Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
File:                     3136302e32322e362e302f32332d3233203d3e20313532373936.roa (raw, json)
Hash identifier:          MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=
Subject key identifier:   1F:2B:B5:4A:1B:3A:1F:03:76:4C:A6:5C:1F:7D:76:C3:16:35:11:75
Certificate issuer:       /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
Certificate serial:       307D58699DBB3281BF8CDAE758AE27D8FFB59BA5
Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
Signing time:             Thu 15 May 2025 05:00:02 +0000
ROA not before:           Thu 15 May 2025 04:55:02 +0000
ROA not after:            Thu 14 May 2026 05:00:02 +0000
asID:                     152796
IP address blocks:        160.22.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl
                          rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 20:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7d:58:69:9d:bb:32:81:bf:8c:da:e7:58:ae:27:d8:ff:b5:9b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D
        Validity
            Not Before: May 15 04:55:02 2025 GMT
            Not After : May 14 05:00:02 2026 GMT
        Subject: CN=1F2BB54A1B3A1F03764CA65C1F7D76C316351175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:ad:d2:39:ca:f9:61:9b:97:aa:6e:63:c4:
                    72:85:a1:f1:fb:3b:68:b1:69:ee:6e:4a:71:5a:aa:
                    ca:f7:ab:ae:37:78:f6:55:68:b1:9f:50:81:44:2f:
                    b1:9e:6b:1a:9f:91:3a:7b:31:31:a6:81:66:25:97:
                    40:93:98:65:ea:2a:71:42:fd:d2:87:f8:d7:29:a4:
                    47:6f:f8:7b:c7:d3:ac:f4:bb:3b:59:72:82:dd:e5:
                    ce:18:cd:5a:20:c9:74:33:21:b7:cc:af:46:9d:52:
                    73:96:2f:35:18:f2:9a:b1:a6:ec:76:22:53:dd:84:
                    f2:b7:97:67:d7:74:8b:8e:d9:02:6b:67:6e:69:c5:
                    ce:cc:4a:c6:9d:a0:d3:36:81:ca:2e:7b:3d:a4:a7:
                    90:b3:8d:f5:51:f7:26:a2:8e:d6:46:a0:63:e7:93:
                    8c:fd:6c:1a:d1:27:25:6d:d9:dc:ce:37:e8:f1:e0:
                    0f:f1:c8:40:fb:c1:a1:39:9b:d4:2c:50:fc:20:95:
                    ec:d8:06:38:73:c9:a4:85:e9:20:da:57:fa:36:8e:
                    c9:81:f7:5c:65:b2:b0:fb:b0:51:46:07:1b:7e:94:
                    82:b2:12:36:b7:67:a1:3e:55:a9:a3:77:dd:38:1c:
                    9e:6d:ff:24:f8:3a:7f:04:17:59:22:a5:33:27:d2:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:B5:4A:1B:3A:1F:03:76:4C:A6:5C:1F:7D:76:C3:16:35:11:75
            X509v3 Authority Key Identifier:
                keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8a:0b:70:84:01:36:7f:06:60:66:5a:ca:1b:49:2e:e5:97:
         66:f8:26:09:35:a5:be:8a:67:aa:98:db:71:41:74:f9:f4:14:
         1d:c2:d0:93:78:f4:9f:be:72:11:8f:1a:0f:69:2e:bb:16:c6:
         51:73:95:f6:d5:9d:07:db:fc:d9:74:12:bf:44:b5:7a:16:ad:
         90:e3:f5:e7:7d:09:85:44:78:fe:e9:88:06:7a:1e:bf:ae:b5:
         d3:2b:44:3e:12:02:48:be:89:e8:0a:eb:8c:7d:af:c4:be:d2:
         71:2f:13:be:c4:f3:de:62:47:e5:82:4a:86:77:36:15:ba:38:
         67:dd:e3:3b:5b:6a:06:15:fd:48:96:60:cd:25:d1:f6:26:80:
         bb:f1:dc:9b:33:40:ad:db:9c:5e:31:67:64:e2:0d:54:ae:57:
         04:7b:b6:69:b0:3f:a8:01:78:39:27:b0:aa:7d:c5:1b:b6:9e:
         95:f9:50:fb:1b:18:2c:dd:ef:b5:23:28:f1:cf:28:cc:38:18:
         90:5a:03:0c:61:23:bf:41:1f:84:8e:28:56:db:7b:ba:43:98:
         7f:03:29:78:ab:6a:3b:06:f2:28:da:b2:d0:93:ce:f4:e7:53:
         07:b9:ac:39:a9:1c:cd:5f:dc:3d:a1:fb:ef:f5:a3:59:39:7c:
         ee:7b:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:31 2025 by rpki-client