c8:82:d9:45:67:1b:4c:9b:df:6b:34:33:43:07:
         2d:ea:97:57:37:4e:b3:ba:25:ec:44:ec:a6:69:d5:5f:29:42:
         fb:fc:31:33:1b:98:d0:c1:67:70:d7:bc:5b:5d:e3:c8:40:4f:
         62:08:91:c4:a6:fe:eb:5e:e3:60:b0:c5:57:7e:fb:f0:9e:42:
         31:7c:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:40 2025 by rpki-client