Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa
File:                     3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (raw, json)
Hash identifier:          YhpGgm+xvoxVoDALcvkrwsbfApeiUPYx93T/CtIGM2M=
Subject key identifier:   9B:6B:39:99:5A:84:62:3E:CB:75:05:F9:4F:EE:A3:55:51:DD:45:DD
Certificate issuer:       /CN=62DC4356F124B284CCF7683F293ACE03AA908BB4
Certificate serial:       60B8AC00E619AF269EC34007931567C6CE607B06
Authority key identifier: 62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa
Signing time:             Sun 03 May 2026 02:30:45 +0000
ROA not before:           Sun 03 May 2026 02:25:45 +0000
ROA not after:            Sun 02 May 2027 02:30:45 +0000
asID:                     153098
IP address blocks:        160.25.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.crl
                          rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b8:ac:00:e6:19:af:26:9e:c3:40:07:93:15:67:c6:ce:60:7b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DC4356F124B284CCF7683F293ACE03AA908BB4
        Validity
            Not Before: May  3 02:25:45 2026 GMT
            Not After : May  2 02:30:45 2027 GMT
        Subject: CN=9B6B39995A84623ECB7505F94FEEA35551DD45DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:6e:f6:e8:71:fa:96:7d:b1:0b:61:aa:5f:
                    bf:83:91:22:6e:40:c9:3f:1c:c4:a8:2e:db:bb:67:
                    cc:c2:a2:1e:37:5d:26:d7:63:9b:c6:f3:4a:c7:ca:
                    9f:05:5a:c5:b6:c2:bb:8d:66:0b:37:63:8e:6b:4a:
                    bf:fe:27:da:0d:87:1f:07:5e:e8:f4:a2:bf:a9:2c:
                    49:b5:45:8e:54:34:89:d8:bf:ba:e7:83:5e:18:f0:
                    12:7f:6b:c0:e8:b9:54:52:fa:b9:14:b0:ab:13:15:
                    5b:33:6d:04:56:b8:ea:d9:4a:f7:09:80:07:0d:a6:
                    c7:20:18:95:72:55:c0:3e:bc:aa:f9:51:dd:ac:49:
                    f6:da:54:fa:78:32:14:05:1b:44:d8:eb:98:be:9b:
                    67:d5:b0:89:01:a0:93:7d:a0:89:bb:d5:17:0b:60:
                    4e:66:e9:76:da:1e:53:09:c4:0e:62:b6:bb:a9:9e:
                    23:2d:ad:2b:6f:5d:6d:b5:7c:71:82:36:d3:5c:78:
                    2c:6d:98:5b:36:a5:56:cb:23:c6:83:10:9b:c6:6f:
                    91:f9:ce:db:68:d4:c6:1d:92:4e:e2:78:8b:9c:7f:
                    c8:24:60:c0:b6:1e:0a:49:d0:01:b0:3b:43:9a:6c:
                    5e:5e:3e:e2:ab:68:d6:c1:bd:c2:55:bb:53:ea:a0:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6B:39:99:5A:84:62:3E:CB:75:05:F9:4F:EE:A3:55:51:DD:45:DD
            X509v3 Authority Key Identifier:
                keyid:62:DC:43:56:F1:24:B2:84:CC:F7:68:3F:29:3A:CE:03:AA:90:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62DC4356F124B284CCF7683F293ACE03AA908BB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b1:31:98:42:7f:cd:c3:c8:2b:b0:00:11:ae:ca:4e:7d:f5:
         ab:c4:7a:1b:27:f0:8a:c9:9d:a2:af:ff:e3:9f:5d:5d:74:d2:
         7b:9d:61:40:b7:cb:8d:06:8c:07:96:03:35:a0:20:b5:77:bd:
         d6:c5:60:80:69:a8:7f:2d:53:1c:8f:86:aa:fa:03:fd:be:5e:
         84:19:2b:4b:c8:af:a3:01:7d:8b:58:a6:61:1e:4a:1c:0c:10:
         4b:1d:00:21:d7:97:a3:f7:87:c3:ae:73:f2:de:d5:e5:33:d1:
         78:22:8c:09:39:a0:2c:59:6b:8e:a8:5e:09:9c:a8:0a:6c:dc:
         4b:21:51:4f:d7:e6:13:3a:1b:27:ff:f1:8e:12:a5:9c:39:23:
         62:3d:c5:3e:f2:69:e7:6b:03:fa:16:10:c9:67:c4:71:cb:93:
         fe:b9:09:c4:e7:27:34:f8:2a:d2:b0:7a:ef:01:82:9e:28:25:
         96:c2:09:b1:cb:d9:60:38:2d:6f:c3:d9:23:92:00:5b:cf:14:
         0b:73:68:f9:38:f4:67:d9:f0:0a:2f:83:01:2d:ba:62:b8:97:
         60:91:f9:1c:7c:4c:75:44:56:73:82:b1:fd:74:d8:fa:0f:ac:
         cb:17:4c:0d:96:52:8d:1d:e8:12:76:66:37:55:32:9b:46:c3:
         d5:f2:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:29 2026 by rpki-client