Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          0xxFOLf/6koMhGzcQfSFolx4Pf39+A7zbUOk9Q0J1O0=
Subject key identifier:   90:BC:27:FA:22:0A:D0:85:FF:A8:3D:D8:3A:BD:7B:21:FF:82:5A:2C
Certificate issuer:       /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
Certificate serial:       0F1462C0F1177F0F2353C72783E03BB1862501
Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa
Signing time:             Wed 15 Oct 2025 12:45:15 +0000
ROA not before:           Wed 15 Oct 2025 12:40:15 +0000
ROA not after:            Wed 14 Oct 2026 12:45:15 +0000
asID:                     18393
IP address blocks:        203.77.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl
                          rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:14:62:c0:f1:17:7f:0f:23:53:c7:27:83:e0:3b:b1:86:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8
        Validity
            Not Before: Oct 15 12:40:15 2025 GMT
            Not After : Oct 14 12:45:15 2026 GMT
        Subject: CN=90BC27FA220AD085FFA83DD83ABD7B21FF825A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:dd:e0:58:01:46:78:51:b3:67:ab:30:81:
                    95:a6:b3:03:02:ae:e6:e7:05:70:c7:4e:b3:7c:8c:
                    6a:57:a8:48:98:3c:71:4f:4c:bf:d9:fc:ce:8f:c6:
                    77:8f:74:67:6c:23:18:22:33:d5:8f:70:1c:42:dd:
                    0d:de:ff:84:56:96:f0:7d:19:41:19:d5:d7:5b:e3:
                    0e:f6:77:9f:98:c5:b5:59:9d:50:a0:8a:c5:2a:b1:
                    ab:70:8e:bd:af:cf:39:cd:fd:fe:7a:5b:94:b7:63:
                    78:72:cc:2b:e7:65:6e:7d:53:ce:3a:7b:28:d9:d8:
                    ff:e2:1c:d4:81:ad:bb:24:b4:fe:2e:1d:49:a4:fb:
                    e0:0b:15:8d:97:a9:c8:8d:a0:4c:ce:7e:cb:69:d9:
                    9f:a7:5e:14:bc:97:18:83:b7:24:9d:b4:f0:7f:69:
                    68:5b:77:11:a2:2d:38:31:e2:47:aa:21:f2:6f:9d:
                    fe:b9:7f:c2:e7:7d:71:ef:bf:72:66:ec:44:e0:ff:
                    f2:56:17:a2:09:70:24:50:8f:d9:ca:e1:1b:dd:f8:
                    67:e2:71:3c:74:e0:72:3c:cf:91:58:c2:9c:93:d2:
                    69:35:f5:2c:47:de:0a:c1:68:ed:bb:77:6b:4d:57:
                    36:91:a1:1a:f5:7d:18:15:1c:07:2e:75:36:42:3e:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:27:FA:22:0A:D0:85:FF:A8:3D:D8:3A:BD:7B:21:FF:82:5A:2C
            X509v3 Authority Key Identifier:
                keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232312e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:04:e6:3f:42:ca:2c:74:ab:54:36:b6:0e:d8:a1:11:04:
         8e:4b:d4:92:7e:6a:b5:d2:da:68:49:13:88:62:6c:12:b9:7c:
         78:f7:d3:97:33:1e:e1:6f:f1:73:68:90:b0:7d:45:1f:a5:be:
         d5:f2:54:6b:2d:0d:e8:2e:28:15:2d:67:4c:63:fa:a8:d1:c0:
         5d:dd:cf:1f:c8:0a:ea:53:6e:87:da:9f:0b:ad:66:64:5a:59:
         87:47:8a:49:99:41:42:59:23:47:1b:25:e8:76:36:dd:bc:99:
         ae:50:74:a1:d7:c2:61:36:27:d8:06:6e:e1:b9:8b:65:ae:db:
         39:90:15:83:8c:94:e6:27:b3:20:08:06:39:f0:df:92:bf:31:
         1f:f3:83:7b:63:60:94:89:a2:1c:e4:83:4c:86:23:ac:4a:af:
         ba:05:9a:42:d4:bd:2c:b4:48:03:5d:ef:07:d6:66:fd:33:5d:
         4f:93:77:92:e6:cb:11:92:da:ae:15:0d:cf:48:74:fb:06:7b:
         0d:d8:03:d3:aa:38:6c:ed:0f:35:23:74:f2:48:90:87:02:8b:
         31:9c:6e:f7:33:44:d4:2e:0c:d7:bd:8c:d9:8a:e2:70:dd:52:
         6c:50:31:7d:49:ba:cf:f4:e0:c1:66:ff:08:08:94:f9:2d:7b:
         74:5a:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:53 2025 by rpki-client