Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35322e302f32342d3234203d3e20313533303738.roa
File:                     3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (raw, json)
Hash identifier:          ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=
Subject key identifier:   0E:04:44:BF:20:C2:C3:1D:20:E8:BE:B7:3C:B0:45:DD:09:2E:16:31
Certificate issuer:       /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
Certificate serial:       2AF3BA3F56B7F649CC18609E80958244EAD605CA
Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35322e302f32342d3234203d3e20313533303738.roa
Signing time:             Thu 31 Jul 2025 13:00:01 +0000
ROA not before:           Thu 31 Jul 2025 12:55:01 +0000
ROA not after:            Thu 30 Jul 2026 13:00:01 +0000
asID:                     153078
IP address blocks:        160.25.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl
                          rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 10:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:ba:3f:56:b7:f6:49:cc:18:60:9e:80:95:82:44:ea:d6:05:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF
        Validity
            Not Before: Jul 31 12:55:01 2025 GMT
            Not After : Jul 30 13:00:01 2026 GMT
        Subject: CN=0E0444BF20C2C31D20E8BEB73CB045DD092E1631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:0b:30:2d:ba:a2:a9:8a:df:89:5e:95:9c:
                    1f:2e:c9:f5:97:27:bc:83:d3:4a:a7:1f:1d:ca:c6:
                    ee:29:7b:b9:2f:a3:9b:5e:b0:d1:15:55:92:ef:f9:
                    4d:77:4d:8d:89:15:2a:5d:72:12:3c:6c:11:b3:96:
                    c1:bb:8b:75:2a:fb:b3:74:dd:79:bd:67:c3:a9:74:
                    64:bc:08:b8:cc:0e:89:db:ea:07:0c:fb:94:97:d7:
                    55:c4:b3:f1:80:c8:ec:c7:ff:41:85:56:ac:72:5b:
                    1d:8f:b6:a1:ce:f1:3b:98:5a:32:79:a7:dc:6a:6e:
                    7f:63:d5:fc:c3:23:5a:21:21:2b:a6:73:0a:2f:8b:
                    1e:42:39:5a:a1:72:c8:8e:c2:1b:81:38:ec:ca:bc:
                    93:8a:90:75:87:66:d7:d9:48:4b:8a:7a:2f:96:eb:
                    4c:fd:3a:e2:4a:3f:68:d5:8c:af:6f:31:8f:42:f7:
                    62:67:eb:d1:93:0a:c7:12:f8:8b:2b:b5:89:e6:c3:
                    50:9f:6d:3f:6e:20:30:25:48:14:70:b4:f6:a0:43:
                    2d:49:13:e7:c2:a2:a4:fa:be:bd:a4:40:c0:b9:c2:
                    10:36:5e:fb:bd:b3:c0:f1:52:79:87:85:67:be:26:
                    a0:44:95:c6:e5:a9:27:d0:15:57:65:46:61:65:4e:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:44:BF:20:C2:C3:1D:20:E8:BE:B7:3C:B0:45:DD:09:2E:16:31
            X509v3 Authority Key Identifier:
                keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35322e302f32342d3234203d3e20313533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:bf:78:b2:f3:cd:95:1e:ed:a5:20:ef:3e:6f:44:ed:1b:
         fb:0f:a2:a7:dd:43:1e:5b:45:4c:43:0d:41:44:a3:9f:96:76:
         a9:e1:b8:0c:b5:86:f6:1a:66:58:b9:de:6d:26:fd:02:74:55:
         d0:e9:a5:06:63:d5:3a:25:ae:72:ff:03:cb:aa:f8:01:93:aa:
         48:eb:d2:4b:cc:bd:d8:33:35:4d:40:de:ed:6c:75:90:53:4b:
         e2:b7:08:ca:a2:fc:55:a3:da:c3:ac:b0:13:e4:a3:ed:77:77:
         f2:80:1c:17:b6:84:17:95:27:73:6d:3c:b8:32:49:82:3a:66:
         c2:d5:c5:57:0f:00:ae:8b:e3:d9:94:26:72:3c:1e:2b:35:e1:
         50:1a:1e:98:b2:88:53:22:14:7e:b1:d5:04:53:6a:71:5f:63:
         87:c0:4d:70:68:01:ce:2f:7d:a1:39:0f:78:b4:ea:db:6c:9c:
         03:11:9b:b6:a0:a6:01:cb:8c:a5:c4:6f:7c:48:3a:af:94:6e:
         78:69:00:a1:3d:13:d9:45:85:2e:e7:5e:49:e9:f5:83:a2:6e:
         54:a3:62:79:5c:99:85:0b:aa:94:62:93:15:29:18:1b:98:e8:
         28:6b:36:36:43:c9:1a:78:5e:41:66:63:74:02:b7:96:d7:65:
         ff:db:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:23 2025 by rpki-client