Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          4gwT1HUZTiBF2VJsBDZIrYvkF0xtU3GBfDlgLs35T4U=
Subject key identifier:   BA:C1:E2:38:B2:3B:6A:E3:95:FC:78:CF:6A:E1:51:F2:74:96:3E:73
Certificate issuer:       /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial:       67C299800C87C3B7B89F704F67DE3A824F3B8F36
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa
Signing time:             Wed 15 Oct 2025 12:44:05 +0000
ROA not before:           Wed 15 Oct 2025 12:39:05 +0000
ROA not after:            Wed 14 Oct 2026 12:44:05 +0000
asID:                     18393
IP address blocks:        203.77.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
                          rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 20:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c2:99:80:0c:87:c3:b7:b8:9f:70:4f:67:de:3a:82:4f:3b:8f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
        Validity
            Not Before: Oct 15 12:39:05 2025 GMT
            Not After : Oct 14 12:44:05 2026 GMT
        Subject: CN=BAC1E238B23B6AE395FC78CF6AE151F274963E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:ae:13:b2:95:80:21:28:e9:1f:39:f0:b1:
                    24:be:ef:27:71:45:51:b0:0c:de:5d:5e:d2:2a:e1:
                    0b:7d:a6:81:13:c4:a2:c0:29:50:b0:f8:37:e2:06:
                    c6:98:6f:50:b0:67:aa:f3:15:eb:f5:06:79:d5:2c:
                    6d:0f:ba:82:6d:9a:e5:4a:d2:7f:8f:20:75:2f:10:
                    91:5f:8c:f8:d1:d0:fa:ee:42:a8:0c:d7:5e:f9:0b:
                    09:e3:5b:18:15:3e:06:5a:a2:5e:b4:7b:06:f7:82:
                    fc:46:8f:21:36:5c:89:86:c3:11:3a:84:2e:8e:6a:
                    0e:79:07:52:03:19:25:83:ac:6a:a1:fb:d0:3b:79:
                    fc:1b:8d:d5:1f:ae:13:db:bf:fc:24:dc:c8:c2:8f:
                    9e:a1:47:f8:b2:f1:0f:cf:dc:dd:ad:09:d1:ea:10:
                    76:50:ca:dd:ff:af:37:66:41:3b:74:43:8e:c4:bd:
                    56:d5:8b:1a:aa:f5:9c:02:be:18:d9:6a:3f:4b:0b:
                    ee:29:8d:b8:d9:5b:4d:90:32:ab:64:2f:31:ff:da:
                    22:5e:c2:7b:36:42:e9:d3:95:82:19:31:00:95:56:
                    44:1b:85:40:e3:c2:c7:82:14:f2:34:a5:eb:e2:d9:
                    20:e2:ad:95:03:26:2c:1c:31:23:5a:b6:f1:ba:bc:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:E2:38:B2:3B:6A:E3:95:FC:78:CF:6A:E1:51:F2:74:96:3E:73
            X509v3 Authority Key Identifier:
                keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231372e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:eb:fb:e5:ed:92:c8:94:18:56:3d:fd:a7:e1:dd:bc:66:
         34:d0:4c:07:d9:8c:4f:95:87:3c:bc:c0:5f:29:76:64:78:44:
         2b:38:34:cc:73:27:a2:d5:ae:17:77:14:a0:87:bd:94:58:f2:
         8b:24:a5:cf:06:e9:0b:af:48:0f:9f:c3:7b:ab:96:73:79:15:
         1f:2f:78:e1:78:b1:47:c4:25:95:60:da:43:d1:ed:15:44:45:
         73:49:86:2b:e3:ad:34:5f:f9:88:f9:98:32:2e:c7:46:3b:f7:
         c8:ca:3e:83:ab:11:68:5d:f5:fc:77:2b:5b:55:f1:7d:4c:7c:
         9d:44:68:33:63:54:25:ff:0d:42:20:6f:80:b9:68:e5:c5:f8:
         28:cf:c0:05:96:68:e0:d8:8f:59:a7:34:df:82:25:e2:90:f9:
         55:81:d9:2c:b3:fe:f2:50:ab:40:62:de:ab:3d:f9:9d:b3:dc:
         06:56:ec:48:fe:12:82:32:b9:aa:63:17:c1:ef:6c:91:3f:3e:
         fd:79:28:af:55:cd:75:81:f8:a2:16:cf:fe:b6:fb:a5:aa:a6:
         da:38:e7:d2:fe:ec:5d:77:8c:b6:74:7d:b1:fe:c4:f1:41:84:
         88:c6:02:ac:ce:c3:51:75:03:9a:f6:c5:10:11:61:a5:4c:c4:
         55:02:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:53 2025 by rpki-client