Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
File:                     3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (raw, json)
Hash identifier:          X+J06+s9GFmOyzL8tq52i7jtkOJP8+Epb+CH1drPU9k=
Subject key identifier:   25:8E:64:73:60:F6:08:C0:23:65:3A:89:B6:C5:81:29:09:46:1F:5A
Certificate issuer:       /CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Certificate serial:       7D4B8991305731F51D5C4A2E9BD39398A309DFCB
Authority key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa
Signing time:             Sun 03 May 2026 02:15:38 +0000
ROA not before:           Sun 03 May 2026 02:10:38 +0000
ROA not after:            Sun 02 May 2027 02:15:38 +0000
asID:                     152800
IP address blocks:        160.22.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
                          rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4b:89:91:30:57:31:f5:1d:5c:4a:2e:9b:d3:93:98:a3:09:df:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
        Validity
            Not Before: May  3 02:10:38 2026 GMT
            Not After : May  2 02:15:38 2027 GMT
        Subject: CN=258E647360F608C023653A89B6C5812909461F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:1d:5d:61:af:5f:8c:4c:fa:67:bf:d0:b2:
                    e3:87:7b:d6:a2:db:25:32:0a:18:09:4e:e9:ef:f5:
                    7d:46:62:52:5e:66:17:4c:db:f2:4e:54:cd:89:1f:
                    4c:e0:f0:4d:26:80:48:bd:3b:c4:77:ce:9f:c8:f2:
                    a8:31:29:24:cc:d5:03:06:cc:2e:6f:45:1d:4c:0f:
                    cc:7e:d9:d7:ee:07:3b:dd:01:68:b7:a4:04:9d:d6:
                    3c:56:34:99:4c:0c:43:6f:06:2d:d3:fd:7e:f4:a2:
                    38:46:ad:64:df:79:d9:d2:a3:29:c2:b3:df:af:45:
                    63:75:a2:f1:95:fe:29:0e:02:4b:c6:f1:b4:f2:43:
                    6b:9e:af:87:a5:79:ad:38:01:24:af:29:1c:43:2f:
                    63:a7:4b:91:b5:4f:e2:ea:b8:8f:97:c3:2d:d9:5b:
                    cd:e4:37:2c:5c:c9:c5:5f:10:0f:1e:8f:06:72:a7:
                    11:95:10:d5:5d:9f:af:d5:6e:e0:a5:5c:87:1a:f1:
                    b1:b3:c0:75:c3:53:8d:fe:07:38:45:32:14:94:34:
                    6d:15:88:83:1f:83:0f:f6:d3:ba:3e:80:00:34:76:
                    2f:80:ad:60:1f:fe:e8:6a:fa:11:2b:9f:9d:9e:0f:
                    b3:33:ce:96:7c:e5:27:de:05:a5:58:50:4e:cb:63:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:64:73:60:F6:08:C0:23:65:3A:89:B6:C5:81:29:09:46:1F:5A
            X509v3 Authority Key Identifier:
                keyid:6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/3136302e32322e32352e302f32342d3234203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:71:2b:95:d1:94:f3:02:59:06:b7:fe:e6:a6:3c:1a:c6:
         cd:c1:8e:0c:0a:21:88:eb:16:c7:27:eb:e8:46:9f:5e:ce:34:
         a3:bc:b3:ed:1c:a6:50:ea:aa:e0:06:ec:6f:6a:83:e9:7b:2b:
         17:8b:10:83:ac:50:fa:98:2d:25:99:d8:59:75:fd:9d:59:5a:
         d2:9c:18:ae:76:dc:58:f8:74:df:e9:02:13:96:2d:69:c3:c8:
         ec:b2:54:42:e0:79:0e:ad:7d:91:c0:40:03:63:7f:80:74:ab:
         fa:71:49:8a:1a:e5:8f:bf:33:53:81:2e:94:45:50:94:02:db:
         34:78:e3:60:9c:cd:ad:ef:0c:ab:2b:27:33:d9:8e:20:41:ef:
         a4:18:09:ec:3f:b0:69:77:79:99:6e:ba:bd:78:c8:f9:76:00:
         17:11:c7:2f:fa:3b:2d:c3:11:c0:5f:78:8f:a4:72:f9:f7:30:
         16:3c:16:29:b5:37:30:b3:c7:39:52:4e:d6:da:aa:2e:e0:b1:
         65:40:ca:4a:0d:21:ab:b1:6d:65:31:88:dc:1a:aa:fa:09:1f:
         e1:dc:29:76:4d:36:50:ec:68:cc:ed:98:68:8c:b1:f9:8a:8e:
         9d:7d:c4:c8:95:e0:3e:f4:0f:50:3b:1a:44:6e:5a:d2:ba:8e:
         39:24:da:2b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfUuJkTBXMfUdXEoum9OTmKMJ38swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGQjkwMEVERUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUy
RDJDN0QyMDAeFw0yNjA1MDMwMjEwMzhaFw0yNzA1MDIwMjE1MzhaMDMxMTAvBgNV
BAMTKDI1OEU2NDczNjBGNjA4QzAyMzY1M0E4OUI2QzU4MTI5MDk0NjFGNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0B1dYa9fjEz6Z7/QsuOHe9ai
2yUyChgJTunv9X1GYlJeZhdM2/JOVM2JH0zg8E0mgEi9O8R3zp/I8qgxKSTM1QMG
zC5vRR1MD8x+2dfuBzvdAWi3pASd1jxWNJlMDENvBi3T/X70ojhGrWTfednSoynC
s9+vRWN1ovGV/ikOAkvG8bTyQ2uer4elea04ASSvKRxDL2OnS5G1T+LquI+Xwy3Z
W83kNyxcycVfEA8ejwZypxGVENVdn6/VbuClXIca8bGzwHXDU43+BzhFMhSUNG0V
iIMfgw/207o+gAA0di+ArWAf/uhq+hErn52eD7MzzpZ85SfeBaVYUE7LY1oVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJY5kc2D2CMAjZTqJtsWBKQlGH1owHwYDVR0j
BBgwFoAUb/uQDt6uhGkmTDIAaDRS9S0sfSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzAvNkZGQjkwMEVE
RUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUyRDJDN0QyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RkZCOTAwRURFQUU4NDY5MjY0QzMyMDA2ODM0NTJGNTJEMkM3
RDIwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2ZGEwZTgyLTA3NjQtNDVkMy1h
ZWQ5LWZkMjU4ZTcyYjZlMi8wLzMxMzYzMDJlMzIzMjJlMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWGTANBgkqhkiG
9w0BAQsFAAOCAQEAK+VxK5XRlPMCWQa3/uamPBrGzcGODAohiOsWxyfr6EafXs40
o7yz7RymUOqq4Absb2qD6XsrF4sQg6xQ+pgtJZnYWXX9nVla0pwYrnbcWPh03+kC
E5YtacPI7LJUQuB5Dq19kcBAA2N/gHSr+nFJihrlj78zU4EulEVQlALbNHjjYJzN
re8MqysnM9mOIEHvpBgJ7D+waXd5mW66vXjI+XYAFxHHL/o7LcMRwF94j6Ry+fcw
FjwWKbU3MLPHOVJO1tqqLuCxZUDKSg0hq7FtZTGI3Bqq+gkf4dwpdk02UOxozO2Y
aIyx+YqOnX3EyJXgPvQPUDsaRG5a0rqOOSTaKw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:37 2026 by rpki-client