Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          g4hVaVf9DOtfqhmHz5N0bEmkStUlA25ce7Ah4ERrvdM=
Subject key identifier:   F7:94:EF:4F:B2:5B:EB:F2:A4:80:CE:68:C9:5E:B4:47:4F:DA:EC:C9
Certificate issuer:       /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial:       704E667412EB33E6CE58B2832A03E26C68B5E4C6
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa
Signing time:             Wed 15 Oct 2025 12:43:43 +0000
ROA not before:           Wed 15 Oct 2025 12:38:43 +0000
ROA not after:            Wed 14 Oct 2026 12:43:43 +0000
asID:                     18393
IP address blocks:        203.77.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
                          rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4e:66:74:12:eb:33:e6:ce:58:b2:83:2a:03:e2:6c:68:b5:e4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
        Validity
            Not Before: Oct 15 12:38:43 2025 GMT
            Not After : Oct 14 12:43:43 2026 GMT
        Subject: CN=F794EF4FB25BEBF2A480CE68C95EB4474FDAECC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:94:f1:ea:19:08:af:dd:4f:a6:f2:d7:a8:
                    28:45:53:8f:18:70:90:2d:69:13:4f:0a:5b:60:23:
                    81:6c:c1:8b:c1:c1:82:d2:c2:28:c7:7a:de:c9:95:
                    1f:3a:9b:46:de:06:c2:cd:3d:c4:bb:eb:e9:a8:99:
                    fa:9d:e7:78:76:89:76:2f:0e:2e:8c:2f:27:8f:51:
                    f8:0b:bd:fa:c1:b3:62:f7:65:e2:76:31:ab:ed:6b:
                    01:39:9d:fb:ba:d8:d5:d1:d0:ae:1c:4c:8c:66:74:
                    f1:72:23:96:54:b1:ec:2e:01:16:8f:6d:f2:05:58:
                    8b:b4:ac:b2:fa:06:e2:3c:fb:5f:f4:2b:bb:76:9a:
                    15:d7:79:ae:a6:0f:6b:3f:92:78:6d:68:2e:3d:69:
                    94:b3:db:7d:12:a7:e6:da:ee:42:c9:60:bd:be:63:
                    68:5f:27:17:0f:4d:4c:6b:f7:7e:b6:92:20:2d:06:
                    68:6b:cd:80:2f:22:19:ee:35:d5:29:b4:02:00:8a:
                    9f:63:81:df:80:87:1a:4a:f0:f5:d8:f2:ff:64:27:
                    16:a3:16:cc:3c:32:5d:4a:1f:00:48:5a:8c:b3:8e:
                    49:8c:44:66:78:4b:4f:4a:b9:01:4d:48:d4:90:cf:
                    15:ef:7b:6d:af:23:92:2f:fc:bd:97:1f:3f:93:87:
                    f5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:94:EF:4F:B2:5B:EB:F2:A4:80:CE:68:C9:5E:B4:47:4F:DA:EC:C9
            X509v3 Authority Key Identifier:
                keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231352e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:cd:f4:0b:0c:ea:b6:91:5f:34:f6:85:63:eb:19:95:9e:
         1e:14:b1:52:e8:91:21:3d:3d:19:44:e8:3b:dc:28:3b:6f:31:
         52:a7:7b:b8:63:ac:a4:4a:ea:80:46:c0:2a:0a:20:b0:10:bc:
         82:ad:49:02:00:44:e2:65:ff:c5:56:96:ce:80:9f:9c:f2:e0:
         64:cc:20:2d:65:60:4d:ca:30:2e:76:5a:d3:a5:24:d0:61:6a:
         ad:b5:6c:04:0d:80:d1:39:a7:b8:0c:30:25:d6:9e:3d:f1:13:
         00:58:52:d4:25:c3:1d:ca:71:01:cf:22:71:f7:fc:db:14:19:
         96:70:84:04:84:5f:c7:6f:c5:df:8a:f9:03:df:96:3c:59:76:
         f5:b0:d9:fc:5e:90:6d:50:db:e4:da:40:f8:15:03:e0:94:88:
         e2:68:40:e1:11:30:d9:0d:2f:ca:c5:21:21:1a:a0:2a:6a:f7:
         01:10:07:3d:a2:14:2b:e7:ee:1f:f7:27:7e:96:16:f0:10:53:
         85:37:9a:0c:35:9e:09:5a:87:1d:ea:22:9a:a1:cb:e7:71:88:
         d4:b9:7d:3c:87:e2:a5:21:1c:fc:88:8f:f9:4c:29:a8:9c:be:
         6c:3d:f2:ba:bd:73:d6:5f:a0:48:a2:68:01:8f:17:7d:ec:a2:
         ff:2b:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:47 2025 by rpki-client