Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          iyyv0v9FPRc4OP+Ae13xeuXUyw/NcmfDBPRlMwPk3Tc=
Subject key identifier:   6E:53:2F:79:A7:3C:3F:3A:DA:08:79:11:1A:01:F3:76:B1:18:AE:2C
Certificate issuer:       /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial:       38861AA1E9EEB077BCA5C02449C13E87D81E9AE7
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa
Signing time:             Wed 15 Oct 2025 12:44:19 +0000
ROA not before:           Wed 15 Oct 2025 12:39:19 +0000
ROA not after:            Wed 14 Oct 2026 12:44:19 +0000
asID:                     18393
IP address blocks:        203.77.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
                          rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:86:1a:a1:e9:ee:b0:77:bc:a5:c0:24:49:c1:3e:87:d8:1e:9a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
        Validity
            Not Before: Oct 15 12:39:19 2025 GMT
            Not After : Oct 14 12:44:19 2026 GMT
        Subject: CN=6E532F79A73C3F3ADA0879111A01F376B118AE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:6d:7d:f1:b8:81:4d:77:b4:45:6a:bf:d8:
                    f3:33:31:c7:f4:d5:b3:38:58:df:98:ca:61:8d:37:
                    28:e2:32:43:04:83:91:1e:75:85:ef:d5:bd:d9:93:
                    bf:23:d2:5a:b5:6c:6b:06:7c:53:c9:a1:cf:64:a4:
                    e0:2c:3e:1c:31:c8:be:8f:70:38:25:15:07:77:78:
                    a0:0a:90:c7:88:b5:70:5e:09:ac:6b:19:3f:b1:94:
                    74:92:3d:65:b4:ad:63:8c:7e:b9:6b:8f:17:f4:3a:
                    f1:73:5e:0c:ad:9e:bc:bb:da:ac:4a:f4:aa:9c:82:
                    45:62:60:59:8e:c3:82:bb:ed:9f:ed:be:50:08:05:
                    20:4a:cc:f8:98:b6:e5:01:10:53:42:36:07:b0:63:
                    24:14:92:72:f0:4a:11:ea:cd:48:99:05:3a:37:de:
                    5a:85:5d:bc:14:6f:a3:9e:a4:77:48:1c:b9:55:58:
                    34:4c:68:04:3a:3e:13:a5:8b:a6:bb:ad:60:84:32:
                    50:75:27:10:c2:e9:4b:f5:36:ad:29:42:6f:bb:17:
                    2d:ec:69:be:87:6c:07:0b:43:df:59:a6:a5:95:1c:
                    b4:12:c9:9f:cd:55:97:21:45:76:b1:00:92:ac:37:
                    18:77:39:53:0e:28:86:4b:3a:73:27:e4:37:3e:b2:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:2F:79:A7:3C:3F:3A:DA:08:79:11:1A:01:F3:76:B1:18:AE:2C
            X509v3 Authority Key Identifier:
                keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231382e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:43:64:58:1c:51:14:ee:a8:bf:e2:bd:67:71:0f:55:b3:
         34:d4:81:0f:24:15:c4:53:94:08:7e:ca:70:db:be:0c:8a:ad:
         0a:df:43:58:17:96:e1:3b:10:98:37:c4:86:95:b9:3c:c0:d3:
         7b:e9:66:57:44:f1:67:75:b0:aa:f9:2e:f0:12:76:3f:02:6d:
         9f:fb:67:80:5c:a0:6b:77:5b:5e:44:4c:be:2c:73:11:79:ee:
         43:e9:40:64:b9:91:79:ec:ef:8b:af:20:5c:c5:e6:1c:4f:1f:
         3a:5e:a6:26:f8:a6:ab:87:5c:3d:43:36:3a:7a:b7:e2:fc:bd:
         94:b4:55:4d:d0:70:2a:dc:03:00:d4:7d:e8:c1:d0:2d:3b:5e:
         3b:c3:dc:f9:ff:fc:b6:c0:3b:f5:a7:ac:9d:db:87:d5:be:2f:
         14:00:a3:8d:e3:17:43:2f:bb:b6:b3:bf:07:89:13:b4:f9:71:
         14:3e:a3:a6:8b:9f:cd:f3:23:a7:4e:08:b2:86:0c:6c:36:bf:
         a5:95:ac:72:8d:87:46:ac:24:1e:ec:42:61:45:ee:aa:d3:55:
         5d:5c:af:4f:fe:df:65:ce:86:91:de:20:0a:09:40:47:fd:43:
         be:56:85:d1:aa:72:7c:57:aa:f9:bb:10:8d:95:d6:43:15:c4:
         99:a2:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:24 2025 by rpki-client