Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139352e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          9AFlNZIz+LOCWK40SBoxnkgoTjaCsLCzAOFgBeRp28U=
Subject key identifier:   84:1C:DD:D6:9A:81:89:D2:19:AC:20:4F:F2:EF:28:21:11:F4:A0:C5
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       74AF2F24907066A664CD9BEDC8D06052BC0D34CA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:02:58 +0000
ROA not before:           Fri 26 Sep 2025 03:57:58 +0000
ROA not after:            Fri 25 Sep 2026 04:02:58 +0000
asID:                     18059
IP address blocks:        202.78.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:af:2f:24:90:70:66:a6:64:cd:9b:ed:c8:d0:60:52:bc:0d:34:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:57:58 2025 GMT
            Not After : Sep 25 04:02:58 2026 GMT
        Subject: CN=841CDDD69A8189D219AC204FF2EF282111F4A0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:3c:fe:21:ce:6a:52:30:50:85:84:fe:c9:
                    ad:b4:49:ae:a6:7f:be:08:e6:ab:e4:cd:2b:7f:eb:
                    d5:8a:47:ea:dc:80:2f:0f:a8:9e:08:1f:d6:9c:7f:
                    a9:a9:85:ef:52:b4:27:74:88:1c:0d:17:c3:4b:84:
                    f0:37:e0:91:c7:6e:67:a8:4c:a8:b7:70:52:cb:05:
                    c3:c2:ca:c9:b6:e4:05:74:cf:f9:66:e2:bd:9d:51:
                    01:9f:c6:24:c1:24:bd:ff:55:84:c4:18:4e:4d:d9:
                    44:04:33:98:a9:08:67:a4:38:ee:37:73:50:73:ff:
                    52:34:2d:8c:82:20:21:dd:18:f2:b7:54:83:56:5e:
                    53:9c:67:d3:08:57:5a:7f:54:d8:fe:5d:a7:ae:7d:
                    2d:7f:8e:af:9f:4d:a2:05:74:24:e0:97:cc:88:a0:
                    24:4c:2f:fe:e6:f1:52:c9:c9:91:4c:cf:d1:5c:26:
                    cd:58:1f:92:17:a5:fb:fe:a2:4e:b8:61:3b:30:98:
                    33:75:da:3a:2e:2d:e0:d4:1c:81:93:91:2c:78:f1:
                    ef:ec:bd:59:77:29:d1:70:a6:d9:d7:f6:5e:fb:87:
                    4f:6c:e9:f6:46:31:be:59:3c:d5:e0:34:d3:9e:a7:
                    ec:39:af:8d:96:c1:87:cc:fc:85:8f:6f:5c:18:8e:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:DD:D6:9A:81:89:D2:19:AC:20:4F:F2:EF:28:21:11:F4:A0:C5
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:52:4e:5e:7d:5c:bd:63:b7:b9:29:f1:d9:7e:d0:c7:a5:
         94:f0:32:6c:6f:5e:f0:65:dd:8e:fa:7d:46:a0:4f:c2:86:ec:
         88:f2:12:f7:d2:f0:80:97:76:23:03:86:a2:ec:cd:b6:a0:4c:
         d9:6d:6f:e9:64:6e:93:c0:49:5b:bf:7b:ef:38:08:63:ce:5c:
         98:fe:42:cb:31:a4:a9:11:ad:3b:0f:99:e4:52:9e:78:7b:1b:
         ea:51:b9:35:7f:a6:d4:60:14:a7:a0:76:66:7c:19:9a:40:93:
         c0:a1:cf:57:f3:e3:7d:39:9f:14:48:44:c3:bc:07:99:b3:91:
         95:c7:e1:11:5f:2b:13:f2:a9:39:78:64:6b:54:68:4f:6e:b9:
         fa:2c:64:61:86:c8:07:b2:36:e1:40:43:a7:87:83:8a:47:83:
         36:d3:01:20:9f:bf:ac:7f:91:72:9c:a4:c2:7e:9a:73:b5:ac:
         b9:b3:c7:af:c0:94:fb:c0:47:91:9b:10:1e:1a:9e:c1:65:f0:
         8b:ce:54:92:51:b5:49:f5:00:92:56:46:57:60:84:10:3e:a2:
         f6:3f:e2:e0:f4:16:96:aa:cd:e3:c6:a2:9f:14:bb:bb:45:bd:
         4b:d4:4d:05:ae:9b:b6:15:a0:d4:e5:3e:e5:ed:e6:23:84:cd:
         59:12:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:35 2025 by rpki-client