Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e33302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          g4Wzm4NKFOFZU648BTbS/DcM6bvVqyldCtGdW4TltV8=
Subject key identifier:   40:DB:3D:DD:DF:CB:76:95:86:04:26:B6:86:52:3C:BE:E5:BC:1E:48
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1CBD5EDBB733C4FB8EAA44B217ADF224A76195A9
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 24 Sep 2025 12:00:01 +0000
ROA not before:           Wed 24 Sep 2025 11:55:01 +0000
ROA not after:            Wed 23 Sep 2026 12:00:01 +0000
asID:                     18059
IP address blocks:        122.128.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bd:5e:db:b7:33:c4:fb:8e:aa:44:b2:17:ad:f2:24:a7:61:95:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 24 11:55:01 2025 GMT
            Not After : Sep 23 12:00:01 2026 GMT
        Subject: CN=40DB3DDDDFCB7695860426B686523CBEE5BC1E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:c6:58:5b:6b:d5:9e:d8:f2:c4:83:7d:93:
                    7e:2e:00:b3:26:58:79:cd:20:ab:19:5e:61:d8:18:
                    21:35:d3:51:7c:ea:0a:9e:ff:98:6a:89:93:4e:ac:
                    ef:56:04:47:9f:1c:9d:ae:9e:5d:3d:03:da:f6:63:
                    a4:36:94:fa:5c:80:af:20:f4:b9:7b:dc:18:84:da:
                    b0:2d:f3:32:e3:d9:ef:69:5c:c0:ba:a8:e7:e2:e9:
                    a7:16:1d:94:2a:b6:a8:a6:17:8b:ca:c7:27:c6:f2:
                    c5:c6:60:f4:ac:ed:a2:6f:c5:ae:ed:6d:c9:00:67:
                    7d:a5:3d:1e:d4:8b:e3:bb:05:1b:d3:4a:03:bd:9e:
                    17:37:85:65:ba:98:07:40:6e:77:b1:de:d3:b7:b9:
                    3b:39:de:dd:2d:6e:60:bc:b6:4a:43:83:06:d5:30:
                    dc:80:eb:2c:97:98:1b:e0:51:f0:ab:a0:0f:32:03:
                    27:7d:c5:ef:de:2a:62:1e:dc:d6:3f:d6:8e:cd:63:
                    3f:c3:9b:5d:21:61:6a:25:a1:fe:2b:b2:60:b5:5a:
                    a1:6d:50:32:ed:f9:94:5d:e1:ff:05:6f:d8:b3:06:
                    5f:9a:be:a5:a1:42:d8:99:a4:22:d5:fc:5b:81:5c:
                    ee:9e:ac:f0:fb:78:97:f3:b7:dc:80:31:67:e3:06:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DB:3D:DD:DF:CB:76:95:86:04:26:B6:86:52:3C:BE:E5:BC:1E:48
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:a7:47:e5:46:24:66:bf:21:8d:3c:37:10:08:17:92:65:
         ed:8f:b1:c3:8a:62:22:5d:84:b4:af:18:3b:84:56:76:14:1a:
         3c:ac:4d:a0:a9:44:bb:86:72:88:9d:68:ee:bb:13:cb:39:4e:
         e7:a4:86:11:db:1c:ac:b1:7a:45:b8:31:22:be:f3:92:00:af:
         ad:07:5a:4e:15:0e:29:a5:b9:d4:a4:e9:15:48:cb:62:84:ed:
         ab:c9:ea:12:b8:a4:41:a0:e2:b5:26:a2:6b:ec:aa:dd:4e:d9:
         7c:37:53:49:71:23:a4:e1:15:5e:3c:a7:6f:4d:38:86:20:16:
         26:1b:54:b5:b2:82:59:f8:63:c3:34:7a:17:56:a7:66:be:25:
         ad:82:05:40:f7:a4:dc:93:97:78:46:3d:4f:cd:9f:ca:c2:d5:
         2c:29:97:15:88:ec:1e:35:18:bb:4b:54:75:fc:6d:72:2c:df:
         79:33:73:44:e6:f7:08:cb:83:51:15:90:e1:b0:43:68:08:58:
         ca:eb:18:04:ff:f0:c4:7e:63:eb:ff:ec:6b:ee:6b:03:bf:4d:
         ff:d1:f2:95:6f:77:85:dd:38:0b:e6:8a:58:16:13:bd:7c:d5:
         ae:49:70:d5:a9:ee:a1:4c:d5:48:8e:f5:7a:c5:c1:70:65:cb:
         42:52:19:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:44:48 2025 by rpki-client