Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          FTuvZoxWRZeBaRmh1oYghVc20okVB2lggjbmWmFC6gw=
Subject key identifier:   65:59:E3:9D:47:ED:BD:16:42:D6:73:DE:8A:A5:C4:A6:ED:DC:E7:E4
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       484CF4248C1943E9A298B053A1EE68102076D0B3
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 16 Oct 2025 16:00:01 +0000
ROA not before:           Thu 16 Oct 2025 15:55:01 +0000
ROA not after:            Thu 15 Oct 2026 16:00:01 +0000
asID:                     9341
IP address blocks:        103.178.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 23:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4c:f4:24:8c:19:43:e9:a2:98:b0:53:a1:ee:68:10:20:76:d0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Oct 16 15:55:01 2025 GMT
            Not After : Oct 15 16:00:01 2026 GMT
        Subject: CN=6559E39D47EDBD1642D673DE8AA5C4A6EDDCE7E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:68:07:a9:a2:e7:22:ad:a9:20:8a:82:ed:
                    14:1e:0d:eb:7e:78:e7:1a:da:7b:48:0d:07:3b:1d:
                    6d:bf:02:db:ed:42:87:e0:a7:a3:a6:d1:ea:c0:d3:
                    50:d7:f2:8e:a4:03:a4:3a:84:8a:e4:a2:76:e6:f8:
                    24:be:73:3b:92:d4:c6:a8:da:bb:96:66:6c:5b:20:
                    6f:ee:86:6d:70:09:23:ed:c6:34:a1:d1:4f:7c:4f:
                    9a:f9:62:18:4a:51:b0:22:c3:88:66:28:e4:a6:a0:
                    da:ef:38:f4:55:9d:5f:47:13:31:0f:70:fe:15:23:
                    37:5f:29:f7:d5:0b:31:92:d2:10:43:12:9c:6c:27:
                    7b:a1:df:f6:fa:b5:de:fc:85:97:ed:80:0d:11:2f:
                    14:c6:db:96:b1:01:a4:84:bb:1c:e4:9b:24:3c:ac:
                    0f:fb:ff:13:46:78:53:87:bf:9d:df:2c:b6:c0:0a:
                    26:84:b2:1e:3f:f9:16:2d:13:a2:0f:4a:86:82:a5:
                    d7:fd:01:ff:00:4c:24:04:71:03:a3:de:cd:53:8f:
                    45:cb:fa:13:8b:54:be:2d:4c:b5:97:2e:1d:2e:b8:
                    6c:94:cb:3a:ab:41:60:78:88:5d:77:70:fb:28:f3:
                    ce:71:e3:92:f2:9d:63:7b:7b:72:56:c1:8a:78:47:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:E3:9D:47:ED:BD:16:42:D6:73:DE:8A:A5:C4:A6:ED:DC:E7:E4
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:51:c5:08:6c:65:96:2a:75:b4:73:b5:20:b2:b0:7f:8d:
         33:0f:56:3f:8e:b4:04:b0:f3:28:2d:6c:0b:22:b6:19:bf:78:
         ea:31:20:ce:1d:e6:f4:95:0a:76:f1:56:d0:1b:f7:a4:15:c2:
         a7:5b:81:b1:8a:d9:77:1a:02:2d:b2:d8:a4:20:5a:e2:3a:36:
         01:12:2e:ea:1f:f1:18:30:be:45:c0:de:85:2c:f0:b9:02:db:
         a7:2c:b5:57:b4:49:16:ad:11:b0:15:49:f4:18:dc:97:cb:0b:
         88:b2:41:e8:fc:57:42:06:c9:1a:75:a1:5b:8d:9c:c5:9e:48:
         48:f2:ea:c3:99:32:92:53:c3:96:72:ba:94:1f:2e:9b:c4:11:
         88:fc:d4:1f:f7:1f:e7:da:69:b5:35:a5:97:f8:4a:6b:ef:0e:
         6f:6c:db:3d:58:02:cf:8a:8a:6e:48:6a:93:32:b0:8f:ff:83:
         b9:56:45:f3:6d:35:e1:55:66:07:06:e0:90:02:3e:31:00:a7:
         4c:50:9c:41:f4:f2:61:e0:2b:42:6d:3d:a2:4d:36:61:96:68:
         fa:2c:d2:a3:9c:4a:34:f0:04:3f:31:96:d4:86:08:46:2f:c6:
         0d:23:ba:65:d7:66:0c:fa:9b:68:7b:31:c5:94:36:11:c6:28:
         e1:5d:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:58:12 2025 by rpki-client