Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3139362e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          kAFWGEgcj+aoq1nJ7jJTmcPpx2Lob5XwRwg+6UtLFGg=
Subject key identifier:   AC:6E:A0:E1:66:3C:6E:25:9C:55:A6:1A:14:55:CD:1E:4B:42:CA:E0
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       0121B81C66E2F53EB4122B33DD7336F9337315AC
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:03:00 +0000
ROA not before:           Fri 26 Sep 2025 03:58:00 +0000
ROA not after:            Fri 25 Sep 2026 04:03:00 +0000
asID:                     18059
IP address blocks:        202.78.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:21:b8:1c:66:e2:f5:3e:b4:12:2b:33:dd:73:36:f9:33:73:15:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:58:00 2025 GMT
            Not After : Sep 25 04:03:00 2026 GMT
        Subject: CN=AC6EA0E1663C6E259C55A61A1455CD1E4B42CAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:4d:e2:16:c5:ff:54:05:12:80:38:b7:af:
                    d9:8c:ea:bc:63:7f:f3:c6:07:73:5b:82:ba:a9:87:
                    29:39:71:ef:78:d5:ce:9b:b3:4d:3b:a4:6c:a6:0f:
                    37:f6:c3:e2:25:d2:73:01:de:86:5e:75:00:f2:69:
                    df:6c:6e:6e:89:cb:a7:4e:ae:61:42:76:97:51:8b:
                    1f:e5:fd:76:ba:19:73:2d:25:8c:f3:80:aa:de:ba:
                    9b:a8:e3:6e:c9:86:d7:ec:a6:f8:e5:e7:06:48:4b:
                    a8:8b:9f:d3:17:a5:1b:07:a3:4d:e1:b3:47:79:98:
                    1a:a4:7c:50:7f:3f:e2:48:15:59:e2:96:47:7b:13:
                    87:4e:89:ee:85:f2:d6:f2:4e:cf:33:0b:07:d3:0e:
                    6b:46:c5:31:48:bf:43:aa:c2:64:1e:c5:26:3e:0f:
                    e1:db:28:3d:48:8b:d2:28:be:58:ac:c3:09:e5:a5:
                    7c:33:2a:9a:05:b8:3b:19:c3:7e:88:4e:f2:ca:1f:
                    11:94:36:c8:71:9b:05:9c:cd:41:18:3e:75:57:33:
                    16:08:5e:40:86:69:10:ce:5e:81:2a:f2:ae:89:43:
                    68:20:2a:27:15:63:c5:64:69:1b:37:1d:d7:18:d4:
                    46:10:1c:ee:0b:c9:cf:5c:75:05:29:87:24:af:fe:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6E:A0:E1:66:3C:6E:25:9C:55:A6:1A:14:55:CD:1E:4B:42:CA:E0
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139362e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:6a:08:75:0f:7e:92:db:5a:91:3c:04:97:76:e0:e5:1d:
         5a:bf:f8:28:c5:c0:c4:b8:7e:e4:4e:29:80:d9:96:71:2c:81:
         61:e4:34:12:cc:6f:27:02:a8:df:e9:ec:6b:87:ba:ba:f5:78:
         04:63:14:10:dc:9e:0b:eb:8d:a6:90:f9:f3:f5:cf:6c:6a:08:
         17:c9:70:7f:53:9f:f6:0f:15:88:1d:8f:28:21:86:60:92:a7:
         1c:41:3e:fb:eb:1d:ab:2d:df:ad:69:b6:2c:65:b6:72:a4:2a:
         51:5a:3d:2c:14:85:1b:5b:da:d8:40:b5:cd:ba:ad:54:4a:5f:
         7a:45:b2:83:70:42:44:b1:31:af:7d:88:11:c6:eb:1d:e1:c7:
         0a:4b:52:5b:f3:03:6d:ff:a8:f9:1c:c7:44:cd:2e:cd:a0:80:
         4b:9c:1f:a1:55:24:be:e2:26:90:b8:c0:41:a0:89:b6:1f:91:
         21:a9:73:5e:97:7c:bd:0b:66:b3:f9:c9:b9:90:50:a8:b5:a7:
         37:ec:33:d6:7c:64:30:11:65:81:2c:3f:41:b1:80:e3:28:64:
         ff:6f:c8:39:a4:f6:80:ee:eb:fd:5f:eb:19:00:5d:69:20:4a:
         c4:4d:d0:93:5a:77:0b:97:cc:2c:89:b7:9d:84:3a:19:d1:be:
         06:ff:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:29 2025 by rpki-client