Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33352e302f32342d3234203d3e20313532383331.roa
File:                     3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (raw, json)
Hash identifier:          xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=
Subject key identifier:   4A:A9:72:13:48:E6:74:86:A6:D0:B2:9C:EC:6E:14:99:A9:28:E3:7A
Certificate issuer:       /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8
Certificate serial:       553ECEC1CB96DA209F13135EE6E22EFDC7A447EF
Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33352e302f32342d3234203d3e20313532383331.roa
Signing time:             Tue 04 Feb 2025 16:32:37 +0000
ROA not before:           Tue 04 Feb 2025 16:27:37 +0000
ROA not after:            Tue 03 Feb 2026 16:32:37 +0000
asID:                     152831
IP address blocks:        160.25.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl
                          rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 03:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3e:ce:c1:cb:96:da:20:9f:13:13:5e:e6:e2:2e:fd:c7:a4:47:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8
        Validity
            Not Before: Feb  4 16:27:37 2025 GMT
            Not After : Feb  3 16:32:37 2026 GMT
        Subject: CN=4AA9721348E67486A6D0B29CEC6E1499A928E37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:19:62:32:ac:b3:71:1f:93:3f:4c:22:57:
                    f0:66:c3:da:26:e5:43:fa:3b:3a:52:86:50:62:6c:
                    11:44:a8:c0:93:5b:c1:5f:b0:06:b3:51:1b:05:09:
                    18:80:2c:17:b6:1d:b6:c9:83:dd:16:3e:7a:17:5b:
                    08:ff:d8:ac:6d:58:af:70:61:79:7a:08:c9:c6:ea:
                    2b:0d:73:97:07:b3:da:ed:3b:d0:58:02:4a:98:54:
                    ef:b6:75:9a:ef:81:f7:c5:98:d8:90:63:29:f1:e5:
                    3d:d8:b5:20:73:2d:c6:f6:ea:d2:88:da:e4:80:57:
                    47:89:a7:27:52:7f:66:0f:d4:44:d6:9e:f8:3c:22:
                    b1:ec:da:e4:00:8b:22:c0:a6:c4:06:5a:cd:a6:e5:
                    32:73:0b:7b:d9:37:80:55:f8:6c:48:e0:18:65:f3:
                    3f:ff:78:18:2e:44:4f:0c:fa:ba:4c:01:25:79:5a:
                    3a:9a:e2:68:a2:80:5a:f6:3e:27:26:70:6d:41:0c:
                    dc:63:63:66:77:ef:fb:03:81:e9:a6:83:e9:12:ec:
                    6b:19:ab:e1:b7:79:70:7b:9d:ce:bc:7a:9d:1f:66:
                    2d:3f:28:ec:fd:8a:ac:f3:77:3d:0f:28:29:7f:f0:
                    c8:07:e1:88:66:5f:0f:4c:9f:23:68:22:f5:3e:75:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A9:72:13:48:E6:74:86:A6:D0:B2:9C:EC:6E:14:99:A9:28:E3:7A
            X509v3 Authority Key Identifier:
                keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33352e302f32342d3234203d3e20313532383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:84:2d:76:d0:cb:e3:2a:47:d9:aa:4e:66:5d:4c:e0:70:
         f7:de:0f:eb:95:30:41:d3:62:23:0e:3c:0a:0a:e0:f8:fa:3e:
         30:e8:39:2b:72:4c:7f:41:30:c7:66:47:3b:14:d1:cc:cf:df:
         f4:9b:58:e3:19:1d:1b:2e:04:4d:39:02:a1:90:cf:54:50:5a:
         25:f8:ba:b3:91:94:3c:32:dc:24:cd:a4:65:ee:c8:7f:c7:12:
         30:8b:e5:94:76:e8:95:73:a0:72:a9:72:4b:47:91:9c:08:3d:
         bb:7e:b2:23:33:f6:f1:06:1e:79:f9:ed:4d:f1:d2:8b:8f:d6:
         38:8f:f0:98:ed:78:a2:66:59:bf:9f:2b:3c:65:71:70:e3:d2:
         9c:9b:a0:82:06:81:e5:2c:95:12:66:95:e8:25:27:97:f3:8e:
         fb:10:fd:41:c7:90:94:17:7a:3f:bb:82:1d:b1:75:96:3a:1a:
         87:81:08:f6:f4:4f:dd:63:e4:96:8a:63:25:68:d7:af:f6:a3:
         0b:4f:a0:8e:69:07:0d:60:da:46:1c:77:8c:31:cb:b1:75:77:
         21:32:bf:49:76:ba:19:2d:57:1b:0b:3e:7f:76:48:7f:cd:bb:
         2e:5a:af:d7:8d:fe:3c:52:e0:1c:dc:bf:a9:72:ac:1e:25:25:
         a2:05:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:30 2025 by rpki-client on console.sobornost.net