Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa
File:                     3230322e37382e3230312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          RnbRzbqlEIHsHU4LkwvFujr8LZIgRtM5MUGZkm9yzTI=
Subject key identifier:   A0:4D:25:E0:30:91:F3:14:04:18:30:4E:66:99:73:4E:30:57:58:2D
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       107A55BA6652BA86039CC39F9C63D44824F71316
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 26 Sep 2025 04:03:02 +0000
ROA not before:           Fri 26 Sep 2025 03:58:02 +0000
ROA not after:            Fri 25 Sep 2026 04:03:02 +0000
asID:                     18059
IP address blocks:        202.78.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7a:55:ba:66:52:ba:86:03:9c:c3:9f:9c:63:d4:48:24:f7:13:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Sep 26 03:58:02 2025 GMT
            Not After : Sep 25 04:03:02 2026 GMT
        Subject: CN=A04D25E03091F3140418304E6699734E3057582D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:08:6c:32:18:ad:eb:1e:ac:3f:09:e1:57:
                    7c:e7:33:d8:14:b8:cd:35:3c:db:84:5a:ff:cf:12:
                    8a:63:dd:b4:a3:e8:7b:9d:91:43:88:b6:08:1f:17:
                    19:ef:9d:0e:76:da:c8:f0:97:9d:3f:ab:23:67:0a:
                    de:c1:bf:fa:3a:60:07:aa:aa:22:e2:7f:a9:b6:67:
                    78:44:7f:6e:ea:1a:c1:30:ba:ab:54:92:c7:5e:9f:
                    05:79:e7:f6:de:44:71:dc:6d:7e:80:f1:92:0e:88:
                    21:ad:41:68:a0:a1:d6:c9:f1:d0:8e:08:e2:b3:97:
                    7f:8b:95:56:88:ab:9c:9d:65:b2:74:53:78:32:63:
                    f3:ff:26:4b:ea:7e:03:c2:90:d2:8f:18:95:af:43:
                    75:01:ce:13:39:35:62:03:d2:d8:5f:84:e3:7e:71:
                    d1:a6:3a:f9:f1:2c:52:86:c0:68:51:db:0f:e1:c1:
                    bf:d9:bc:7a:02:ed:2a:f1:1c:4e:4f:7c:94:fa:f0:
                    8c:5a:fd:fb:a1:eb:38:fc:2f:3c:7f:df:c9:9d:f7:
                    cc:a7:17:10:19:0d:9b:38:f7:58:f1:51:c9:35:d6:
                    bb:be:5c:c1:65:df:f6:9d:50:56:1c:b3:d8:0d:6d:
                    ce:72:f4:20:1f:3f:40:f2:aa:9e:c2:cc:ca:de:29:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:25:E0:30:91:F3:14:04:18:30:4E:66:99:73:4E:30:57:58:2D
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:c2:5f:47:e8:af:c0:e6:40:9f:87:39:78:c4:5a:ca:e0:
         13:8c:5a:19:fc:6f:c6:4f:cb:90:30:d0:4f:18:38:08:f0:62:
         51:db:cc:72:68:84:1c:e3:eb:d9:47:77:dc:92:0f:9c:83:07:
         7a:b7:21:83:95:19:87:a2:c1:be:f3:8c:73:14:b2:f9:cd:91:
         fb:0a:17:eb:e3:ef:1f:f7:e5:a7:94:4e:cd:f7:54:34:12:85:
         67:b6:a0:71:48:8a:58:3e:e1:7a:31:38:47:06:62:05:87:a2:
         27:96:2a:47:8c:82:a6:8b:ab:7b:6e:62:46:07:ae:80:fb:ae:
         49:ca:73:2b:55:f4:2f:3e:8b:e4:09:ab:0c:dd:5b:2e:e2:08:
         75:4c:c0:f4:b2:bd:0a:2d:cf:5f:8a:c5:49:de:35:62:09:5e:
         95:e9:37:f9:2e:3f:6d:ed:78:17:5f:37:ce:e1:40:93:49:02:
         2a:f1:06:9a:98:18:9e:75:77:b2:da:ee:18:49:dc:4f:69:7c:
         19:eb:c5:59:6e:50:e6:31:cd:06:e5:57:e6:93:bf:d9:fb:80:
         59:88:1e:35:68:80:12:5c:3c:c5:4b:ac:11:96:1c:bc:51:ab:
         d3:09:00:3b:56:fc:89:8f:8f:ce:46:79:4e:eb:b0:55:13:fa:
         a3:91:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:47 2025 by rpki-client