Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
File:                     3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (raw, json)
Hash identifier:          yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=
Subject key identifier:   10:84:F6:D9:C6:AE:BB:DC:4D:00:0C:7B:4D:03:BE:48:A0:BB:41:23
Certificate issuer:       /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
Certificate serial:       5925AA2BB4A29B362A626DB807FA9C2E9742379F
Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
Signing time:             Mon 23 Jun 2025 15:00:02 +0000
ROA not before:           Mon 23 Jun 2025 14:55:02 +0000
ROA not after:            Mon 22 Jun 2026 15:00:02 +0000
asID:                     153064
IP address blocks:        160.25.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl
                          rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 11:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:25:aa:2b:b4:a2:9b:36:2a:62:6d:b8:07:fa:9c:2e:97:42:37:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E
        Validity
            Not Before: Jun 23 14:55:02 2025 GMT
            Not After : Jun 22 15:00:02 2026 GMT
        Subject: CN=1084F6D9C6AEBBDC4D000C7B4D03BE48A0BB4123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:5b:42:36:f4:4e:d7:1d:a1:24:83:c3:a8:
                    e2:6d:cf:5d:1f:bd:e0:69:be:eb:35:0a:60:68:36:
                    40:4a:63:8d:0f:a9:b3:22:66:91:fc:2d:0c:a2:9c:
                    ee:07:48:da:31:2e:7f:a0:62:39:c4:9a:a5:75:1f:
                    d8:6c:2c:80:b8:12:9c:19:9e:0c:3c:66:7b:87:07:
                    c3:9d:f6:7d:a2:e2:6e:a7:aa:6c:76:58:2b:9e:04:
                    19:26:48:97:89:24:7b:94:aa:b2:0c:3b:11:96:46:
                    e6:99:3c:81:56:ed:23:54:db:b8:d2:29:d1:1a:dc:
                    cd:57:b6:68:b3:5e:80:cb:1c:c0:f1:33:1b:07:88:
                    1f:96:81:98:95:97:24:72:9c:ee:86:e2:9b:35:9a:
                    36:a5:35:04:bb:5a:18:ed:1a:74:0d:17:47:34:5b:
                    e1:23:c1:ab:88:9d:84:8f:8c:3f:97:a4:bc:69:bc:
                    39:32:7d:1a:1f:1e:1e:87:2e:26:fa:af:37:fb:a7:
                    b5:18:80:4f:ad:da:0c:f7:ad:9c:b8:6f:ba:4e:b3:
                    a3:e5:64:67:e6:17:89:25:30:5e:e0:a3:a7:9b:3e:
                    b0:05:a3:20:9b:84:1f:32:06:28:99:87:9a:4a:37:
                    29:36:21:86:dd:f4:95:ca:54:bc:7d:10:cf:1a:0f:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:F6:D9:C6:AE:BB:DC:4D:00:0C:7B:4D:03:BE:48:A0:BB:41:23
            X509v3 Authority Key Identifier:
                keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:f5:c2:f3:df:9b:64:f6:ab:35:10:2d:88:6c:38:32:c6:
         01:ec:73:28:b2:65:ad:d7:5b:a6:7f:80:c6:29:53:17:fa:16:
         ec:9a:0d:11:e8:b2:c1:e7:24:83:0d:47:48:81:bd:f6:f3:f0:
         0a:2c:c2:b7:49:fc:3c:7f:7a:ce:d1:10:b0:93:d7:4c:5b:53:
         5e:79:cc:6f:d1:38:22:76:2c:2f:53:2f:a3:bb:fd:4f:cb:0f:
         75:17:e0:50:2a:99:99:d3:71:29:24:06:36:24:f3:3b:82:00:
         cc:d2:aa:ae:5c:c4:ed:94:78:6b:73:2b:bc:05:9b:e8:17:75:
         d8:60:34:55:be:bb:95:38:0a:79:7a:82:ea:94:69:b3:dd:2e:
         f1:c2:0d:15:83:74:ba:d5:8a:dc:3d:90:73:37:95:b3:39:85:
         a3:00:23:fe:17:14:d8:56:e6:4c:99:13:6d:10:00:77:c8:67:
         d2:16:22:5c:a5:6e:32:a0:38:58:17:11:f7:1f:ca:1f:d7:6a:
         51:d2:1b:df:10:a1:8f:c5:2b:af:19:c5:4c:f3:e4:8f:be:f9:
         fa:c3:83:ee:c4:32:fe:ed:4b:73:c7:0a:6e:1e:c5:c9:3b:a3:
         9a:d9:19:97:eb:a0:4b:97:31:be:66:53:7a:52:9f:84:2a:ad:
         12:fc:9b:8a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWSWqK7SimzYqYm24B/qcLpdCN58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3
NEU1NjQzRTAeFw0yNTA2MjMxNDU1MDJaFw0yNjA2MjIxNTAwMDJaMDMxMTAvBgNV
BAMTKDEwODRGNkQ5QzZBRUJCREM0RDAwMEM3QjREMDNCRTQ4QTBCQjQxMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkltCNvRO1x2hJIPDqOJtz10f
veBpvus1CmBoNkBKY40PqbMiZpH8LQyinO4HSNoxLn+gYjnEmqV1H9hsLIC4EpwZ
ngw8ZnuHB8Od9n2i4m6nqmx2WCueBBkmSJeJJHuUqrIMOxGWRuaZPIFW7SNU27jS
KdEa3M1XtmizXoDLHMDxMxsHiB+WgZiVlyRynO6G4ps1mjalNQS7WhjtGnQNF0c0
W+EjwauInYSPjD+XpLxpvDkyfRofHh6HLib6rzf7p7UYgE+t2gz3rZy4b7pOs6Pl
ZGfmF4klMF7go6ebPrAFoyCbhB8yBiiZh5pKNyk2IYbd9JXKVLx9EM8aD+MlAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEIT22cauu9xNAAx7TQO+SKC7QSMwHwYDVR0j
BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5
RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1
NjQzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NjgyYmYyLTA2MzQtNDc4Mi1h
NWFmLWVlYjkxOWYxOTE0My8wLzMxMzYzMDJlMzIzNTJlMzQzODJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMzMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZMDANBgkqhkiG
9w0BAQsFAAOCAQEAgjz1wvPfm2T2qzUQLYhsODLGAexzKLJlrddbpn+AxilTF/oW
7JoNEeiyweckgw1HSIG99vPwCizCt0n8PH96ztEQsJPXTFtTXnnMb9E4InYsL1Mv
o7v9T8sPdRfgUCqZmdNxKSQGNiTzO4IAzNKqrlzE7ZR4a3MrvAWb6Bd12GA0Vb67
lTgKeXqC6pRps90u8cINFYN0utWK3D2QczeVszmFowAj/hcU2FbmTJkTbRAAd8hn
0hYiXKVuMqA4WBcR9x/KH9dqUdIb3xChj8UrrxnFTPPkj775+sOD7sQy/u1Lc8cK
bh7FyTujmtkZl+ugS5cxvmZTelKfhCqtEvybig==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:05:04 2025 by rpki-client