Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
File:                     3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=
Subject key identifier:   8E:DA:F0:F7:54:86:D6:AB:2B:D3:F7:09:C0:E8:13:04:22:23:49:AC
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       0DD5C0CE1EB51825053FD554B9D0EEFAE414FB2C
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
Signing time:             Mon 06 Oct 2025 15:00:01 +0000
ROA not before:           Mon 06 Oct 2025 14:55:01 +0000
ROA not after:            Mon 05 Oct 2026 15:00:01 +0000
asID:                     140469
IP address blocks:        202.57.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 00:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:c0:ce:1e:b5:18:25:05:3f:d5:54:b9:d0:ee:fa:e4:14:fb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Oct  6 14:55:01 2025 GMT
            Not After : Oct  5 15:00:01 2026 GMT
        Subject: CN=8EDAF0F75486D6AB2BD3F709C0E81304222349AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:d0:2b:60:37:f9:f1:ad:b3:d0:69:c4:9d:
                    30:56:ea:5e:a2:f0:18:58:53:a8:b5:45:55:b4:c9:
                    2f:24:cb:e1:56:05:43:9a:20:90:eb:98:e9:78:f7:
                    c9:91:66:91:48:2a:1e:34:04:fb:84:f1:35:c8:86:
                    da:af:c7:25:8d:14:a8:67:c7:52:f3:2d:cb:aa:33:
                    7c:bc:d3:b9:cc:91:8d:c6:be:c8:6f:7e:52:39:56:
                    9c:a6:87:fd:a7:94:18:79:6d:cf:03:1c:27:0e:1d:
                    b9:88:cf:4f:ac:46:23:ec:7e:a1:4d:bf:18:8e:19:
                    c0:5a:b0:62:96:f4:b8:73:f1:56:5d:30:13:2e:0a:
                    27:41:96:93:5d:a4:78:a0:46:14:82:ef:6e:ec:b4:
                    4e:7a:8a:1c:0a:2e:55:af:df:f5:6e:f1:8b:2b:59:
                    06:63:4e:94:62:98:49:20:df:d4:a2:f0:58:7b:a7:
                    ad:7a:9c:0f:35:b5:e3:e2:60:f4:01:86:6c:d7:8f:
                    f7:91:42:0d:06:39:64:f4:3f:68:76:7d:b0:3c:31:
                    ee:f6:82:49:fc:eb:78:d3:a6:85:f3:c4:0f:63:c9:
                    7e:5c:f1:d3:df:2a:9b:e5:01:54:61:9e:97:7b:ab:
                    58:b7:5e:ff:f1:ad:a1:e8:1e:f3:d3:e3:d8:8e:4d:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DA:F0:F7:54:86:D6:AB:2B:D3:F7:09:C0:E8:13:04:22:23:49:AC
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:b7:d6:56:6f:ca:d6:d4:be:1a:9d:55:2c:5c:62:a0:d1:
         8c:a4:2b:82:b1:23:61:84:2e:67:7c:37:d3:40:f7:d9:32:87:
         60:06:85:c1:c1:24:d2:06:18:11:9e:5b:35:bf:ec:9d:b2:82:
         d0:76:00:23:ca:37:fa:1b:3c:77:95:43:d5:4f:1c:f8:06:bf:
         17:d7:29:43:c0:a2:bf:d4:b6:11:6d:40:64:db:3e:55:3c:aa:
         2c:ee:b0:e0:02:92:8d:22:49:d8:97:fc:57:11:14:b7:9e:4e:
         10:18:6f:f9:2f:fd:25:f0:27:61:09:24:d8:16:32:c7:d9:c0:
         f8:ab:27:8c:5e:2e:2e:7c:66:55:90:d9:7d:b9:59:91:a5:12:
         bc:dd:a3:40:64:86:e6:07:4c:1c:85:03:96:a9:bc:9a:95:57:
         75:21:af:8a:a5:11:77:b6:9b:64:14:08:cf:17:10:dc:91:40:
         ba:d8:44:19:9d:06:61:d1:98:c5:17:15:9f:06:50:bf:0c:63:
         36:52:9f:f2:be:27:c6:59:3c:71:30:71:a2:b1:1e:59:b9:aa:
         b0:cb:e2:01:84:9f:0a:72:f2:06:60:a4:67:ee:11:5d:58:09:
         6b:b3:d2:54:6d:41:f2:42:a9:9c:50:8e:a3:1f:e1:f8:a4:10:
         b5:8c:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:55 2025 by rpki-client