Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32362e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          Fq33HaiX69C+6qV4XetDVTpQ/zPzK0XAZVEnkT7iMZQ=
Subject key identifier:   F4:14:32:F0:F8:5F:AD:CF:2A:81:8F:55:A6:61:5F:85:C3:E6:7A:00
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2483F672138BA76C519DBE3FD67BB2F053C39E0C
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32362e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 24 Sep 2025 11:00:01 +0000
ROA not before:           Wed 24 Sep 2025 10:55:01 +0000
ROA not after:            Wed 23 Sep 2026 11:00:01 +0000
asID:                     18059
IP address blocks:        122.128.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:83:f6:72:13:8b:a7:6c:51:9d:be:3f:d6:7b:b2:f0:53:c3:9e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 24 10:55:01 2025 GMT
            Not After : Sep 23 11:00:01 2026 GMT
        Subject: CN=F41432F0F85FADCF2A818F55A6615F85C3E67A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:36:24:a6:62:3e:47:06:10:57:ef:b2:1f:1e:
                    71:a8:07:f2:86:d3:76:1b:9e:78:df:d8:2e:d9:e8:
                    94:3d:0e:79:8f:20:40:61:7e:c0:7e:59:9c:66:9c:
                    da:e0:a0:bc:45:b6:f8:74:6c:d0:78:77:36:5d:41:
                    b5:49:13:dc:f3:aa:20:6d:4d:f3:5e:e7:b7:b6:b0:
                    59:b6:51:4e:83:40:65:7e:e5:14:ca:a1:b2:fd:ea:
                    41:13:98:c1:4f:58:3e:c4:3b:fd:29:b7:eb:8c:e0:
                    37:93:6d:51:12:e5:cd:58:7d:94:cb:d4:ed:f7:bc:
                    f8:bd:44:e7:b8:f8:16:5b:79:eb:55:5c:cd:b6:14:
                    ed:54:69:85:42:38:ec:29:bd:7b:65:07:3e:1d:3f:
                    2c:ac:3f:ed:55:6e:13:7f:53:55:d6:39:ff:37:f9:
                    b8:e3:a4:60:93:6d:14:01:d1:d0:98:f6:a7:80:a7:
                    20:69:73:20:d4:c8:a5:f5:18:36:80:ee:9d:d8:39:
                    f0:eb:53:9a:6f:3a:40:b0:28:47:bb:bb:76:79:0c:
                    59:16:50:cd:71:54:03:9d:16:15:01:e8:af:e3:3c:
                    e8:a5:a3:94:ba:bc:c4:4b:ab:13:dd:7e:1d:db:fd:
                    b9:ca:f5:43:28:e9:9d:c6:0c:e5:6d:cc:7a:16:0b:
                    c2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:32:F0:F8:5F:AD:CF:2A:81:8F:55:A6:61:5F:85:C3:E6:7A:00
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9f:98:56:92:09:22:85:1e:ba:0e:00:be:0c:87:46:e2:1c:
         45:3d:aa:ef:97:98:db:54:10:c0:d7:c5:bf:24:a6:10:7e:72:
         79:0b:15:0b:d6:4f:69:9d:38:0c:76:ee:d6:78:80:76:92:12:
         b9:eb:9c:f8:99:21:45:96:ba:ae:44:5a:24:c6:5d:ea:c5:d6:
         9f:ac:41:01:ba:a1:6a:2d:be:3c:d5:fa:08:d8:2a:8b:cc:24:
         94:e9:af:7d:18:95:3d:1b:d3:ee:16:ce:33:fb:25:2c:f4:ac:
         cd:eb:50:49:03:10:61:26:b0:ba:f9:15:2a:4e:6e:45:a5:a0:
         c0:e2:55:5f:c5:36:18:2f:f0:53:8f:41:f3:21:20:03:04:2e:
         29:64:c3:8e:4c:c9:c2:bd:9e:68:d9:81:57:2b:70:1c:dc:14:
         04:85:7d:c8:c0:a1:b7:c1:c6:03:ee:ce:b6:a4:e2:a7:0d:ac:
         ad:5e:8d:ff:b4:e6:1b:e7:68:46:5c:15:cb:3a:d7:91:46:66:
         55:c8:30:90:56:ae:bb:5b:e7:11:41:85:75:dc:ce:82:00:f4:
         79:cc:92:2c:ca:2c:3c:0b:3d:7e:31:07:dc:97:4b:7b:ad:e6:
         8d:0d:a2:56:45:26:e0:30:fd:bd:46:0a:b3:c0:db:24:26:35:
         c1:f0:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:35 2025 by rpki-client