Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa
File:                     3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (raw, json)
Hash identifier:          f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=
Subject key identifier:   41:E8:41:93:A7:0D:AB:39:2E:27:45:18:07:33:2B:0B:78:EC:43:7D
Certificate issuer:       /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Certificate serial:       2FF57549734A082BF712EAD31AF96D8D6BC643BF
Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa
Signing time:             Thu 17 Jul 2025 06:00:01 +0000
ROA not before:           Thu 17 Jul 2025 05:55:01 +0000
ROA not after:            Thu 16 Jul 2026 06:00:01 +0000
asID:                     152377
IP address blocks:        157.15.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
                          rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 03:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f5:75:49:73:4a:08:2b:f7:12:ea:d3:1a:f9:6d:8d:6b:c6:43:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
        Validity
            Not Before: Jul 17 05:55:01 2025 GMT
            Not After : Jul 16 06:00:01 2026 GMT
        Subject: CN=41E84193A70DAB392E27451807332B0B78EC437D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:64:b5:41:0e:b7:93:67:58:cc:87:fc:39:
                    a0:c0:41:9c:eb:17:ab:d8:32:25:8d:21:bb:78:ae:
                    b5:b2:b1:c8:1e:bf:01:2f:cf:6f:d3:c4:1c:89:3d:
                    a1:72:c4:a7:6e:cf:5e:31:f8:30:c7:fa:27:1d:a4:
                    49:44:f1:0f:53:9b:91:53:25:d4:61:7d:ad:de:33:
                    c5:ba:7b:83:b8:5c:66:3b:13:99:43:21:42:d1:fa:
                    cd:33:64:08:e2:36:a5:ea:10:c2:f6:01:16:6b:ee:
                    20:e6:09:2b:3a:a3:da:f6:ad:26:d4:c0:04:6a:9d:
                    8d:db:5c:9a:2b:7f:2c:54:f6:f2:54:3c:8c:83:bd:
                    f7:6b:fa:28:d3:19:24:91:69:bb:9d:4c:06:09:21:
                    6a:50:8d:b8:20:b4:49:bb:57:f5:0d:e4:17:bc:ac:
                    ab:0a:ad:8f:61:b4:39:92:d9:8c:f6:af:68:90:48:
                    4b:67:2b:7d:49:ef:fc:ca:96:cc:68:73:09:17:2a:
                    5b:24:89:15:66:d7:1c:d5:53:fa:32:36:50:30:91:
                    54:95:0e:fd:40:a9:9d:20:ae:7a:e9:bb:e7:12:a7:
                    41:a2:ab:c2:34:bb:ad:02:eb:7f:ec:02:80:6e:ad:
                    d5:ca:23:17:12:61:d2:bc:ea:f7:60:f8:21:cb:58:
                    f0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:41:93:A7:0D:AB:39:2E:27:45:18:07:33:2B:0B:78:EC:43:7D
            X509v3 Authority Key Identifier:
                keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:87:2c:06:07:a6:19:f1:e8:51:c6:12:92:fc:56:4f:55:
         9e:38:55:56:25:fe:17:03:f3:91:9f:0a:dd:b5:9b:f6:63:6b:
         1d:1d:c5:8c:a2:6a:f8:4c:54:ee:11:c2:c1:ce:e4:c6:86:23:
         31:b3:cd:01:84:0b:be:90:11:0a:42:a6:df:f0:4b:46:02:4f:
         e0:b7:2d:ba:2d:e3:81:59:e8:63:25:72:24:4d:f6:70:fa:fd:
         69:55:1c:f5:c1:4d:c3:ad:4a:b4:17:52:83:80:a4:8c:e8:f0:
         54:53:03:c3:04:99:fc:b9:a5:b7:19:b7:9d:d1:d2:b3:59:25:
         07:aa:ef:fa:96:dc:4d:95:bc:7e:79:8a:2e:78:70:de:be:63:
         15:58:40:90:f5:4f:6c:a0:2b:41:2b:dd:15:52:31:56:5e:4e:
         f6:6b:8c:5b:e8:ba:af:da:24:0b:2a:3c:8a:17:f6:ff:80:64:
         67:cc:7d:e3:41:08:2d:7b:51:58:cb:5f:be:60:e3:76:53:f9:
         5c:11:85:b8:97:75:34:ff:7a:15:9c:cb:58:1e:83:6d:53:5c:
         1f:0d:c1:8c:17:77:f5:b1:47:94:79:f8:2c:cb:29:26:ef:29:
         62:28:c7:8c:75:b0:96:d6:2a:76:1c:06:f3:0f:f8:48:5c:00:
         0c:61:de:8e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUL/V1SXNKCCv3EurTGvltjWvGQ78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx
NTYzRjY3QjAeFw0yNTA3MTcwNTU1MDFaFw0yNjA3MTYwNjAwMDFaMDMxMTAvBgNV
BAMTKDQxRTg0MTkzQTcwREFCMzkyRTI3NDUxODA3MzMyQjBCNzhFQzQzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaGS1QQ63k2dYzIf8OaDAQZzr
F6vYMiWNIbt4rrWyscgevwEvz2/TxByJPaFyxKduz14x+DDH+icdpElE8Q9Tm5FT
JdRhfa3eM8W6e4O4XGY7E5lDIULR+s0zZAjiNqXqEML2ARZr7iDmCSs6o9r2rSbU
wARqnY3bXJorfyxU9vJUPIyDvfdr+ijTGSSRabudTAYJIWpQjbggtEm7V/UN5Be8
rKsKrY9htDmS2Yz2r2iQSEtnK31J7/zKlsxocwkXKlskiRVm1xzVU/oyNlAwkVSV
Dv1AqZ0grnrpu+cSp0Giq8I0u60C63/sAoBurdXKIxcSYdK86vdg+CHLWPDTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQehBk6cNqzkuJ0UYBzMrC3jsQ30wHwYDVR0j
BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB
N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz
RjY3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NGU4NzlmLTNhNTYtNGQ4ZC04
M2U4LTBlOWNjNjU3NzBlYS8wLzMxMzUzNzJlMzEzNTJlMzYzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDMxMzUzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PQjANBgkqhkiG
9w0BAQsFAAOCAQEAOhmHLAYHphnx6FHGEpL8Vk9VnjhVViX+FwPzkZ8K3bWb9mNr
HR3FjKJq+ExU7hHCwc7kxoYjMbPNAYQLvpARCkKm3/BLRgJP4Lctui3jgVnoYyVy
JE32cPr9aVUc9cFNw61KtBdSg4CkjOjwVFMDwwSZ/Lmltxm3ndHSs1klB6rv+pbc
TZW8fnmKLnhw3r5jFVhAkPVPbKArQSvdFVIxVl5O9muMW+i6r9okCyo8ihf2/4Bk
Z8x940EILXtRWMtfvmDjdlP5XBGFuJd1NP96FZzLWB6DbVNcHw3BjBd39bFHlHn4
LMspJu8pYijHjHWwltYqdhwG8w/4SFwADGHejg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:09:50 2025 by rpki-client