Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa
File:                     3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (raw, json)
Hash identifier:          cga9PxYRW2W/2S5ScnKBu2lZ2AUOp8KXxWiIXgyAwvw=
Subject key identifier:   51:FE:B7:95:92:46:27:40:53:51:48:74:C9:8F:5D:70:C3:A8:58:D4
Certificate issuer:       /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial:       6A205D1EE8D1084C7CB4656013EF17AFBAE1C25C
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa
Signing time:             Wed 15 Oct 2025 14:47:54 +0000
ROA not before:           Wed 15 Oct 2025 14:42:54 +0000
ROA not after:            Wed 14 Oct 2026 14:47:54 +0000
asID:                     18393
IP address blocks:        203.77.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
                          rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:5d:1e:e8:d1:08:4c:7c:b4:65:60:13:ef:17:af:ba:e1:c2:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
        Validity
            Not Before: Oct 15 14:42:54 2025 GMT
            Not After : Oct 14 14:47:54 2026 GMT
        Subject: CN=51FEB7959246274053514874C98F5D70C3A858D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:83:fc:d2:99:ef:32:71:75:cc:5e:d7:f7:
                    fd:44:35:24:5d:a2:98:2a:ab:ca:a9:d8:9a:4b:bc:
                    28:28:d2:60:47:b5:ea:05:03:bb:21:cf:b4:49:2b:
                    00:b1:c4:31:8b:52:31:f7:79:c1:95:4b:fd:43:bb:
                    35:8e:c5:99:c6:53:e7:b8:3b:c5:22:b5:11:60:1b:
                    55:37:53:e3:6c:1f:47:6b:83:9d:12:18:9c:48:ae:
                    7f:86:cc:68:87:31:4f:00:b2:35:af:50:1b:ff:47:
                    53:73:a0:2d:96:fc:95:12:03:92:9c:2a:59:fb:40:
                    b8:c4:89:b5:7c:4d:13:ba:ca:18:ed:08:65:32:c0:
                    1f:ef:cd:c3:87:fc:42:62:d3:6a:34:a8:91:ea:c3:
                    69:a1:1d:b4:2a:fb:3e:70:be:c4:02:3a:f7:3f:30:
                    80:0e:b1:33:53:00:62:27:e9:a5:be:70:bd:fc:c6:
                    63:f1:d5:21:29:77:e7:b7:36:32:0a:ca:c9:cc:ff:
                    c5:6c:1f:c9:3e:0e:62:f3:5e:bb:b6:b5:0a:82:e3:
                    d7:03:51:38:59:88:11:0a:6b:96:56:41:2d:b3:6d:
                    8d:a0:d9:2a:23:45:43:bc:52:6d:a2:23:eb:a5:1e:
                    79:33:e2:90:88:52:0c:3c:54:c3:30:38:c8:96:c5:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FE:B7:95:92:46:27:40:53:51:48:74:C9:8F:5D:70:C3:A8:58:D4
            X509v3 Authority Key Identifier:
                keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230382e302f32332d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:07:86:48:b4:cf:a4:e9:d2:91:f2:54:00:3f:90:db:17:54:
         c7:01:4e:43:ab:3a:8f:85:33:db:e1:69:f6:2d:f2:fb:58:ea:
         02:f1:21:86:86:95:4e:ec:8b:04:46:44:06:8e:4f:5a:ac:21:
         34:d7:77:70:30:42:ee:76:ad:2d:0a:04:c4:19:ef:f1:bd:79:
         7e:db:2b:0d:af:f3:1b:85:e1:5b:5b:5e:13:03:cb:32:34:fd:
         96:f7:38:6c:5b:5a:f5:72:39:ff:ae:d3:80:12:a6:b7:a1:1d:
         c6:73:61:6a:75:32:a1:36:59:f5:7c:59:5a:29:78:23:7d:5d:
         ce:3d:2f:21:7c:bd:9e:8e:bc:a6:5f:ac:21:3e:06:04:36:c5:
         09:fa:78:61:3c:bf:ec:04:3b:ad:13:f2:4d:94:e0:93:eb:11:
         ea:44:39:90:58:82:d8:ba:c3:4b:3e:6e:cf:e4:a5:07:88:80:
         c0:2e:b2:c3:ce:a1:35:1b:96:06:2a:dd:8f:1d:4f:68:58:1a:
         b9:31:35:79:fd:94:4b:fa:cd:55:bb:14:56:9e:89:58:ea:40:
         bc:90:fd:00:6e:88:c7:9a:58:0d:3f:7c:6a:c4:dd:1f:5d:72:
         3f:6e:e9:c6:5e:63:ed:a7:e6:5f:6f:16:f6:4d:56:23:5e:8c:
         16:9a:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:29 2025 by rpki-client