Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          lfL1npNeIkf2RiuXv4kEJMN5ypLhuuZutCpT3JZALVs=
Subject key identifier:   ED:FA:86:A1:22:63:5B:F9:99:90:79:3D:4E:CE:CE:18:EC:E8:6A:1A
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1564D0D6CCC8136769EA4663605A5B50944DCE0C
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 24 Sep 2025 11:00:01 +0000
ROA not before:           Wed 24 Sep 2025 10:55:01 +0000
ROA not after:            Wed 23 Sep 2026 11:00:01 +0000
asID:                     18059
IP address blocks:        122.128.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:d0:d6:cc:c8:13:67:69:ea:46:63:60:5a:5b:50:94:4d:ce:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 24 10:55:01 2025 GMT
            Not After : Sep 23 11:00:01 2026 GMT
        Subject: CN=EDFA86A122635BF99990793D4ECECE18ECE86A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:95:27:66:33:6b:ca:06:8e:5c:f2:0e:a0:
                    15:bc:93:2f:8c:ab:3d:09:b5:a5:de:1b:57:69:0a:
                    ae:6e:59:9b:81:ad:bd:cc:72:b0:2c:b1:90:ca:80:
                    65:90:b0:f3:da:08:ad:24:6e:a6:d8:16:9e:b3:d6:
                    6f:83:8d:61:4f:59:ca:2d:d6:02:2f:b8:f4:90:0a:
                    05:c2:50:76:e7:46:82:1a:9c:ed:30:4b:bb:92:ae:
                    8f:f6:ca:15:07:de:db:b9:77:4a:d2:e2:bb:01:13:
                    cc:8b:2d:3b:d0:67:a1:ef:8c:da:00:6c:60:30:74:
                    17:b0:7a:cf:bf:ff:88:9a:44:50:ac:e0:3d:bc:9d:
                    ec:5a:4a:5a:c7:fb:00:ce:c7:f0:36:ab:22:a8:87:
                    39:99:ef:2a:ac:69:6b:d4:86:1d:37:1b:cc:60:7e:
                    08:a2:5d:29:06:54:0e:f7:52:e3:3e:5e:d6:99:b2:
                    13:f8:2c:20:40:92:3a:52:9c:c3:40:d9:35:f1:4a:
                    83:ec:7e:18:fd:9f:02:da:d7:e5:2d:69:fb:58:f3:
                    f3:74:89:a6:16:c4:1c:c9:29:2b:14:94:12:ab:0c:
                    e8:a8:ce:08:20:4f:a5:76:fb:8a:2d:bc:09:c7:d0:
                    14:ae:74:ce:2d:6b:26:93:1e:93:da:96:11:e3:b4:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:86:A1:22:63:5B:F9:99:90:79:3D:4E:CE:CE:18:EC:E8:6A:1A
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:8c:c7:da:c6:f8:da:d6:5f:e8:87:ce:27:ff:06:2c:81:
         86:99:02:f0:49:8c:ea:8d:60:6b:29:1d:7a:6e:b2:20:9c:98:
         cd:20:b8:d2:7f:e5:f6:5d:b1:bd:a3:0f:ea:8e:8e:10:3f:73:
         07:85:7d:ef:f6:f0:34:eb:a2:9d:0e:5b:ca:4d:d1:07:24:35:
         1a:80:cb:40:01:04:0d:63:e0:b4:af:1e:d8:5f:6f:b2:59:6d:
         0c:75:f6:29:e9:65:83:6b:47:57:e9:ac:b9:76:5a:c3:83:69:
         0c:c7:37:67:f9:52:a7:82:54:02:bb:ed:52:07:33:f6:37:64:
         2c:2f:6d:63:a3:7d:38:bc:22:f5:d7:8a:81:3e:67:e6:d5:ac:
         d4:01:2f:b2:c1:64:45:e5:77:d3:14:aa:7e:ec:e1:f2:55:ac:
         9d:7e:e3:15:fe:83:38:74:c4:00:43:f9:59:3d:4a:8f:40:6a:
         34:bf:49:39:76:12:f0:97:65:c5:0b:a6:aa:2c:fd:c5:94:ef:
         eb:47:86:d3:2c:80:c7:5b:85:29:8f:01:05:f9:78:ac:8f:80:
         06:99:87:11:93:28:fa:12:75:6e:40:af:c5:49:78:22:c1:82:
         b3:e2:de:7d:16:ce:ac:b7:c0:66:db:99:c8:cf:94:81:ed:7c:
         b8:71:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:31 2025 by rpki-client