Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
File:                     3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (raw, json)
Hash identifier:          80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=
Subject key identifier:   3C:26:0E:97:D7:3F:8D:D4:5A:E6:9A:42:21:29:F4:1D:AF:3E:36:1D
Certificate issuer:       /CN=22476F90C7B08131974F5B19834906C325ABEF12
Certificate serial:       51AD0DF1C3B276B8F011BE4BB685C4DB10ABDD23
Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
Signing time:             Mon 11 Aug 2025 11:54:30 +0000
ROA not before:           Mon 11 Aug 2025 11:49:30 +0000
ROA not after:            Mon 10 Aug 2026 11:54:30 +0000
asID:                     151576
IP address blocks:        160.25.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl
                          rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 21:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ad:0d:f1:c3:b2:76:b8:f0:11:be:4b:b6:85:c4:db:10:ab:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12
        Validity
            Not Before: Aug 11 11:49:30 2025 GMT
            Not After : Aug 10 11:54:30 2026 GMT
        Subject: CN=3C260E97D73F8DD45AE69A422129F41DAF3E361D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:b4:13:77:c1:8d:4c:e2:45:ba:1e:b4:85:
                    b2:ac:e6:d8:61:f7:f9:6c:b1:c1:17:b2:8c:59:50:
                    7b:0b:a7:00:2c:88:82:36:40:f0:bd:0d:80:28:c7:
                    71:5b:09:47:b0:c5:ba:c8:85:3d:cb:5c:5f:a2:72:
                    37:6b:74:b9:d2:ee:c9:b5:48:1f:d3:f0:ae:ea:4a:
                    16:a0:bf:19:ef:e0:95:da:21:24:5f:b2:c8:6a:ce:
                    8d:43:f8:f3:d9:6d:3a:52:92:4a:f5:bf:4e:0a:e8:
                    50:cd:a9:57:67:55:95:b8:70:68:7b:42:dc:ce:10:
                    92:c9:9a:91:2d:fd:71:f8:35:b4:02:31:34:de:9f:
                    b7:89:fc:68:05:c1:6b:2a:cc:6c:8a:bd:f8:43:61:
                    63:f0:13:fb:50:7c:fa:cd:00:b3:14:65:b5:b0:9a:
                    78:78:b8:94:3e:ff:94:ce:3f:8d:0e:20:75:b8:9d:
                    81:31:50:e7:a7:9f:eb:e5:71:76:5b:da:73:82:96:
                    86:a0:46:55:48:b3:7e:8d:6e:b1:b0:3b:83:36:24:
                    9e:9d:ba:03:67:fb:ee:07:8b:40:b2:81:91:e5:bc:
                    18:21:fb:2c:81:eb:73:03:f1:aa:ad:c6:e6:e9:8b:
                    9c:1a:28:1b:13:52:97:d2:d9:07:33:da:d2:77:1c:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:0E:97:D7:3F:8D:D4:5A:E6:9A:42:21:29:F4:1D:AF:3E:36:1D
            X509v3 Authority Key Identifier:
                keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:99:28:69:fd:ea:60:b0:0b:0a:1a:bf:b1:6a:a8:ed:61:4d:
         c0:11:28:c4:10:c7:e5:6e:a1:e5:35:d6:40:69:f7:d4:ed:04:
         01:13:c6:ac:96:cf:2b:42:13:48:e9:d6:52:01:e9:9c:b9:01:
         d1:fd:0c:29:79:ad:ed:7f:9c:d0:64:f2:93:f9:cf:3b:43:87:
         af:89:e7:54:16:9c:9a:fc:dd:0b:bb:7b:8d:44:ee:c2:c9:87:
         17:c1:a0:b3:6c:b7:59:e4:3a:27:5f:b8:46:22:5f:05:0c:1b:
         7f:50:2d:e5:7f:ba:84:c5:3e:50:71:e4:a7:e2:71:1a:21:8b:
         26:2b:ba:91:80:b4:f0:40:41:c8:3c:ed:b0:1a:14:95:3f:a4:
         c9:f5:f8:70:96:d6:f2:d9:10:54:49:fc:79:bc:1b:45:d5:35:
         e9:fc:0e:48:ba:dd:c2:8a:c8:26:a4:d3:8c:87:d1:e4:8d:27:
         64:d9:eb:14:b1:7b:78:e7:ed:e4:09:ef:ce:01:8c:80:56:64:
         f1:61:7b:d5:f0:11:7d:20:cf:22:ea:d2:a6:ac:b0:10:1e:b5:
         c5:82:cc:23:27:b7:11:b8:94:93:06:45:51:85:03:a1:50:01:
         cf:c1:af:f7:43:05:76:f7:af:0a:9e:6d:82:03:92:ca:b0:4a:
         bc:d0:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:03 2025 by rpki-client