Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          22mlxF2njkrfq1JDFDnNArjtfaalZvzQlmwYVzeZb9E=
Subject key identifier:   E7:66:71:31:1C:DA:31:42:DD:0F:9F:F2:32:CD:10:A1:A6:E6:4F:B5
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       25295A92077E26D2A81CEEE47DFB3B673EA7E661
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:03:00 +0000
ROA not before:           Fri 26 Sep 2025 03:58:00 +0000
ROA not after:            Fri 25 Sep 2026 04:03:00 +0000
asID:                     18059
IP address blocks:        202.78.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:29:5a:92:07:7e:26:d2:a8:1c:ee:e4:7d:fb:3b:67:3e:a7:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:58:00 2025 GMT
            Not After : Sep 25 04:03:00 2026 GMT
        Subject: CN=E76671311CDA3142DD0F9FF232CD10A1A6E64FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:70:54:8d:c2:fe:0b:5a:b4:d0:66:d9:9c:
                    c6:2d:5b:55:a1:39:e7:d4:84:ad:e3:a5:35:b6:1e:
                    5e:bb:c9:f8:bb:91:0d:df:f1:16:70:c7:46:d4:0a:
                    6d:38:d1:a1:e8:ea:58:d7:e5:51:9c:b9:18:85:cb:
                    95:9f:67:1c:6f:c8:fa:9a:d4:93:02:b8:ea:c1:6e:
                    2d:06:e8:d4:f8:c8:63:f5:a2:26:fe:a1:28:b3:a8:
                    9b:74:88:dc:4a:a3:c3:52:33:ad:17:55:43:ba:80:
                    5a:64:3b:d9:54:d0:85:b0:cc:95:bb:f4:2a:a5:70:
                    cf:1f:51:2c:04:50:95:12:5b:df:4a:7c:c2:40:6f:
                    4d:9e:9a:62:61:b5:60:6b:0c:ee:16:54:14:81:b7:
                    21:3b:db:28:55:ab:e3:d7:3f:99:b3:d3:00:1a:19:
                    08:f6:cb:ef:18:ea:b9:c4:9c:db:70:d7:7f:5d:b1:
                    e5:35:77:23:47:2d:8e:5d:ee:f3:9e:89:d5:8c:14:
                    d7:36:5d:50:9e:0d:fd:7e:9d:f5:95:e4:19:cf:d9:
                    2e:25:71:7d:bd:c3:ca:94:41:64:97:78:0e:f4:e3:
                    02:8e:ed:24:de:ec:70:06:fd:fa:dd:f7:a9:d4:33:
                    45:ce:36:54:92:85:e9:bd:b4:82:91:0a:e5:0d:2d:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:71:31:1C:DA:31:42:DD:0F:9F:F2:32:CD:10:A1:A6:E6:4F:B5
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:0e:d3:42:90:24:61:91:ca:b4:53:27:ad:72:ab:70:d4:
         d9:3b:9a:02:91:22:ab:e8:f7:5f:e1:87:e9:b3:d6:39:9d:0c:
         16:f0:6f:b0:5a:82:b7:be:cf:91:e3:c6:32:91:7f:3e:c0:82:
         31:41:62:55:e9:fc:1d:e6:23:85:62:35:c4:77:0c:0f:e2:67:
         f5:d3:a4:a9:ee:4b:7b:87:5b:2f:8a:dc:e1:51:d7:57:d7:9f:
         54:95:33:d5:eb:f4:7a:a4:cd:80:5c:6e:81:98:c9:ee:d4:f1:
         d9:d0:d6:71:4b:57:22:ba:88:d9:f1:a4:16:6e:41:24:ff:74:
         8c:93:06:bf:23:e3:94:48:6f:69:01:83:ae:f4:91:ef:e2:77:
         b0:f3:45:f9:48:a2:14:da:8c:e1:86:7a:63:99:29:6a:79:81:
         2e:ea:af:c1:d1:6c:8e:e6:6c:47:b3:93:66:8e:b4:86:ba:61:
         d7:54:13:34:b4:11:43:d2:25:a3:92:90:0a:4d:bb:ba:4b:1b:
         b9:c2:c7:f2:3a:26:87:7e:d1:17:c1:17:9f:82:78:7c:3f:c7:
         1b:25:15:a2:32:0b:b9:7b:2f:b0:49:78:18:23:15:fc:74:fb:
         39:76:44:87:aa:23:49:4b:b8:01:2c:21:79:30:cf:08:97:33:
         cc:ea:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:43 2025 by rpki-client