Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
File:                     3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (raw, json)
Hash identifier:          n7MsU+NqSEfM83vem4uRyZBilJV0EOOi2kf/za1AxU8=
Subject key identifier:   77:F7:46:38:FC:44:5A:82:6A:F7:04:1A:21:74:F8:38:86:2A:78:ED
Certificate issuer:       /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
Certificate serial:       01EA95E005487FDFC0AE5F560811A38146852B70
Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa
Signing time:             Tue 03 Jun 2025 19:00:00 +0000
ROA not before:           Tue 03 Jun 2025 18:55:00 +0000
ROA not after:            Tue 02 Jun 2026 19:00:00 +0000
asID:                     152828
IP address blocks:        160.22.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl
                          rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ea:95:e0:05:48:7f:df:c0:ae:5f:56:08:11:a3:81:46:85:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1
        Validity
            Not Before: Jun  3 18:55:00 2025 GMT
            Not After : Jun  2 19:00:00 2026 GMT
        Subject: CN=77F74638FC445A826AF7041A2174F838862A78ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:f7:01:5f:bb:c5:ed:cb:22:5b:5b:de:cc:
                    4f:85:c3:5e:17:ee:e5:fa:91:a5:71:8d:74:e2:bb:
                    9a:2c:72:a5:e9:55:dd:32:4e:cd:06:a3:2c:e9:f3:
                    f2:05:21:76:28:9b:82:a9:43:38:d8:da:31:de:6f:
                    2e:c9:bf:bc:9f:08:01:46:c7:84:d4:1b:bc:e1:1f:
                    67:4c:02:ab:ef:93:13:94:e8:e0:6d:38:f3:01:83:
                    e9:3a:87:ca:b2:fc:e3:63:7b:88:49:0f:39:cb:51:
                    af:9c:77:f7:11:8e:84:39:c3:3e:85:de:82:4f:c1:
                    24:16:b8:64:7d:a5:69:51:aa:13:8e:12:5c:c5:c3:
                    d8:bc:55:18:bf:9e:ba:ca:9b:74:ca:87:99:1b:79:
                    b1:1a:88:10:88:87:3d:88:ec:d5:e4:5d:50:69:cf:
                    76:77:5f:4a:55:1e:ea:12:29:02:8a:f3:72:08:fd:
                    d2:e4:29:47:1f:fa:2e:31:d3:9a:90:7e:47:03:33:
                    15:83:dd:bc:e9:1b:57:86:ad:26:5d:1a:30:2f:4d:
                    e5:48:cb:7f:86:cc:fe:07:ee:8c:52:46:65:cc:86:
                    03:40:ec:2c:e8:0f:9c:71:16:91:94:9e:b2:99:f9:
                    cd:17:61:a2:ab:e6:26:83:ed:83:c0:80:2f:df:26:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:46:38:FC:44:5A:82:6A:F7:04:1A:21:74:F8:38:86:2A:78:ED
            X509v3 Authority Key Identifier:
                keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/3136302e32322e39362e302f32342d3234203d3e20313532383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:27:d9:d8:ab:f5:5d:08:1a:80:60:60:4e:c6:73:44:d0:
         3e:c8:a9:0f:f9:10:db:a9:ae:ad:c9:f5:a5:18:c4:24:ed:3f:
         39:9f:e7:5d:40:84:e9:92:3a:88:c2:8f:4d:ac:cd:1f:e1:42:
         d5:57:6f:85:f3:36:04:98:b2:a8:b8:24:d8:da:77:f0:22:ce:
         d3:93:d5:ba:cb:a4:85:e1:d8:82:c8:e2:6b:a1:22:08:de:0d:
         26:9f:03:85:4b:4c:b2:2f:d2:f7:15:8d:ce:45:d3:37:bb:b1:
         35:23:98:66:30:f4:d3:6b:d2:68:36:ad:43:7b:99:b6:b6:5a:
         89:42:2d:8c:93:1d:67:d7:20:3e:6f:63:a9:c4:42:a7:0e:9d:
         6d:b3:65:01:c0:1c:0b:12:11:2c:7f:47:36:80:71:20:6e:2d:
         20:06:34:9f:d6:db:5c:3f:2e:4f:43:99:5d:d3:0d:70:04:07:
         03:e2:6a:27:f3:a8:06:28:6e:1e:78:df:3b:23:13:68:f6:b6:
         32:ce:e4:9b:86:9a:12:e9:24:0a:29:85:f9:3a:7a:94:b8:dd:
         7f:c0:99:42:a8:4f:f6:47:68:7b:b2:ad:82:94:c8:fb:bc:64:
         2a:13:04:89:7b:b2:3b:e6:79:7a:30:03:44:07:52:c2:a3:24:
         c6:6d:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:29:41 2025 by rpki-client